Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/34352e3233302e362e302f32332d3233203d3e20323637313433.roa
File:                     34352e3233302e362e302f32332d3233203d3e20323637313433.roa (raw, json)
Hash identifier:          5r0xH3JwJ7a2XOZDYQrWJYjA6gio9x9mClhWdmIEMu0=
Subject key identifier:   4B:EF:62:19:00:1E:4B:9C:FA:1A:11:98:40:97:2A:D0:61:F5:31:EC
Certificate issuer:       /CN=CF3FA66DE9F4F2A2F2083563338953C0D402A5B5
Certificate serial:       0FEFDD321BEB85A85BC1F48CE898BDB367ABF439
Authority key identifier: CF:3F:A6:6D:E9:F4:F2:A2:F2:08:35:63:33:89:53:C0:D4:02:A5:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/34352e3233302e362e302f32332d3233203d3e20323637313433.roa
Signing time:             Wed 29 Nov 2023 14:27:55 +0000
ROA not before:           Wed 29 Nov 2023 14:22:55 +0000
ROA not after:            Wed 27 Nov 2024 14:27:55 +0000
asID:                     267143
IP address blocks:        45.230.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ef:dd:32:1b:eb:85:a8:5b:c1:f4:8c:e8:98:bd:b3:67:ab:f4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF3FA66DE9F4F2A2F2083563338953C0D402A5B5
        Validity
            Not Before: Nov 29 14:22:55 2023 GMT
            Not After : Nov 27 14:27:55 2024 GMT
        Subject: CN=4BEF6219001E4B9CFA1A119840972AD061F531EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:9a:c9:9b:34:2c:fb:4a:cb:04:f5:d7:88:
                    2c:66:45:ba:80:74:80:82:6a:85:0b:ab:56:37:9c:
                    01:81:47:4d:c6:8f:5b:f5:c3:8c:5f:1b:fa:c6:79:
                    a8:04:f3:3f:bc:a4:75:12:ca:09:f9:4d:c4:b8:78:
                    3c:ff:0f:e2:b7:aa:00:2c:e4:24:29:13:9e:eb:7a:
                    57:b2:5f:8a:2c:40:a1:77:26:c8:6b:e4:97:01:22:
                    a0:ec:17:bb:ad:79:bc:cc:70:ae:04:8b:94:55:f9:
                    63:71:52:38:f2:aa:94:89:dd:e1:45:26:49:e8:88:
                    ac:b3:94:69:5c:df:76:ad:e6:2c:31:03:ec:da:7e:
                    85:7a:3f:78:49:39:9c:01:bf:ca:3b:69:fc:a9:ad:
                    2f:f3:e8:1f:bb:7a:47:78:a8:79:01:ab:22:23:43:
                    16:a1:d9:5e:a8:48:a6:d6:a0:27:98:9d:c1:69:63:
                    a6:4d:bf:46:8a:9a:af:db:11:9f:2d:c1:30:69:1c:
                    6b:07:00:99:c9:e0:10:87:25:b7:ff:8a:69:90:df:
                    1c:6c:17:c7:0a:ca:5e:19:01:7a:24:1a:3f:7b:27:
                    68:4c:90:34:9d:ab:63:8e:6a:e0:8d:6d:11:e2:37:
                    44:7e:48:61:63:5a:ee:14:85:76:ed:35:fa:67:84:
                    70:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EF:62:19:00:1E:4B:9C:FA:1A:11:98:40:97:2A:D0:61:F5:31:EC
            X509v3 Authority Key Identifier:
                keyid:CF:3F:A6:6D:E9:F4:F2:A2:F2:08:35:63:33:89:53:C0:D4:02:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/34352e3233302e362e302f32332d3233203d3e20323637313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:33:52:84:c1:a4:00:cc:1e:17:29:50:84:ea:3b:42:59:2b:
         de:bd:67:45:3b:b3:4c:5a:aa:f1:39:33:f7:1f:6f:66:94:df:
         6e:44:8b:10:be:7a:c8:e2:73:f1:39:73:35:16:24:a8:46:ae:
         fa:ab:9b:2e:51:9d:aa:8f:56:e8:26:63:e0:f5:c9:48:79:b4:
         84:71:3c:44:55:c8:f8:d4:af:ad:b1:23:44:e0:bc:be:ae:6a:
         61:ab:24:78:54:1c:24:d8:99:ec:c5:8e:10:3d:61:ce:a0:71:
         1c:14:0a:2f:6a:a3:4e:f1:25:18:74:b1:d5:a4:65:c4:04:71:
         ea:0f:9d:89:01:24:63:78:c1:30:2c:f2:1b:07:3c:f8:aa:a8:
         7a:33:9c:27:bb:99:4a:5b:f9:8a:05:8e:39:31:88:4d:c0:01:
         f8:a9:2b:9b:c2:11:7e:57:52:f4:6a:58:bd:9a:39:12:38:a9:
         09:13:20:d6:6f:a5:f5:85:b4:df:b3:a6:fc:b7:1d:d0:ab:1f:
         17:2d:ea:e8:3d:87:44:29:95:69:9b:cb:ad:0d:f9:82:87:c7:
         3e:1b:c3:f3:6e:31:25:2e:e4:35:0b:9e:29:02:6f:4c:7b:b2:
         00:ab:36:59:ba:27:59:8f:97:26:77:97:f3:fd:9e:f2:63:ba:
         5d:af:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org