Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vMp3YmRuqKzHgXgTGzPYCG7ajLi51sutTdfXbMDs75s/0/34352e3233372e3233322e302f32322d3234203d3e20323638333034.roa
File:                     34352e3233372e3233322e302f32322d3234203d3e20323638333034.roa (raw, json)
Hash identifier:          2QIqI5Vz6a9H52P/JzN9jevQfxk7Me7kxXD6ixq4BX4=
Subject key identifier:   73:2D:81:63:00:FF:D0:48:F3:B2:C4:AF:7B:0B:CC:7E:45:DB:FB:75
Certificate issuer:       /CN=086D6FB7E92D14B2B8C6788623BC3076C8B7BCC8
Certificate serial:       3536252C50F398EDA940ED120967FE45DF47129F
Authority key identifier: 08:6D:6F:B7:E9:2D:14:B2:B8:C6:78:86:23:BC:30:76:C8:B7:BC:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/086D6FB7E92D14B2B8C6788623BC3076C8B7BCC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vMp3YmRuqKzHgXgTGzPYCG7ajLi51sutTdfXbMDs75s/0/34352e3233372e3233322e302f32322d3234203d3e20323638333034.roa
Signing time:             Tue 16 May 2023 14:45:07 +0000
ROA not before:           Tue 16 May 2023 14:40:07 +0000
ROA not after:            Tue 14 May 2024 14:45:07 +0000
asID:                     268304
IP address blocks:        45.237.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:36:25:2c:50:f3:98:ed:a9:40:ed:12:09:67:fe:45:df:47:12:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=086D6FB7E92D14B2B8C6788623BC3076C8B7BCC8
        Validity
            Not Before: May 16 14:40:07 2023 GMT
            Not After : May 14 14:45:07 2024 GMT
        Subject: CN=732D816300FFD048F3B2C4AF7B0BCC7E45DBFB75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:26:29:16:be:d7:53:64:f8:fd:f5:51:f1:
                    68:70:4e:d8:f7:9d:1f:e6:78:f9:66:f8:f2:a5:0b:
                    7f:43:05:d4:6c:19:80:c4:a5:eb:c5:09:24:17:06:
                    57:99:4e:ce:db:53:c3:64:ce:62:bc:fc:3b:26:4d:
                    69:c7:0c:a9:a8:37:d0:de:31:fb:d5:ca:3d:cd:a5:
                    21:56:97:1b:6b:6c:19:24:ad:ef:64:86:02:8e:7e:
                    37:7c:b3:12:e3:c3:33:e6:db:2f:9b:ae:ca:ec:a5:
                    ce:48:5c:bc:3a:40:ee:a7:ec:8f:64:49:e6:5a:2e:
                    df:9f:29:7e:56:75:97:7a:40:23:83:9f:60:f8:35:
                    39:b4:2e:58:43:c0:c5:83:50:95:e9:31:73:2c:e1:
                    b6:11:84:d6:49:d7:84:49:31:26:f1:75:f4:6f:14:
                    3c:85:33:b6:78:56:02:f0:7e:22:26:8c:00:04:db:
                    ec:91:21:84:85:3c:56:18:e7:9a:c0:99:02:df:da:
                    d3:c5:3f:73:8c:da:35:4c:e1:d0:d8:d8:f1:72:2e:
                    fb:75:dd:bc:57:9e:fa:55:78:cf:b7:e8:5d:a5:92:
                    e1:f8:f3:16:af:27:59:bb:54:63:dc:ee:6e:b8:b2:
                    28:e7:66:c1:69:d8:5b:15:c5:55:dd:ed:86:bd:e1:
                    6e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2D:81:63:00:FF:D0:48:F3:B2:C4:AF:7B:0B:CC:7E:45:DB:FB:75
            X509v3 Authority Key Identifier:
                keyid:08:6D:6F:B7:E9:2D:14:B2:B8:C6:78:86:23:BC:30:76:C8:B7:BC:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vMp3YmRuqKzHgXgTGzPYCG7ajLi51sutTdfXbMDs75s/0/086D6FB7E92D14B2B8C6788623BC3076C8B7BCC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/086D6FB7E92D14B2B8C6788623BC3076C8B7BCC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vMp3YmRuqKzHgXgTGzPYCG7ajLi51sutTdfXbMDs75s/0/34352e3233372e3233322e302f32322d3234203d3e20323638333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:20:7b:27:cc:b3:2d:2f:63:7f:11:9b:50:34:c6:e6:25:93:
         39:1f:4c:9e:e2:d1:e5:9c:e7:9c:a2:aa:ba:56:d0:53:f2:b0:
         6a:a7:a6:ab:17:f6:48:19:6b:7e:24:9b:f9:3c:89:dd:b3:26:
         38:84:1f:64:aa:95:de:93:1d:7e:80:33:3b:c7:a3:c8:7c:26:
         e0:f1:ae:ba:c2:ad:08:b6:b5:f4:e1:5f:04:c8:e1:f5:3d:f4:
         ac:01:b4:8d:2c:68:50:e8:c5:ca:1b:f8:27:9c:25:cd:7f:ec:
         25:fb:84:c5:ea:ec:ea:ef:12:e3:c5:a6:fd:2f:f8:c7:11:bd:
         bf:fc:8a:8e:5b:48:7d:27:62:bc:0c:d5:2d:10:07:10:64:18:
         8d:a3:08:22:e6:73:74:8c:1a:41:c2:35:a6:a6:66:cc:01:23:
         11:be:8d:17:9e:97:82:df:90:b6:3e:d4:32:2b:30:cd:d4:79:
         ba:65:ae:9a:7c:15:22:bb:b5:d4:c7:1d:14:a4:46:fd:55:f9:
         52:ab:0f:5c:1b:59:38:89:6e:7c:fc:e6:cf:da:69:b7:40:c7:
         45:c2:ec:ce:2d:80:a1:f9:14:3a:d4:48:90:ed:4b:b3:df:2d:
         d6:3e:6e:ff:7a:ca:52:ab:97:5c:f1:ea:71:09:00:ac:3a:bb:
         3d:5a:af:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org