Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/34352e3232382e342e302f32332d3233203d3e20323637303339.roa
File:                     34352e3232382e342e302f32332d3233203d3e20323637303339.roa (raw, json)
Hash identifier:          cfWNF36E+ADdLOpjsA3ggTKV/rXXJvsl3+42rsZIxYU=
Subject key identifier:   56:7B:75:AA:50:4D:4C:D3:AA:18:93:41:4B:05:51:C7:42:23:BE:1C
Certificate issuer:       /CN=8A5CAC0220F1C0DF5BC8EF97E5534FF358717618
Certificate serial:       01212E6A9DDDE2E035F1979B4ED426EB7D6B91DC
Authority key identifier: 8A:5C:AC:02:20:F1:C0:DF:5B:C8:EF:97:E5:53:4F:F3:58:71:76:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/34352e3232382e342e302f32332d3233203d3e20323637303339.roa
Signing time:             Thu 07 Dec 2023 19:00:00 +0000
ROA not before:           Thu 07 Dec 2023 18:55:00 +0000
ROA not after:            Thu 05 Dec 2024 19:00:00 +0000
asID:                     267039
IP address blocks:        45.228.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:21:2e:6a:9d:dd:e2:e0:35:f1:97:9b:4e:d4:26:eb:7d:6b:91:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5CAC0220F1C0DF5BC8EF97E5534FF358717618
        Validity
            Not Before: Dec  7 18:55:00 2023 GMT
            Not After : Dec  5 19:00:00 2024 GMT
        Subject: CN=567B75AA504D4CD3AA1893414B0551C74223BE1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:d7:5f:41:a8:13:ab:20:ec:26:5b:7e:94:
                    43:ae:90:8d:7b:73:ae:fc:aa:5d:2a:dd:d6:6e:0e:
                    34:e5:57:21:68:73:14:ba:d5:4f:cf:0e:04:eb:a1:
                    8d:55:e9:ae:40:ab:01:61:21:ce:9b:fd:c9:86:a7:
                    be:63:4c:5d:26:04:94:5a:91:d7:dd:94:f9:79:a5:
                    29:0a:f5:4a:cc:d7:9f:37:d1:ab:36:17:e3:e8:ec:
                    be:ad:2b:9a:e0:2b:ef:1d:1e:4e:f4:29:3d:c4:13:
                    1e:64:5f:b6:9d:d3:1c:37:53:97:96:22:a8:42:dd:
                    d8:e7:2f:22:20:7a:26:da:1e:0e:94:78:4e:4f:13:
                    3e:5f:23:b8:b2:88:e4:9e:bb:e3:57:bd:1e:a0:47:
                    88:24:73:a0:7c:8d:79:4b:a2:f5:05:76:ad:f7:78:
                    4c:13:b2:c7:db:55:ca:ff:e0:52:bc:1b:e7:49:f5:
                    eb:39:a6:d1:7c:b2:8a:d9:3f:eb:bf:eb:86:f9:6a:
                    64:a8:8d:c9:04:f3:d2:56:27:9d:f3:37:3e:ab:ab:
                    2a:c8:93:0f:a6:30:e3:b4:f3:00:41:ab:a0:f4:55:
                    50:0c:2f:e6:c8:2a:62:fb:df:9c:75:d8:82:c4:0d:
                    a0:1e:a1:39:26:a9:b6:e8:01:7c:19:05:dd:1d:33:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7B:75:AA:50:4D:4C:D3:AA:18:93:41:4B:05:51:C7:42:23:BE:1C
            X509v3 Authority Key Identifier:
                keyid:8A:5C:AC:02:20:F1:C0:DF:5B:C8:EF:97:E5:53:4F:F3:58:71:76:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5CAC0220F1C0DF5BC8EF97E5534FF358717618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/0/34352e3232382e342e302f32332d3233203d3e20323637303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:5d:77:0f:b7:b5:69:d6:16:18:85:7f:2b:0c:5f:59:62:05:
         ad:3f:9f:89:49:c8:bf:a1:5e:e1:be:f1:b7:17:c6:dc:c7:26:
         22:b2:c2:f6:fe:61:01:9b:79:83:62:8b:98:9b:d3:dd:84:b0:
         79:5b:f4:fc:f4:1f:05:af:31:1a:b5:a4:14:c4:b2:ee:63:a4:
         5f:93:ca:5e:81:40:4e:5c:43:88:7c:cb:d1:96:30:b9:4c:f6:
         ad:47:59:98:5c:8a:2f:ea:09:94:10:a5:fa:98:ab:19:0f:cf:
         81:33:b2:fd:1f:b5:95:99:6a:11:5c:cb:d8:c6:d7:de:03:a3:
         2c:0e:2f:c6:0a:b3:24:8d:ca:49:ff:2e:28:2b:77:70:c2:8b:
         dc:e8:35:f4:91:95:cd:96:2b:ab:f3:d8:d6:fa:bb:20:7e:76:
         a2:bf:41:27:c7:f3:15:61:df:ae:99:07:ab:bb:43:34:68:a3:
         41:67:19:c1:6c:97:2b:94:cf:5d:2c:a6:97:94:65:2f:be:dc:
         e3:a6:ab:74:14:08:dd:3e:f4:1f:b1:24:62:8f:2d:58:77:4c:
         67:10:0e:4f:5e:55:d7:fd:7c:c9:6c:fc:47:9b:c8:f1:2d:e4:
         01:94:e2:1b:ef:f4:1b:9a:fb:a9:f6:b6:c4:b7:82:14:e0:f0:
         ab:db:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org