Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135392e302f32342d3234203d3e20323638323534.roa
File:                     34352e3233362e3135392e302f32342d3234203d3e20323638323534.roa (raw, json)
Hash identifier:          0hDRC9/ngTQjqFb27IQRKtIT3OSCpJHo6o1Ht+4Uheg=
Subject key identifier:   58:2F:BD:B4:28:24:49:7C:16:A2:DB:8F:64:93:5E:9C:77:0E:61:A1
Certificate issuer:       /CN=F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9
Certificate serial:       7FF9376C1ED094B1EAF5C9EF59E6CDD88B9B6D33
Authority key identifier: F8:31:AC:ED:CB:64:1C:A6:73:1F:FE:1C:8B:4D:CC:89:5E:57:FD:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135392e302f32342d3234203d3e20323638323534.roa
Signing time:             Tue 02 May 2023 18:40:05 +0000
ROA not before:           Tue 02 May 2023 18:35:05 +0000
ROA not after:            Tue 30 Apr 2024 18:40:05 +0000
asID:                     268254
IP address blocks:        45.236.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f9:37:6c:1e:d0:94:b1:ea:f5:c9:ef:59:e6:cd:d8:8b:9b:6d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9
        Validity
            Not Before: May  2 18:35:05 2023 GMT
            Not After : Apr 30 18:40:05 2024 GMT
        Subject: CN=582FBDB42824497C16A2DB8F64935E9C770E61A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:3d:1b:b1:a3:3a:0b:1d:57:b7:ab:3e:ab:
                    2d:07:df:76:b3:ff:5e:c8:bc:94:57:5e:18:cb:6c:
                    d5:dc:50:b2:e3:95:3c:85:9c:29:9e:a8:b5:72:e6:
                    ab:b7:f7:e5:2d:1e:1f:ca:e8:53:08:37:06:72:4a:
                    c4:9a:11:de:18:58:b7:a2:98:d7:99:73:ba:9b:60:
                    b1:7d:19:76:1c:de:ac:ec:9b:4d:01:57:6f:ef:f7:
                    e3:01:85:a2:26:d1:d5:8a:43:c0:da:d6:f0:d1:56:
                    5c:d4:10:ad:c0:c7:a2:42:e9:62:66:b8:cc:32:2f:
                    a9:93:f1:12:bd:12:93:63:53:01:b2:79:dc:56:4c:
                    88:de:4b:17:33:d0:6c:b8:72:f0:e3:11:9a:6b:c8:
                    c6:c5:19:83:cb:c5:16:b3:01:d2:54:fb:51:b9:8b:
                    76:9d:aa:95:9b:04:e4:d0:99:bc:fa:bd:8d:60:33:
                    bd:52:1a:a6:19:7a:9e:03:1b:16:a9:7e:5f:f8:5e:
                    56:16:2d:c8:f1:70:b0:fb:5a:3c:c6:ed:0f:80:0c:
                    8d:68:ce:4e:70:56:24:0a:fc:0d:f0:d1:9c:19:cb:
                    2d:2d:2c:73:07:62:17:64:c3:73:3a:0e:1e:47:fc:
                    00:b7:a8:41:e5:f3:e2:92:ad:48:ac:71:ea:9d:26:
                    6a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:BD:B4:28:24:49:7C:16:A2:DB:8F:64:93:5E:9C:77:0E:61:A1
            X509v3 Authority Key Identifier:
                keyid:F8:31:AC:ED:CB:64:1C:A6:73:1F:FE:1C:8B:4D:CC:89:5E:57:FD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135392e302f32342d3234203d3e20323638323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:4e:25:2a:97:16:06:14:30:36:fa:3d:e3:a1:44:6f:56:3b:
         90:74:4b:57:d8:04:e9:c9:d6:eb:a8:58:58:04:b7:43:3d:93:
         c2:5f:44:d8:80:c1:4a:dd:df:ce:8f:8c:5e:84:93:df:42:3a:
         76:7b:ee:72:23:46:dd:01:a4:c5:a0:e0:d2:a3:11:67:27:bc:
         8b:be:91:3e:24:e6:4a:71:86:aa:d0:8c:0d:d4:2a:fc:d9:ed:
         f0:93:36:a2:eb:a7:57:a9:e7:93:e5:f7:da:b2:c8:1d:02:5d:
         82:9c:d2:44:83:af:2b:0b:4d:76:c3:44:21:56:23:6a:bc:f6:
         00:78:62:9f:b4:0c:9e:e5:79:9f:56:90:b1:bb:3a:87:28:ae:
         9c:c0:23:62:8c:86:71:3d:aa:5b:7d:11:de:a0:b4:07:ad:74:
         73:0b:c3:b8:7c:4b:fe:ad:b5:bc:e2:9f:44:26:2a:8d:d2:aa:
         49:7e:e5:2c:fe:2e:c7:ef:e0:95:d8:75:f6:36:e0:5b:14:3e:
         a3:13:e8:3c:a9:f9:f6:52:c7:65:9d:8d:3c:42:46:c2:04:04:
         87:73:b8:3b:f2:49:9b:5b:95:d5:75:07:52:31:1b:c0:a5:e7:
         3e:38:8b:2e:65:95:56:6a:b8:96:7e:41:65:c0:66:f9:94:9c:
         74:8d:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org