Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/0/34352e3137322e33362e302f32332d3233203d3e20323638383436.roa
File:                     34352e3137322e33362e302f32332d3233203d3e20323638383436.roa (raw, json)
Hash identifier:          xjTGJaReUVbJhXLhVTxOTIZXu01WWRzeGYaDeaWwlgg=
Subject key identifier:   C8:27:8B:DF:86:F4:91:D0:E1:F1:C3:34:61:B7:9E:89:65:BF:02:CF
Certificate issuer:       /CN=3E2A8B9169E12B4C530D97D9D8D50A03C02F93B0
Certificate serial:       3B8024763A12B0008D36C0CD6498D1187F20C02E
Authority key identifier: 3E:2A:8B:91:69:E1:2B:4C:53:0D:97:D9:D8:D5:0A:03:C0:2F:93:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E2A8B9169E12B4C530D97D9D8D50A03C02F93B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/0/34352e3137322e33362e302f32332d3233203d3e20323638383436.roa
Signing time:             Thu 14 Sep 2023 15:54:27 +0000
ROA not before:           Thu 14 Sep 2023 15:49:27 +0000
ROA not after:            Thu 12 Sep 2024 15:54:27 +0000
asID:                     268846
IP address blocks:        45.172.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:80:24:76:3a:12:b0:00:8d:36:c0:cd:64:98:d1:18:7f:20:c0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2A8B9169E12B4C530D97D9D8D50A03C02F93B0
        Validity
            Not Before: Sep 14 15:49:27 2023 GMT
            Not After : Sep 12 15:54:27 2024 GMT
        Subject: CN=C8278BDF86F491D0E1F1C33461B79E8965BF02CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:15:f4:82:e8:c0:96:38:a7:b1:cf:ef:95:63:
                    68:72:0d:14:46:8d:33:e6:12:6e:44:bb:a6:58:96:
                    ab:91:e2:2b:85:db:54:21:f4:90:1b:da:32:a6:8f:
                    6e:43:15:6c:8b:f7:15:f4:cf:e0:e0:c4:0f:ba:ea:
                    18:28:95:8b:ee:aa:df:2f:95:04:ce:ad:4a:c0:bf:
                    c0:fb:39:35:c0:78:d4:94:cc:65:2a:80:48:ea:89:
                    f0:58:53:89:80:25:84:34:d3:1e:96:ac:0b:35:7f:
                    7e:73:23:4a:70:df:96:c8:d0:a4:fa:2c:a6:3e:44:
                    56:3d:e5:d9:71:5b:30:bd:f6:b2:51:d0:43:a6:c0:
                    a8:db:d0:94:2a:c4:3e:3c:11:9b:38:6b:0f:ce:4a:
                    7c:75:c1:d6:23:16:34:50:86:1e:df:cc:93:df:40:
                    1d:c3:5b:5c:b0:0c:72:3d:d8:b9:f6:61:aa:40:07:
                    70:88:e1:c1:99:7e:67:26:1c:b3:98:a9:44:a8:3d:
                    1b:cd:77:20:65:f4:a0:a4:76:4a:88:63:54:6d:97:
                    6c:aa:a2:92:9b:35:11:b3:7f:7a:6a:7b:49:d7:22:
                    f7:b3:03:57:07:db:04:50:f5:0c:a2:0b:f5:94:c8:
                    6d:02:8c:21:9d:cf:33:53:d9:1d:f1:38:7c:5b:fb:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:27:8B:DF:86:F4:91:D0:E1:F1:C3:34:61:B7:9E:89:65:BF:02:CF
            X509v3 Authority Key Identifier:
                keyid:3E:2A:8B:91:69:E1:2B:4C:53:0D:97:D9:D8:D5:0A:03:C0:2F:93:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/0/3E2A8B9169E12B4C530D97D9D8D50A03C02F93B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E2A8B9169E12B4C530D97D9D8D50A03C02F93B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/0/34352e3137322e33362e302f32332d3233203d3e20323638383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:6e:89:88:22:1b:36:00:d1:c2:9b:7e:fd:a2:3c:f5:50:
         1e:3f:d2:de:b2:12:c0:38:dd:d6:62:8a:b8:5b:7e:8a:1b:b4:
         0c:c3:32:b6:b3:9b:ab:f9:59:ee:40:c4:23:9c:4e:7f:5d:bf:
         7c:a9:15:1b:2e:02:2e:1f:34:f8:9c:f1:89:fa:6f:ef:3f:b6:
         df:78:2e:53:8c:69:2d:fe:81:80:6e:46:29:da:1e:a3:49:7f:
         5d:9c:7d:f2:f6:d9:97:b5:ad:d4:77:41:b9:5f:11:8d:52:4a:
         8d:e1:bc:ea:16:d7:b8:6b:9b:7b:57:26:1d:3c:1d:24:97:2d:
         e9:fb:ea:46:3e:02:8d:ae:54:b5:07:52:a0:77:51:31:8f:81:
         3c:7d:9e:51:3a:29:64:b5:70:7f:90:7d:09:51:15:54:31:e2:
         6d:3c:c5:6a:74:31:57:16:da:88:c4:5e:a1:b5:2b:8b:50:a0:
         b0:f4:48:37:09:c4:fe:f7:2d:3d:6e:0c:8f:23:75:ca:0a:a7:
         99:53:29:1e:e4:16:86:1a:81:d0:74:19:64:70:e5:ce:22:41:
         aa:d1:39:1a:c0:9e:72:e3:8b:1f:11:bf:5b:6e:95:c5:e8:5a:
         35:94:c1:df:26:d6:b0:39:01:e0:59:f7:40:e1:3e:a5:d5:75:
         a1:f6:cf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org