Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36322e302f32332d3233203d3e20323731323034.roa
File:                     34352e3233362e36322e302f32332d3233203d3e20323731323034.roa (raw, json)
Hash identifier:          9BzIf7syZcw8+nJAgeTG5WD7/6XPmAq0a7EeeCD40Es=
Subject key identifier:   D5:20:25:F6:2D:6D:4B:C7:4F:92:1B:3F:C0:23:0E:83:F1:8E:EA:D3
Certificate issuer:       /CN=835C14CFB8B603CCCA76EA942BA566861EC99E00
Certificate serial:       5AF1DE3BA5D55ED3E6248964055066AD944581EA
Authority key identifier: 83:5C:14:CF:B8:B6:03:CC:CA:76:EA:94:2B:A5:66:86:1E:C9:9E:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36322e302f32332d3233203d3e20323731323034.roa
Signing time:             Fri 27 Oct 2023 21:09:22 +0000
ROA not before:           Fri 27 Oct 2023 21:04:22 +0000
ROA not after:            Fri 25 Oct 2024 21:09:22 +0000
asID:                     271204
IP address blocks:        45.236.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f1:de:3b:a5:d5:5e:d3:e6:24:89:64:05:50:66:ad:94:45:81:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835C14CFB8B603CCCA76EA942BA566861EC99E00
        Validity
            Not Before: Oct 27 21:04:22 2023 GMT
            Not After : Oct 25 21:09:22 2024 GMT
        Subject: CN=D52025F62D6D4BC74F921B3FC0230E83F18EEAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:46:b2:7b:9c:f6:3a:d8:68:21:cb:00:96:
                    ba:aa:b2:ad:5f:44:33:95:b9:17:74:00:67:4e:c1:
                    5f:48:f1:b8:1e:0b:a9:f7:0f:28:9c:3d:c1:96:d3:
                    b3:f9:02:12:c1:83:2a:24:16:a9:80:19:29:81:a5:
                    3b:bf:73:5f:52:82:d1:1c:bc:87:46:6d:80:1b:e3:
                    14:4e:f4:5e:b4:a2:b7:78:bd:fb:9d:81:a9:5a:2b:
                    88:de:b2:71:47:44:9f:9a:cd:e7:bc:c2:79:39:83:
                    78:9d:61:ea:bb:6c:79:cd:ce:c1:e0:1f:bf:5f:38:
                    f2:b7:67:af:b2:bc:35:9b:14:f0:55:21:54:75:b0:
                    7d:9c:6d:99:6b:8e:bb:a8:94:95:b5:f7:b2:4c:22:
                    3a:5c:02:8b:02:39:d3:df:a4:48:a4:84:28:d7:99:
                    d6:bb:76:98:6c:7e:c3:f0:2f:30:49:11:c3:9d:a6:
                    3d:86:e0:db:7c:3b:57:f1:15:ea:11:3d:47:34:62:
                    20:e0:0f:35:c0:0c:a5:cf:15:0d:c8:14:a2:8a:5e:
                    c9:ba:66:10:96:18:5a:d4:91:2e:c3:7a:0f:1d:bc:
                    f5:56:17:ac:20:f9:41:c5:d4:f9:f0:c2:fe:ac:54:
                    4e:80:de:09:c2:b0:fe:31:ca:6d:5b:75:96:8c:c4:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:20:25:F6:2D:6D:4B:C7:4F:92:1B:3F:C0:23:0E:83:F1:8E:EA:D3
            X509v3 Authority Key Identifier:
                keyid:83:5C:14:CF:B8:B6:03:CC:CA:76:EA:94:2B:A5:66:86:1E:C9:9E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36322e302f32332d3233203d3e20323731323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:fd:b3:5c:1c:ba:d1:2d:39:82:73:00:ab:ec:92:7e:14:74:
         a9:57:dd:36:aa:65:4b:95:ee:54:8c:36:fa:a3:b2:05:b8:fc:
         32:4d:7f:15:d6:60:14:60:a2:7c:e5:4e:eb:2f:4b:7e:55:2f:
         11:a1:e9:85:92:00:a3:ff:03:be:e6:88:a5:a3:88:cd:4a:b8:
         f9:85:d8:1a:75:1e:7c:8e:ad:d4:1d:e8:0e:85:e7:5b:73:9e:
         48:db:cf:41:e4:36:35:02:36:dc:66:25:b1:ad:80:cc:ef:05:
         33:ef:06:dc:5e:77:56:9b:9b:7d:77:7e:48:91:e6:1d:fa:dc:
         96:72:0e:04:5e:48:d1:c4:ac:8a:f2:6f:fe:cc:46:fb:7e:44:
         bf:6e:56:c0:9a:22:7f:ae:0b:24:2e:60:72:d9:2f:4c:47:0b:
         37:3f:05:2e:9e:4f:fe:56:d5:09:86:30:a0:ae:f5:ae:57:09:
         b8:f7:36:67:95:e4:d1:ef:12:09:e4:81:07:e5:cb:35:8d:e2:
         e6:ab:cf:27:10:06:6a:02:aa:6c:65:ff:f2:90:fa:ad:db:3d:
         76:20:f1:17:a2:f1:61:b1:a0:c5:c4:81:8e:0c:d7:99:61:bf:
         8d:7a:f5:a2:3d:37:2b:5e:97:d7:84:bf:5a:d7:bd:06:89:21:
         48:d2:f1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org