Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/34352e3233362e36342e302f32322d3232203d3e20323638323234.roa
File:                     34352e3233362e36342e302f32322d3232203d3e20323638323234.roa (raw, json)
Hash identifier:          bkplhz9+CI9Y+l+1h/KbIox8eth5hSykvLnB+DsEwUk=
Subject key identifier:   8C:38:7C:06:62:A6:47:95:80:50:E7:13:D2:DF:20:C3:E8:BC:9E:4D
Certificate issuer:       /CN=C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8
Certificate serial:       024BED72A7EFD36BD293BECBDC8A995A87E8D172
Authority key identifier: C8:0D:67:51:3C:3A:37:B1:DE:16:F8:10:AF:6D:B7:8D:6B:8A:35:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/34352e3233362e36342e302f32322d3232203d3e20323638323234.roa
Signing time:             Mon 04 Mar 2024 13:33:55 +0000
ROA not before:           Mon 04 Mar 2024 13:28:55 +0000
ROA not after:            Mon 03 Mar 2025 13:33:55 +0000
asID:                     268224
IP address blocks:        45.236.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4b:ed:72:a7:ef:d3:6b:d2:93:be:cb:dc:8a:99:5a:87:e8:d1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8
        Validity
            Not Before: Mar  4 13:28:55 2024 GMT
            Not After : Mar  3 13:33:55 2025 GMT
        Subject: CN=8C387C0662A647958050E713D2DF20C3E8BC9E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:69:d4:e3:50:43:56:32:fa:4c:b4:bc:65:0c:
                    83:30:f3:d8:bd:e1:18:0e:28:d0:3e:3c:f4:1f:f5:
                    ad:67:de:ea:6d:54:f9:5c:47:40:35:87:b1:e4:c1:
                    82:a1:d3:4a:59:6d:d7:d7:3d:4a:08:a9:a0:a9:6c:
                    fc:8a:da:ac:b9:c7:a4:41:ad:a0:32:5d:f4:8a:89:
                    c8:96:3e:b3:cf:aa:30:cd:8d:87:c6:93:80:a0:42:
                    f7:04:91:d2:92:81:90:50:72:eb:29:f3:c0:53:b8:
                    92:28:4d:ca:27:d6:ad:c9:31:98:78:9f:48:59:5a:
                    a0:c2:c9:62:db:b7:70:68:e2:ab:1b:5a:86:67:02:
                    f0:aa:9d:4d:36:d5:ef:04:79:f4:5f:ae:89:5d:23:
                    87:fa:a9:b4:2f:78:fc:d6:d1:3e:7e:65:16:e6:9d:
                    09:37:ba:22:b0:4c:ef:50:3a:f1:5f:d8:32:3d:39:
                    c2:d8:48:b0:0c:c0:4b:fe:85:a7:27:4e:88:08:dd:
                    1f:15:15:27:ff:fb:f1:d2:fc:95:cf:d6:55:c8:1f:
                    31:22:2d:21:be:2c:df:fe:f8:23:e6:1e:f8:c2:2e:
                    cf:15:9a:a0:71:bf:bc:b3:ae:81:8b:46:df:e2:54:
                    1d:54:10:ae:24:3c:aa:13:d4:2e:eb:ed:93:76:13:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:38:7C:06:62:A6:47:95:80:50:E7:13:D2:DF:20:C3:E8:BC:9E:4D
            X509v3 Authority Key Identifier:
                keyid:C8:0D:67:51:3C:3A:37:B1:DE:16:F8:10:AF:6D:B7:8D:6B:8A:35:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/34352e3233362e36342e302f32322d3232203d3e20323638323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:a3:ee:a7:c6:47:d6:9e:96:ca:c8:5c:13:f6:bd:11:50:aa:
         52:f0:71:95:06:f3:84:b1:1b:2f:bf:51:5a:bb:37:b4:82:c3:
         29:7e:c5:d7:64:08:34:66:cd:73:ee:c6:dd:fd:00:bf:3c:f5:
         44:f8:ba:c5:68:0c:d6:bb:58:09:fe:8c:0e:61:92:b1:0a:8e:
         32:78:42:69:a6:5e:37:08:2a:92:18:74:34:b7:e1:49:a9:84:
         32:c5:0e:47:20:e3:7f:09:af:56:5c:20:1d:f0:fc:7a:fe:20:
         64:5e:a5:b9:1d:1a:43:6b:1d:6f:29:cb:67:a2:df:cf:44:2c:
         98:a6:59:7c:44:a6:f7:c5:b4:2c:cb:08:0a:51:59:c7:66:32:
         76:10:e2:e1:12:ce:7f:3b:d8:c2:e9:cb:ec:d0:d1:d4:02:69:
         2b:72:53:87:70:12:6e:5c:e9:4e:86:92:1d:12:7f:34:fc:03:
         7a:de:e1:40:e0:55:e0:7e:dd:a5:0f:4c:06:fd:33:14:48:31:
         44:03:5d:24:e6:06:f2:dd:2f:b6:9d:06:76:a1:fd:c2:33:c6:
         4a:9b:4a:64:26:1c:c9:4e:b6:3b:54:04:2c:41:8f:40:90:7c:
         90:67:46:18:3c:89:c8:dd:f6:bf:eb:d9:53:9f:01:80:b8:a4:
         ef:f5:67:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org