Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/34352e3233362e36372e302f32342d3234203d3e20323638323234.roa
File:                     34352e3233362e36372e302f32342d3234203d3e20323638323234.roa (raw, json)
Hash identifier:          lGVgaNe3f0KAaMY7ZmVS9oXAw6xJWdpRLtpxRiSXG0A=
Subject key identifier:   47:D2:25:C3:D7:30:50:FC:BF:E1:C9:26:A4:89:63:74:E3:20:E7:6C
Certificate issuer:       /CN=C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8
Certificate serial:       22BAEA4A88052D29606D290A8248DBF7611AD2A2
Authority key identifier: C8:0D:67:51:3C:3A:37:B1:DE:16:F8:10:AF:6D:B7:8D:6B:8A:35:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/34352e3233362e36372e302f32342d3234203d3e20323638323234.roa
Signing time:             Mon 04 Mar 2024 13:33:55 +0000
ROA not before:           Mon 04 Mar 2024 13:28:55 +0000
ROA not after:            Mon 03 Mar 2025 13:33:55 +0000
asID:                     268224
IP address blocks:        45.236.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ba:ea:4a:88:05:2d:29:60:6d:29:0a:82:48:db:f7:61:1a:d2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8
        Validity
            Not Before: Mar  4 13:28:55 2024 GMT
            Not After : Mar  3 13:33:55 2025 GMT
        Subject: CN=47D225C3D73050FCBFE1C926A4896374E320E76C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:df:d9:6d:72:6a:42:8a:8a:5a:fe:17:c1:
                    f5:de:c4:9b:82:c8:d2:61:1d:ea:e1:85:ba:80:90:
                    27:54:df:a0:6b:a9:6a:4c:3c:3a:0c:d1:e1:1c:62:
                    59:ca:76:f6:c1:aa:8c:40:45:52:ac:60:b3:9a:be:
                    06:81:30:bc:69:be:08:ea:25:5b:8a:6e:ba:08:c5:
                    a4:57:65:5c:5f:7e:85:77:a9:16:1d:56:62:3e:67:
                    e0:17:90:0e:3d:b4:b8:48:02:0f:9f:9e:eb:2f:9c:
                    f6:9a:9b:64:21:81:39:b1:b9:27:28:f0:ff:12:a2:
                    78:85:10:f2:98:73:26:c1:b5:ae:ec:eb:1d:63:50:
                    f8:af:eb:cd:e9:b1:9f:c0:4e:6a:0b:0f:d4:29:ec:
                    16:25:2f:0c:0b:ba:ae:ad:0d:96:49:47:ae:df:1c:
                    23:f9:ee:1e:88:49:20:e2:2f:4c:39:6f:7e:6f:40:
                    03:e2:43:d3:07:8b:57:d3:3b:dc:51:58:1b:0e:a8:
                    19:d9:90:50:c8:75:ec:cd:e0:39:89:ac:c1:46:c1:
                    bd:6c:1a:94:7a:c1:d2:fc:a9:c1:4b:bb:4a:f5:57:
                    bd:21:15:09:bd:1e:2e:56:89:38:0c:00:aa:11:42:
                    af:26:a7:cd:8c:03:eb:b4:ca:58:02:f5:5b:27:88:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D2:25:C3:D7:30:50:FC:BF:E1:C9:26:A4:89:63:74:E3:20:E7:6C
            X509v3 Authority Key Identifier:
                keyid:C8:0D:67:51:3C:3A:37:B1:DE:16:F8:10:AF:6D:B7:8D:6B:8A:35:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/34352e3233362e36372e302f32342d3234203d3e20323638323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b9:96:2a:21:d6:20:eb:ba:4b:ed:67:0e:aa:aa:8b:22:88:
         cc:e3:ed:0f:df:56:3f:60:df:eb:4b:40:59:8c:5c:2d:dd:c7:
         a8:38:1b:f4:02:cd:fe:c5:3e:c5:9c:3f:8d:f6:30:f9:3f:de:
         ca:25:28:1a:84:01:0e:74:4f:2e:67:9a:6b:52:2d:bc:3a:e4:
         50:82:51:2b:25:25:83:a5:93:db:b3:bc:c2:03:41:5d:f6:2b:
         2a:79:0e:13:cf:ef:11:36:b9:c8:38:2c:c0:19:ff:2d:3c:68:
         0c:9a:c2:c6:33:0e:8a:07:d6:f9:dc:ae:fd:84:87:21:a3:15:
         3f:20:21:02:ea:57:e4:81:a4:7d:14:69:26:35:39:e6:ee:32:
         7e:e1:94:26:b3:e4:20:2a:b3:a5:76:ca:57:6a:90:76:0f:f5:
         49:b3:e7:61:90:d3:d3:7b:d5:26:9d:40:82:35:e0:7f:02:6e:
         fc:07:1b:24:e5:40:4a:12:59:4c:43:ac:e6:30:eb:8f:95:2a:
         26:87:32:a3:9b:e0:8a:b0:8c:dc:aa:b5:7b:e5:82:2f:7a:a2:
         87:fd:14:4d:d6:8c:31:51:ca:7a:d3:85:93:55:3f:8a:56:f9:
         90:7e:2e:41:76:a8:77:cd:b4:b4:c2:ad:79:b5:bf:f2:e3:51:
         50:40:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org