Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa
File:                     34352e3233352e35322e302f32322d3234203d3e20323638323037.roa (raw, json)
Hash identifier:          l3lPq3U8B//e93FAUqX7XkWwl/fV97q0bUhb8DQqfPk=
Subject key identifier:   FC:A7:7F:9A:22:59:1A:F7:8E:91:E4:2B:4E:B7:0C:1B:2A:19:8F:29
Certificate issuer:       /CN=A5B88878269A9B64D8ED41A0CACF23833976726C
Certificate serial:       1EF74584784EC63DC1931B3E53D6AFF3910157F1
Authority key identifier: A5:B8:88:78:26:9A:9B:64:D8:ED:41:A0:CA:CF:23:83:39:76:72:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B88878269A9B64D8ED41A0CACF23833976726C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa
Signing time:             Sun 12 Feb 2023 23:39:20 +0000
ROA not before:           Sun 12 Feb 2023 23:34:20 +0000
ROA not after:            Sun 11 Feb 2024 23:39:20 +0000
asID:                     268207
IP address blocks:        45.235.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f7:45:84:78:4e:c6:3d:c1:93:1b:3e:53:d6:af:f3:91:01:57:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B88878269A9B64D8ED41A0CACF23833976726C
        Validity
            Not Before: Feb 12 23:34:20 2023 GMT
            Not After : Feb 11 23:39:20 2024 GMT
        Subject: CN=FCA77F9A22591AF78E91E42B4EB70C1B2A198F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:0d:ae:1a:80:b4:89:77:fe:a9:f0:79:05:
                    fa:ae:81:eb:ce:14:59:14:eb:24:15:26:2b:93:0a:
                    61:c0:4b:7c:d6:11:42:f9:81:43:2f:81:19:fb:7f:
                    f3:3e:a0:a0:5c:c0:3d:b1:5b:b3:e2:7f:82:83:f4:
                    90:8e:f6:74:76:73:0d:5b:dd:f0:77:9c:4c:14:fb:
                    85:ed:a0:7d:1c:c7:06:26:ba:84:5e:3a:9c:10:d5:
                    db:09:a8:2d:98:d7:a9:ca:30:a3:c0:b9:07:87:b9:
                    65:de:ff:55:f5:cf:87:5f:d5:14:07:57:60:50:57:
                    e2:ef:91:84:31:27:b7:ab:05:f9:00:b7:4c:2f:5d:
                    df:47:55:66:3f:87:7a:0f:ae:16:f0:e0:5f:8b:8d:
                    39:a8:12:fa:e0:de:da:1a:69:30:d3:4b:6b:d2:fd:
                    d4:56:d8:69:49:24:01:6d:4d:62:dd:e5:78:b4:f4:
                    ce:ec:4e:1f:6d:5a:3e:8f:e5:c9:d0:38:28:22:1d:
                    8d:92:ad:67:ee:a9:86:e7:fd:8f:07:a8:de:d0:03:
                    6c:9e:fd:57:99:7d:37:6f:5c:66:4b:20:3d:19:aa:
                    06:c6:67:0e:0b:58:ab:e9:a1:c9:62:ac:29:ab:bb:
                    5c:8e:30:00:7b:c2:78:96:b6:58:1b:04:88:d2:be:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A7:7F:9A:22:59:1A:F7:8E:91:E4:2B:4E:B7:0C:1B:2A:19:8F:29
            X509v3 Authority Key Identifier:
                keyid:A5:B8:88:78:26:9A:9B:64:D8:ED:41:A0:CA:CF:23:83:39:76:72:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/A5B88878269A9B64D8ED41A0CACF23833976726C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B88878269A9B64D8ED41A0CACF23833976726C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:e8:7c:66:f4:58:12:60:c3:4b:4b:20:e5:91:4d:43:c0:0d:
         0c:b7:ca:8d:aa:f3:34:e1:a3:77:fe:a9:d1:06:93:6b:44:72:
         e2:10:35:38:de:7f:04:99:06:84:20:bd:c2:85:31:91:6d:b4:
         aa:43:2f:04:a2:db:14:d8:d8:62:82:5b:9e:9a:fe:39:bd:ae:
         64:61:62:99:a7:68:56:d8:3d:d6:7a:23:0f:46:03:3e:d7:e1:
         59:80:cc:73:47:fa:7a:8b:9e:03:97:8c:35:ff:5e:74:7e:13:
         39:02:d1:7d:03:87:95:35:62:b5:25:dc:ab:db:15:d8:80:24:
         8a:30:b5:b5:54:9e:46:c0:dc:d5:2a:3a:31:f9:95:3f:80:d0:
         79:0e:b9:dd:8f:41:25:23:d7:d4:0c:6a:73:0b:9c:86:62:22:
         93:dd:5b:d5:ed:51:9d:59:4d:2f:04:3e:88:2d:47:c6:47:22:
         f9:4c:2d:8a:86:81:44:00:ff:b9:96:63:6a:dc:59:f4:cb:8e:
         35:18:ed:b9:57:ef:28:51:41:cd:a2:e0:d5:b6:96:fb:13:4d:
         bb:bb:96:68:dc:4f:27:ec:46:d3:d9:e6:31:1c:60:76:cc:36:
         4b:09:f0:a2:cc:8e:ca:47:90:9c:85:fd:d3:65:d0:17:b4:52:
         6e:80:a3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org