Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32322d3232203d3e20323638323037.roa
File:                     34352e3233352e35322e302f32322d3232203d3e20323638323037.roa (raw, json)
Hash identifier:          xDo0471w0lr8EE6Czi3NU4zWb3/qe0Y4yUEvCEt+Dfo=
Subject key identifier:   5F:80:17:AC:B5:D1:33:64:43:13:7C:5B:FF:B5:F4:03:71:C7:03:67
Certificate issuer:       /CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
Certificate serial:       22ED17ECAAC144464C01232930330A0C61186F02
Authority key identifier: 46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32322d3232203d3e20323638323037.roa
Signing time:             Mon 10 Apr 2023 13:34:55 +0000
ROA not before:           Mon 10 Apr 2023 13:29:55 +0000
ROA not after:            Mon 08 Apr 2024 13:34:55 +0000
asID:                     268207
IP address blocks:        45.235.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ed:17:ec:aa:c1:44:46:4c:01:23:29:30:33:0a:0c:61:18:6f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
        Validity
            Not Before: Apr 10 13:29:55 2023 GMT
            Not After : Apr  8 13:34:55 2024 GMT
        Subject: CN=5F8017ACB5D1336443137C5BFFB5F40371C70367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:c2:ae:9c:a3:eb:59:4a:01:7c:3e:6b:98:
                    95:02:8c:1c:d5:63:13:93:42:da:ba:c2:90:58:0e:
                    86:4c:13:b6:d5:0d:bf:60:ba:d5:16:a6:79:74:6c:
                    05:c7:20:2c:f1:1d:b4:64:12:3a:de:4e:33:0b:dd:
                    11:ba:ac:28:be:4c:6d:8f:5f:d9:39:81:53:52:f7:
                    41:02:7c:0d:66:44:4d:a9:eb:af:80:4c:6a:50:70:
                    03:b2:04:fe:11:50:c7:f9:70:c4:69:82:20:8a:98:
                    2d:5c:0e:59:3b:52:b7:ec:2d:16:a3:f1:f4:79:aa:
                    c9:dd:da:c4:af:c7:39:63:76:8b:1c:ed:e1:54:9a:
                    d7:ff:4e:7c:62:21:cd:7e:cc:a2:36:12:ea:85:af:
                    04:02:89:9a:f0:2f:5a:96:cd:f8:76:8a:fa:9c:31:
                    f4:2c:d1:e2:7b:18:59:c0:6c:60:7f:07:3c:7b:ce:
                    b3:83:46:45:71:2f:37:01:5d:da:94:55:09:c7:2e:
                    1e:b6:e7:60:dc:ad:cc:78:5b:9c:ce:11:80:db:43:
                    2b:de:f0:05:eb:df:a0:4b:4d:e1:4f:60:a3:89:af:
                    eb:41:65:c9:ce:1f:6e:9d:8a:3c:90:63:ed:2b:84:
                    6c:82:56:ba:c6:fc:ff:03:68:5f:0a:76:70:d9:87:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:80:17:AC:B5:D1:33:64:43:13:7C:5B:FF:B5:F4:03:71:C7:03:67
            X509v3 Authority Key Identifier:
                keyid:46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32322d3232203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:5c:26:61:d9:79:47:a2:90:82:68:82:2e:8e:31:b1:5f:
         93:d5:38:9a:57:b3:76:6c:6f:57:e6:af:ef:a9:82:bb:ba:b8:
         1d:1e:95:c4:4d:97:44:a1:16:db:54:7d:d5:37:e5:0e:ad:c4:
         d5:d8:92:12:15:c8:33:c0:f1:83:ed:a9:89:fe:79:c3:a8:38:
         be:42:93:f4:5e:31:9c:6b:19:a4:3f:56:7a:ed:bc:bc:93:cc:
         73:ba:11:e0:92:f7:bc:0a:48:4e:fd:88:7e:6d:91:01:c4:10:
         95:91:7b:22:fd:f3:ec:e7:4b:dd:95:c2:68:88:c2:f2:26:46:
         00:62:d4:a3:4f:69:b2:86:d3:22:69:9f:01:2d:3c:e1:d7:16:
         fe:2e:93:cd:a6:4b:61:d1:71:be:f2:fe:4f:8f:42:6f:33:54:
         c1:01:a0:9c:af:24:42:1f:ce:56:d9:db:3c:6d:6e:5b:95:6c:
         bc:e7:6b:9d:46:33:28:e5:55:d5:30:a7:62:1d:9f:69:79:f5:
         50:c6:6e:a6:6c:fd:4f:fc:8a:8f:e3:bc:cd:9e:ce:19:05:85:
         2c:0e:71:1c:e8:a8:9a:94:21:2d:e7:6c:b9:f6:6b:cb:2f:6c:
         1d:53:8d:85:97:e3:ff:b3:3b:18:33:71:af:a4:49:7e:de:a6:
         3a:62:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org