Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32332d3233203d3e20323638323037.roa
File:                     34352e3233352e35322e302f32332d3233203d3e20323638323037.roa (raw, json)
Hash identifier:          Z+6xmc/sax11rylenpCV8ROeQ+W6osw3rNkkL3WxHkU=
Subject key identifier:   BA:55:24:2F:20:38:39:6B:9C:6C:5B:2F:C4:8E:95:9E:69:CC:37:E1
Certificate issuer:       /CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
Certificate serial:       6ECFBC5186FB97C88A670A2866564D751A96C2EF
Authority key identifier: 46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32332d3233203d3e20323638323037.roa
Signing time:             Mon 10 Apr 2023 13:35:05 +0000
ROA not before:           Mon 10 Apr 2023 13:30:05 +0000
ROA not after:            Mon 08 Apr 2024 13:35:05 +0000
asID:                     268207
IP address blocks:        45.235.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cf:bc:51:86:fb:97:c8:8a:67:0a:28:66:56:4d:75:1a:96:c2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
        Validity
            Not Before: Apr 10 13:30:05 2023 GMT
            Not After : Apr  8 13:35:05 2024 GMT
        Subject: CN=BA55242F2038396B9C6C5B2FC48E959E69CC37E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:57:e9:d2:94:f9:1f:05:62:0d:2c:2e:0a:
                    35:23:c0:20:65:6a:a0:ec:f1:a6:0c:68:59:14:6a:
                    87:c8:ed:3f:18:0a:5e:db:00:4c:80:62:54:e6:8b:
                    b0:41:15:4d:f1:8e:68:ce:22:c7:4c:e2:4a:9a:f0:
                    fd:13:f3:66:77:6b:cc:78:49:eb:98:f5:f3:d3:f8:
                    6b:26:42:e5:cb:24:5d:03:37:01:44:ec:44:8c:8a:
                    73:4a:92:44:2a:c5:83:a4:4d:78:61:28:6e:76:c9:
                    02:a1:ef:52:29:23:40:98:e0:d8:95:fa:bd:fd:33:
                    61:54:7e:c7:f3:88:c2:f4:d4:e0:5d:29:b1:db:48:
                    0d:1a:39:c6:e1:e5:e4:27:38:8f:fe:2c:3e:42:ce:
                    ac:59:4f:02:36:6f:a6:14:ff:f4:c2:f2:7b:f4:0f:
                    c6:c7:ea:62:7c:a7:e9:27:a3:c8:fc:90:b2:8d:9e:
                    69:33:a7:7a:ff:98:09:3f:44:61:08:9e:5a:3d:d6:
                    45:d0:17:23:32:7c:61:72:f1:7d:b2:ab:8f:0f:14:
                    96:27:43:a7:dc:64:bf:dd:f1:c3:e0:3f:d4:62:6e:
                    5d:c3:c9:ce:d3:67:bc:8a:94:fc:a2:aa:fd:dc:21:
                    66:19:50:dc:9c:24:2f:39:f0:31:92:43:3b:6e:ce:
                    a7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:55:24:2F:20:38:39:6B:9C:6C:5B:2F:C4:8E:95:9E:69:CC:37:E1
            X509v3 Authority Key Identifier:
                keyid:46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32332d3233203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:25:b9:75:7f:62:a3:cb:a5:af:5b:4a:b1:af:0e:ae:fe:
         a7:01:bf:6c:06:68:27:ca:8e:bf:34:49:57:27:16:44:f7:2f:
         af:5d:64:42:49:88:a8:e1:8d:c5:78:8d:e1:4b:41:da:4c:d6:
         08:63:68:88:77:9e:d2:67:0a:1a:31:0c:f9:6b:60:7e:41:63:
         f1:98:11:44:28:21:e2:06:cc:34:1d:5a:26:ce:45:df:39:ce:
         5c:11:12:a5:c8:63:d7:c3:bb:8e:90:9a:7a:db:f7:b4:2a:b2:
         31:cd:38:78:06:10:6a:77:91:50:80:96:f3:bd:8e:20:74:17:
         1c:58:18:c8:3d:ab:b2:31:d6:35:16:0b:95:41:88:ab:45:4a:
         61:49:d7:98:57:77:ea:b0:4a:9c:6f:7b:e2:26:98:93:83:03:
         f0:9d:6a:66:58:6f:61:b0:45:4a:2d:9e:25:11:06:68:2d:e9:
         64:16:dc:e5:33:0f:b0:b2:3c:c8:76:2d:1f:47:14:70:b3:73:
         c3:9c:e7:6f:e5:a6:d9:2c:0a:c2:81:17:30:7f:89:e4:be:41:
         aa:08:e8:68:c2:0e:70:39:84:2f:61:58:90:31:b8:53:2d:e4:
         03:26:b2:c0:54:85:c2:40:f0:bb:0d:19:90:db:0c:08:ef:57:
         93:57:fd:e9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbs+8UYb7l8iKZwooZlZNdRqWwu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZDRkY4ODU3NjU2ODhGRDZBMkNDQ0RCN0VBNzBCODM3
Qjc0Q0QwODAeFw0yMzA0MTAxMzMwMDVaFw0yNDA0MDgxMzM1MDVaMDMxMTAvBgNV
BAMTKEJBNTUyNDJGMjAzODM5NkI5QzZDNUIyRkM0OEU5NTlFNjlDQzM3RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51lfp0pT5HwViDSwuCjUjwCBl
aqDs8aYMaFkUaofI7T8YCl7bAEyAYlTmi7BBFU3xjmjOIsdM4kqa8P0T82Z3a8x4
SeuY9fPT+GsmQuXLJF0DNwFE7ESMinNKkkQqxYOkTXhhKG52yQKh71IpI0CY4NiV
+r39M2FUfsfziML01OBdKbHbSA0aOcbh5eQnOI/+LD5CzqxZTwI2b6YU//TC8nv0
D8bH6mJ8p+kno8j8kLKNnmkzp3r/mAk/RGEInlo91kXQFyMyfGFy8X2yq48PFJYn
Q6fcZL/d8cPgP9Ribl3Dyc7TZ7yKlPyiqv3cIWYZUNycJC858DGSQztuzqdlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUulUkLyA4OWucbFsvxI6VnmnMN+EwHwYDVR0j
BBgwFoAURs/4hXZWiP1qLMzbfqcLg3t0zQgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlM
QVMvMS80NkNGRjg4NTc2NTY4OEZENkEyQ0NDREI3RUE3MEI4MzdCNzRDRDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ2Q0ZGODg1NzY1Njg4RkQ2
QTJDQ0NEQjdFQTcwQjgzN0I3NENEMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0czcDl0a2NoZEFQdnBKOVNvcXlwOXFaSEdtOWNTOTRMUmExSDlna3hZTEFTLzEv
MzQzNTJlMzIzMzM1MmUzNTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzIzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLes0MA0GCSqGSIb3DQEBCwUAA4IBAQAJ6SW5dX9i
o8ulr1tKsa8Orv6nAb9sBmgnyo6/NElXJxZE9y+vXWRCSYio4Y3FeI3hS0HaTNYI
Y2iId57SZwoaMQz5a2B+QWPxmBFEKCHiBsw0HVomzkXfOc5cERKlyGPXw7uOkJp6
2/e0KrIxzTh4BhBqd5FQgJbzvY4gdBccWBjIPauyMdY1FguVQYirRUphSdeYV3fq
sEqcb3viJpiTgwPwnWpmWG9hsEVKLZ4lEQZoLelkFtzlMw+wsjzIdi0fRxRws3PD
nOdv5abZLArCgRcwf4nkvkGqCOhowg5wOYQvYViQMbhTLeQDJrLAVIXCQPC7DRmQ
2wwI71eTV/3p
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org