Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32342d3234203d3e20323638323037.roa
File:                     34352e3233352e35322e302f32342d3234203d3e20323638323037.roa (raw, json)
Hash identifier:          O5ea3dD1Ov4GgIra/EaMgXP6mTHHxUCciXYgHRU+jsQ=
Subject key identifier:   B1:A8:33:EE:A9:FD:61:CD:1B:E1:CF:60:58:7A:C2:56:88:56:EB:1C
Certificate issuer:       /CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
Certificate serial:       36EED8FB45352F9BC1C7A29F09C9DE3A86763213
Authority key identifier: 46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32342d3234203d3e20323638323037.roa
Signing time:             Mon 10 Apr 2023 13:35:01 +0000
ROA not before:           Mon 10 Apr 2023 13:30:01 +0000
ROA not after:            Mon 08 Apr 2024 13:35:01 +0000
asID:                     268207
IP address blocks:        45.235.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ee:d8:fb:45:35:2f:9b:c1:c7:a2:9f:09:c9:de:3a:86:76:32:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
        Validity
            Not Before: Apr 10 13:30:01 2023 GMT
            Not After : Apr  8 13:35:01 2024 GMT
        Subject: CN=B1A833EEA9FD61CD1BE1CF60587AC2568856EB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:02:dd:2a:09:90:4d:17:16:1a:18:7f:fe:
                    33:0c:34:71:38:13:1c:cd:a1:25:da:7d:70:33:dc:
                    7a:05:a7:c7:cd:9b:b1:10:00:e1:76:11:91:39:e0:
                    72:98:24:f1:48:ba:73:6e:3d:e7:c1:77:a8:ae:ad:
                    c0:65:fc:21:78:90:ea:1d:cd:d9:02:11:fe:9c:b7:
                    58:f4:98:39:91:cc:28:37:a8:7e:b9:fb:c8:c1:0c:
                    07:ec:d6:c4:98:0c:db:af:54:d1:df:92:d4:49:d5:
                    5f:17:14:bf:1e:b8:de:8b:39:95:23:57:02:2d:fa:
                    20:70:12:e7:85:86:46:20:ca:6f:f0:75:dd:e4:39:
                    5d:06:ae:d7:11:4f:d8:07:0a:47:21:fd:a4:ef:ef:
                    68:00:fa:9b:48:ce:44:31:2f:26:dc:3a:62:b7:e4:
                    02:da:28:78:72:a6:00:33:e5:52:ab:42:a0:e7:7d:
                    9a:af:b6:a3:09:69:ca:0f:46:58:7c:b7:ba:30:01:
                    c8:00:7f:2a:e9:b6:18:de:58:92:30:a2:12:47:44:
                    d8:68:4e:aa:4a:35:c1:4e:5b:bd:3a:5d:f7:95:4e:
                    b6:bf:d0:78:8b:48:db:a9:12:d7:f3:a7:9e:2a:9d:
                    d2:e5:64:27:59:76:79:93:bc:e6:e8:77:31:7a:f4:
                    ce:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A8:33:EE:A9:FD:61:CD:1B:E1:CF:60:58:7A:C2:56:88:56:EB:1C
            X509v3 Authority Key Identifier:
                keyid:46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32342d3234203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e3:39:5c:e0:da:56:44:20:5f:9e:cd:03:f1:aa:0b:74:80:
         91:13:46:49:83:f4:63:5d:8d:d0:b7:6b:48:c3:63:13:1d:37:
         ca:c1:7a:04:7e:cd:3c:a9:af:bd:ce:98:cb:70:12:13:60:35:
         30:96:40:75:d1:2e:1b:b7:fe:e1:75:e1:3b:c5:0b:c1:19:80:
         d4:1c:33:4e:b6:e9:91:ae:d5:32:3e:22:8d:81:5b:41:9e:3d:
         20:07:73:8d:18:35:49:e3:71:4c:8e:02:bd:ee:27:a1:fa:89:
         8e:9e:f8:80:51:78:24:ee:39:dc:bc:b3:3f:89:5c:b6:09:83:
         ed:63:ea:f7:fe:48:e9:c3:cb:32:b8:5a:23:9b:e1:fe:9f:61:
         25:a1:8c:ac:18:c8:1e:b5:08:63:3c:ce:a6:53:f6:93:57:88:
         db:5e:9a:7b:ab:9a:83:2d:39:e3:bd:59:fe:9e:a2:17:96:74:
         88:f9:fb:35:04:07:df:1c:f4:c0:d4:30:f7:12:33:50:7f:67:
         88:e9:3e:a9:36:47:0f:b0:8a:44:12:21:04:53:0f:ef:56:a6:
         86:27:a2:99:c3:06:45:6e:48:5b:bc:e0:cb:01:ab:2d:a0:a7:
         b3:60:24:ad:be:ae:98:ab:15:a9:d9:34:0c:23:4d:9b:1a:2a:
         27:70:13:0b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNu7Y+0U1L5vBx6KfCcneOoZ2MhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZDRkY4ODU3NjU2ODhGRDZBMkNDQ0RCN0VBNzBCODM3
Qjc0Q0QwODAeFw0yMzA0MTAxMzMwMDFaFw0yNDA0MDgxMzM1MDFaMDMxMTAvBgNV
BAMTKEIxQTgzM0VFQTlGRDYxQ0QxQkUxQ0Y2MDU4N0FDMjU2ODg1NkVCMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8wLdKgmQTRcWGhh//jMMNHE4
ExzNoSXafXAz3HoFp8fNm7EQAOF2EZE54HKYJPFIunNuPefBd6iurcBl/CF4kOod
zdkCEf6ct1j0mDmRzCg3qH65+8jBDAfs1sSYDNuvVNHfktRJ1V8XFL8euN6LOZUj
VwIt+iBwEueFhkYgym/wdd3kOV0GrtcRT9gHCkch/aTv72gA+ptIzkQxLybcOmK3
5ALaKHhypgAz5VKrQqDnfZqvtqMJacoPRlh8t7owAcgAfyrpthjeWJIwohJHRNho
TqpKNcFOW706XfeVTra/0HiLSNupEtfzp54qndLlZCdZdnmTvObodzF69M5bAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsagz7qn9Yc0b4c9gWHrCVohW6xwwHwYDVR0j
BBgwFoAURs/4hXZWiP1qLMzbfqcLg3t0zQgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlM
QVMvMS80NkNGRjg4NTc2NTY4OEZENkEyQ0NDREI3RUE3MEI4MzdCNzRDRDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ2Q0ZGODg1NzY1Njg4RkQ2
QTJDQ0NEQjdFQTcwQjgzN0I3NENEMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0czcDl0a2NoZEFQdnBKOVNvcXlwOXFaSEdtOWNTOTRMUmExSDlna3hZTEFTLzEv
MzQzNTJlMzIzMzM1MmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzIzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALes0MA0GCSqGSIb3DQEBCwUAA4IBAQBU4zlc4NpW
RCBfns0D8aoLdICRE0ZJg/RjXY3Qt2tIw2MTHTfKwXoEfs08qa+9zpjLcBITYDUw
lkB10S4bt/7hdeE7xQvBGYDUHDNOtumRrtUyPiKNgVtBnj0gB3ONGDVJ43FMjgK9
7ieh+omOnviAUXgk7jncvLM/iVy2CYPtY+r3/kjpw8syuFojm+H+n2EloYysGMge
tQhjPM6mU/aTV4jbXpp7q5qDLTnjvVn+nqIXlnSI+fs1BAffHPTA1DD3EjNQf2eI
6T6pNkcPsIpEEiEEUw/vVqaGJ6KZwwZFbkhbvODLAastoKezYCStvq6YqxWp2TQM
I02bGioncBML
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org