Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35342e302f32332d3233203d3e20323638323037.roa
File:                     34352e3233352e35342e302f32332d3233203d3e20323638323037.roa (raw, json)
Hash identifier:          ZqGIfwj87Lp4Sr28iL9dfQ+Bm3ULVwFEOA+83dMKBTY=
Subject key identifier:   AE:18:31:A8:B7:77:63:87:22:A8:F9:F3:E5:73:F0:51:35:44:C2:66
Certificate issuer:       /CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
Certificate serial:       535C05B8CFE920D714CA2BF3B82FD69340B9CED1
Authority key identifier: 46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35342e302f32332d3233203d3e20323638323037.roa
Signing time:             Mon 10 Apr 2023 13:35:12 +0000
ROA not before:           Mon 10 Apr 2023 13:30:12 +0000
ROA not after:            Mon 08 Apr 2024 13:35:12 +0000
asID:                     268207
IP address blocks:        45.235.54.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5c:05:b8:cf:e9:20:d7:14:ca:2b:f3:b8:2f:d6:93:40:b9:ce:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
        Validity
            Not Before: Apr 10 13:30:12 2023 GMT
            Not After : Apr  8 13:35:12 2024 GMT
        Subject: CN=AE1831A8B777638722A8F9F3E573F0513544C266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:7c:3c:4e:b6:47:bd:8b:b7:56:f6:89:ab:
                    b2:11:25:89:6c:6e:89:ad:d8:a2:fe:a5:56:b6:64:
                    ab:6a:a8:82:5b:62:1a:eb:c1:85:a6:10:2f:aa:fd:
                    aa:9e:c4:ab:f0:0c:b8:c7:22:b4:7c:e0:2e:73:ff:
                    6e:4a:8a:0b:cb:71:fa:bd:96:94:22:53:35:4c:48:
                    97:89:18:e2:67:98:57:76:39:43:ff:ff:23:d2:80:
                    07:00:e3:c0:b1:19:bc:7a:bd:de:d8:8b:50:34:b4:
                    93:37:4e:fc:36:3d:5f:1b:3e:90:4e:35:e7:d2:f1:
                    0e:2c:8f:1a:8f:87:e9:f6:78:d3:7d:0b:0b:68:8f:
                    b6:71:ed:32:bd:d1:ba:1e:2d:47:30:e3:62:81:d5:
                    dc:ec:85:4d:31:b6:52:7e:e3:61:62:a9:35:4e:81:
                    d3:1f:c9:ba:3e:df:dd:a6:a6:22:f2:42:e9:3f:0e:
                    bd:28:12:3e:0a:a2:8d:0a:bd:e0:b9:f4:41:58:f3:
                    79:e2:16:23:cb:5b:50:0d:bb:43:40:8d:30:99:f5:
                    d6:ae:ec:a9:4f:4d:4e:f3:cb:eb:d0:e7:83:48:e1:
                    3f:cf:47:1d:0c:81:56:6d:52:67:02:3b:87:84:90:
                    6d:2d:b3:56:bc:64:72:60:ba:6d:64:cd:9c:bb:05:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:18:31:A8:B7:77:63:87:22:A8:F9:F3:E5:73:F0:51:35:44:C2:66
            X509v3 Authority Key Identifier:
                keyid:46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35342e302f32332d3233203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:7a:eb:b5:d8:93:2b:d3:b1:b9:59:20:91:bf:a8:28:5e:9c:
         fe:96:e6:d8:f7:08:86:a4:1a:bf:f6:10:66:b7:20:23:98:87:
         40:d5:6f:86:26:ed:74:4c:2c:bb:8e:e7:43:2d:dc:e2:d9:1b:
         79:c5:b8:d1:77:b9:10:e0:35:81:b7:5f:b1:3f:af:9b:7f:ab:
         c1:4f:f4:57:ef:b0:96:08:13:d8:47:91:5a:4d:78:87:2d:6e:
         fd:36:fb:2f:52:15:75:77:b5:b3:e5:56:89:03:94:0c:49:61:
         b7:62:ae:fc:81:9e:79:20:07:dc:ee:c5:f4:7c:9e:97:57:0a:
         85:60:fb:cf:82:2c:c6:b6:f5:69:45:a5:5d:56:91:d0:35:f6:
         4f:41:e7:39:3b:f7:7c:41:38:25:b5:09:15:62:93:f4:59:7c:
         33:55:c1:9d:db:6e:32:7d:9c:69:06:94:bc:de:1f:f9:ce:9a:
         61:51:93:66:ca:22:e3:fd:5b:a1:c1:be:53:56:41:99:41:a2:
         d3:ad:33:87:dd:44:d0:1c:94:88:d2:e1:5e:92:63:c5:23:f4:
         a6:59:e6:c4:b5:15:11:99:3f:ea:9f:2b:5a:bf:37:83:98:49:
         28:c7:8a:26:be:e6:0a:0d:43:8c:91:cc:7a:d6:68:50:9d:ec:
         76:8c:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org