Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38322e302f32332d3233203d3e20323637333435.roa
File:                     34352e3233342e38322e302f32332d3233203d3e20323637333435.roa (raw, json)
Hash identifier:          CSwN3pOZLNHE3Nn+FxJcgznkv+rQNZ5RbmIqQKhW8ss=
Subject key identifier:   5E:5E:A3:4D:2C:34:DA:F6:9D:5C:EA:AB:1B:31:F6:4E:4F:7B:17:76
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       70C115A41E1C0122E756148C92ABCD1810285D7B
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38322e302f32332d3233203d3e20323637333435.roa
Signing time:             Fri 29 Sep 2023 13:00:00 +0000
ROA not before:           Fri 29 Sep 2023 12:55:00 +0000
ROA not after:            Fri 27 Sep 2024 13:00:00 +0000
asID:                     267345
IP address blocks:        45.234.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c1:15:a4:1e:1c:01:22:e7:56:14:8c:92:ab:cd:18:10:28:5d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Sep 29 12:55:00 2023 GMT
            Not After : Sep 27 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c0:2a:65:82:c0:e9:55:69:91:11:c9:13:86:
                    c6:a4:e5:b6:cf:6e:2e:15:a7:40:a7:3f:bf:68:91:
                    c7:4b:b9:cb:37:0a:4c:1e:f5:2a:1a:bb:f8:91:2a:
                    42:ff:2f:49:fe:20:d3:d6:06:8e:e8:f4:b0:3d:2d:
                    92:1a:0e:21:a6:74:95:f2:8c:52:a4:5d:72:3c:cf:
                    a2:33:2f:05:fb:05:b0:4d:dd:0d:ec:bc:fa:63:d0:
                    34:16:07:49:2c:2e:97:ea:37:6e:a3:48:84:96:cb:
                    f2:9f:25:92:f1:48:73:12:a3:09:20:7d:18:79:b2:
                    c8:96:d9:65:9a:28:c1:13:c8:2b:6e:d4:39:c2:20:
                    ff:d3:7e:54:50:5e:96:75:90:c1:13:c5:36:90:9b:
                    cd:44:d3:af:1e:39:bd:d9:dc:04:0e:b9:d6:df:ef:
                    21:0e:48:7f:48:1d:97:62:48:8d:2b:26:10:9b:a2:
                    48:3e:2c:29:13:d1:ee:75:7a:29:b1:83:0f:b6:35:
                    1a:08:ab:e0:5c:bd:bc:48:d8:2a:77:f6:b8:01:67:
                    2f:3f:99:ad:24:ba:5d:52:7b:c0:85:52:77:e2:cb:
                    c0:fa:d9:96:94:e6:81:b8:f3:96:09:35:85:34:b4:
                    ba:0b:5a:82:e1:70:f9:7d:73:36:7f:9c:af:33:91:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5E:A3:4D:2C:34:DA:F6:9D:5C:EA:AB:1B:31:F6:4E:4F:7B:17:76
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38322e302f32332d3233203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:cf:1a:ba:67:f1:a9:59:74:33:87:41:5d:eb:e3:5b:d2:e1:
         6c:f6:6e:8e:5d:59:29:16:13:6f:a0:70:da:e2:f5:2b:b7:ed:
         31:86:a9:87:97:6e:08:16:c4:b5:02:4a:a9:1d:ff:e4:39:57:
         5f:69:70:0e:e6:e3:c1:61:03:4e:32:88:5a:4e:f5:d4:fd:57:
         92:19:95:a4:2b:4e:38:d9:60:2b:0f:20:1e:4a:f6:9b:bf:2e:
         f3:4c:3a:0b:2d:34:44:5e:c0:a6:4a:9a:ea:27:8a:45:49:d8:
         22:72:50:a4:7d:a8:f2:3f:2a:be:83:f3:22:9f:c5:8a:4f:6e:
         38:4c:8c:24:cc:15:b4:a4:eb:57:58:dd:22:8c:95:80:56:a6:
         da:6f:8c:3b:be:51:a6:01:b1:f8:b9:58:f8:72:ce:e3:63:a8:
         3d:9c:e2:8b:c1:dc:83:fa:c2:f0:99:c4:cc:44:b7:2c:e7:e2:
         87:43:76:ec:16:e9:af:d9:71:ad:c0:09:84:ca:9e:05:5e:72:
         33:83:a9:43:e1:2e:04:71:b1:f1:a5:e0:7a:c2:50:de:c1:c5:
         8e:09:50:f1:66:b4:e3:fd:17:44:a8:4e:ec:4d:28:f2:de:40:
         6c:52:64:ff:28:03:9c:64:8d:d1:17:4e:6e:92:62:5b:c2:2b:
         44:a1:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org