Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/34352e3136342e3135322e302f32332d3233203d3e20323638363139.roa
File:                     34352e3136342e3135322e302f32332d3233203d3e20323638363139.roa (raw, json)
Hash identifier:          Wd98o0KKRav0NCEBYuquXsRJMxSaK6KJ0Jprxne0WTg=
Subject key identifier:   19:D3:03:68:43:8C:3B:1A:F7:A5:75:BF:07:56:FC:04:5C:9C:6E:E2
Certificate issuer:       /CN=360AF1068F03010D0F49188E66411805181F3A57
Certificate serial:       5EBE5780FCA41B8FD3F20F24FE85783B1C1C71D7
Authority key identifier: 36:0A:F1:06:8F:03:01:0D:0F:49:18:8E:66:41:18:05:18:1F:3A:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/360AF1068F03010D0F49188E66411805181F3A57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/34352e3136342e3135322e302f32332d3233203d3e20323638363139.roa
Signing time:             Tue 21 Mar 2023 18:45:04 +0000
ROA not before:           Tue 21 Mar 2023 18:40:04 +0000
ROA not after:            Tue 19 Mar 2024 18:45:04 +0000
asID:                     268619
IP address blocks:        45.164.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:be:57:80:fc:a4:1b:8f:d3:f2:0f:24:fe:85:78:3b:1c:1c:71:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360AF1068F03010D0F49188E66411805181F3A57
        Validity
            Not Before: Mar 21 18:40:04 2023 GMT
            Not After : Mar 19 18:45:04 2024 GMT
        Subject: CN=19D30368438C3B1AF7A575BF0756FC045C9C6EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d7:17:c9:c6:29:54:03:38:3f:08:a3:23:35:
                    a6:5f:dd:4c:6c:8a:67:f5:4f:21:9d:fc:30:6e:fa:
                    ec:24:d0:54:f0:db:0f:1e:4d:14:10:20:c6:2e:e8:
                    5f:54:4a:b2:99:2b:f8:fd:e1:c4:64:13:82:55:b0:
                    41:fe:91:38:bf:f3:04:62:dd:34:d3:04:e7:40:ca:
                    88:01:ae:56:e1:07:ed:42:b2:66:c6:36:4e:74:00:
                    f8:60:dd:8f:fc:3e:2f:c8:7c:f8:83:64:f3:d4:dc:
                    ec:5f:ed:cb:30:64:48:02:af:b5:3b:d4:89:31:cf:
                    43:5c:ff:60:d3:62:c8:27:06:74:e5:27:e7:fc:71:
                    a4:33:40:0a:3a:f1:ac:10:13:3e:af:04:da:86:44:
                    fb:9f:a2:f6:9f:4d:52:69:5f:cb:3d:64:a5:56:da:
                    33:81:55:e6:90:46:5a:25:d5:e8:3d:d6:23:35:38:
                    c3:b7:be:b2:18:9e:88:98:e1:c4:ea:d1:ea:26:bb:
                    3c:71:17:8e:65:bd:92:3a:53:bf:5d:f8:6e:a6:14:
                    60:7c:cb:f8:c1:07:74:3b:b8:e0:64:d7:af:4f:82:
                    3a:03:8d:aa:26:99:25:55:c9:c4:46:7f:19:c9:10:
                    7d:a4:0c:61:2b:f2:b5:8d:f6:66:e9:33:76:c7:a3:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D3:03:68:43:8C:3B:1A:F7:A5:75:BF:07:56:FC:04:5C:9C:6E:E2
            X509v3 Authority Key Identifier:
                keyid:36:0A:F1:06:8F:03:01:0D:0F:49:18:8E:66:41:18:05:18:1F:3A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/360AF1068F03010D0F49188E66411805181F3A57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/360AF1068F03010D0F49188E66411805181F3A57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/34352e3136342e3135322e302f32332d3233203d3e20323638363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:0d:39:97:43:ed:55:11:c5:3a:29:e5:72:0d:c3:b9:4e:da:
         44:3d:be:b7:91:a3:be:e3:4d:be:ad:a1:10:78:be:fa:95:62:
         7b:31:b2:bb:49:7d:b5:8d:e4:86:28:2c:c8:87:94:0b:72:f5:
         8c:1d:60:51:10:c9:5c:62:f1:8b:ae:71:cf:3d:8c:6d:2c:db:
         6e:63:ec:b7:11:fc:b2:6f:07:80:b5:07:e0:96:70:b8:98:04:
         5f:03:cb:33:31:b0:b3:0c:41:91:af:73:59:92:e4:74:3d:95:
         1b:80:1b:95:b2:c0:07:b3:d0:30:c7:fb:8e:2f:7f:9d:fc:05:
         ae:db:93:0c:6d:53:11:23:00:2e:78:cd:5e:11:b0:79:ef:e3:
         a3:9d:8c:44:f4:32:66:20:bb:0a:ec:cf:e8:b4:ba:2e:51:53:
         14:0b:11:57:4f:f1:18:e1:16:ba:87:12:9f:e3:32:4d:0a:97:
         08:a0:18:d7:1e:02:91:68:71:12:6b:fe:ee:5a:16:dc:3e:42:
         ae:4c:a7:98:a3:9d:cd:e5:33:b6:6a:47:76:58:eb:0c:91:48:
         9a:aa:c8:b1:f8:cd:2e:4e:94:48:c6:32:ca:02:ab:95:0f:4d:
         80:4b:40:0d:f6:01:dc:b2:fb:60:bf:d2:8a:6f:38:08:f1:b5:
         6b:04:4e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org