Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/0/34352e3233352e3135362e302f32322d3234203d3e20323637343139.roa
File:                     34352e3233352e3135362e302f32322d3234203d3e20323637343139.roa (raw, json)
Hash identifier:          yZjoif5tMu2q+AnekzKrUVw4Qmo+QFW1zg95L20Qu1Y=
Subject key identifier:   3E:28:11:AE:68:60:DA:02:55:B2:E5:0B:90:B4:02:57:ED:B8:72:B0
Certificate issuer:       /CN=88C51A30EFED5BB3C427647D53FF08D4D4B609E4
Certificate serial:       454840E0BBDE9147A117286C8D4AA77A36C50A88
Authority key identifier: 88:C5:1A:30:EF:ED:5B:B3:C4:27:64:7D:53:FF:08:D4:D4:B6:09:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C51A30EFED5BB3C427647D53FF08D4D4B609E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/0/34352e3233352e3135362e302f32322d3234203d3e20323637343139.roa
Signing time:             Wed 06 Sep 2023 18:30:54 +0000
ROA not before:           Wed 06 Sep 2023 18:25:54 +0000
ROA not after:            Wed 04 Sep 2024 18:30:54 +0000
asID:                     267419
IP address blocks:        45.235.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:48:40:e0:bb:de:91:47:a1:17:28:6c:8d:4a:a7:7a:36:c5:0a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C51A30EFED5BB3C427647D53FF08D4D4B609E4
        Validity
            Not Before: Sep  6 18:25:54 2023 GMT
            Not After : Sep  4 18:30:54 2024 GMT
        Subject: CN=3E2811AE6860DA0255B2E50B90B40257EDB872B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:ff:f9:b1:96:e4:db:3a:38:8b:85:08:e9:
                    3a:7c:ac:4f:c3:21:72:c8:78:8b:0e:6d:1e:ce:2c:
                    0a:5b:75:04:43:09:d2:ba:80:3d:3d:69:b4:37:38:
                    e3:63:7d:5c:26:78:e3:ef:16:4a:c5:89:c1:22:a1:
                    a6:0b:8a:6c:5b:cd:e5:b5:66:13:45:5c:88:ec:5d:
                    17:71:ea:e6:a2:94:44:07:0f:b0:cc:e9:e9:ff:fe:
                    3d:b1:99:83:88:14:4d:54:70:02:d6:e7:44:69:18:
                    13:a0:6a:58:9e:f1:e9:d9:6f:e4:fd:3d:73:c4:41:
                    53:9e:81:3f:c5:29:8a:2e:a0:eb:5e:f8:7f:3a:6a:
                    48:64:4b:b3:5f:d1:b7:8e:6a:3b:d6:8f:85:95:55:
                    9c:f8:a2:24:5b:eb:81:6a:57:20:2d:7a:31:ea:06:
                    c4:f7:d0:00:55:49:3d:47:0e:a8:fd:c4:ca:1d:09:
                    7b:d3:6c:84:79:38:bb:29:23:a4:07:b8:16:4e:0f:
                    b0:db:58:79:99:ab:20:4e:a7:ba:dc:f9:a8:6a:fa:
                    3f:01:6b:53:2c:dc:b8:9a:b8:de:cb:01:a2:a9:96:
                    4a:81:fd:38:7b:13:0e:7b:b2:b4:39:3f:50:a7:79:
                    d5:b1:7b:1e:6c:c3:97:f3:0c:c6:67:89:5b:55:72:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:28:11:AE:68:60:DA:02:55:B2:E5:0B:90:B4:02:57:ED:B8:72:B0
            X509v3 Authority Key Identifier:
                keyid:88:C5:1A:30:EF:ED:5B:B3:C4:27:64:7D:53:FF:08:D4:D4:B6:09:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/0/88C51A30EFED5BB3C427647D53FF08D4D4B609E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C51A30EFED5BB3C427647D53FF08D4D4B609E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/0/34352e3233352e3135362e302f32322d3234203d3e20323637343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:55:48:3e:b8:f9:41:28:c0:0b:77:04:17:35:a0:52:76:f8:
         a1:c1:fb:57:c2:df:4c:bd:fb:b2:e9:df:df:73:f3:ac:72:5a:
         b2:f4:5a:6b:f4:ca:30:31:c0:b8:1e:04:91:92:88:c4:96:d6:
         87:5c:03:0b:c6:53:e2:1f:41:09:98:8c:fe:3a:6b:38:36:e8:
         86:4c:51:4c:3d:ce:d5:31:b5:9e:7c:77:9e:3d:db:f4:a0:9a:
         5d:24:9a:5c:7a:fc:1d:3a:f8:ef:b1:93:d2:70:d1:2d:f2:92:
         60:e7:88:e0:60:a7:75:7c:50:be:37:53:7b:79:96:71:ad:10:
         6c:a9:a9:8c:a4:30:95:e7:0c:30:f5:80:66:14:11:40:7a:dd:
         c3:8a:e8:70:00:2e:e8:b2:e0:7b:64:a1:6c:30:c2:0d:d1:3b:
         24:34:ab:7c:62:31:7c:f8:83:5f:56:2d:55:7e:37:34:93:50:
         06:27:61:17:26:15:84:7f:e1:8f:b1:3c:70:c3:b5:c5:05:f4:
         e3:e9:29:d5:5d:79:71:aa:66:ef:17:48:b7:5d:10:c3:5d:dd:
         bd:bf:0c:81:64:15:06:de:ed:be:2d:be:87:3b:33:bb:77:df:
         ba:19:ba:4c:22:95:f1:2f:29:93:7f:f2:bd:84:a8:b5:e0:1e:
         1f:d1:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org