Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa
File:                     34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa (raw, json)
Hash identifier:          omDl1x+i/mM47wqTDsm3teFI+pWLeX/ENkaQ4CbBPdw=
Subject key identifier:   A0:D5:47:38:E4:0B:2B:99:D0:6A:7B:B9:B5:47:6C:8E:B8:49:D2:B4
Certificate issuer:       /CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
Certificate serial:       324BA295E4AC3F5C1381105E6B7CE90FD222266C
Authority key identifier: CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa
Signing time:             Mon 15 May 2023 20:26:15 +0000
ROA not before:           Mon 15 May 2023 20:21:15 +0000
ROA not after:            Mon 13 May 2024 20:26:15 +0000
asID:                     269184
IP address blocks:        45.181.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4b:a2:95:e4:ac:3f:5c:13:81:10:5e:6b:7c:e9:0f:d2:22:26:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
        Validity
            Not Before: May 15 20:21:15 2023 GMT
            Not After : May 13 20:26:15 2024 GMT
        Subject: CN=A0D54738E40B2B99D06A7BB9B5476C8EB849D2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:24:bf:5a:3f:00:93:fb:e4:2a:cc:55:e1:
                    23:17:e7:4c:eb:90:7c:f9:0b:5b:83:25:29:41:ab:
                    d0:31:d5:bc:73:e8:83:ed:08:5f:27:0e:27:b6:41:
                    3a:1a:13:03:45:74:f4:2f:7c:23:d5:7e:53:31:52:
                    a9:f7:b3:54:85:79:b9:35:64:bc:39:31:06:49:14:
                    c5:bf:83:3b:10:f4:26:da:a8:73:3f:35:df:20:54:
                    26:79:35:96:b8:15:7c:5b:2e:74:da:0b:0f:c5:a0:
                    55:f5:af:99:e8:5f:c1:59:a5:b4:0e:0f:f0:4d:c1:
                    5d:93:0d:02:30:7d:86:c1:60:7e:ba:7b:9a:74:da:
                    68:cd:ff:f4:fa:d0:6c:6d:fc:f3:64:24:eb:aa:c4:
                    bb:ac:02:21:25:ac:e0:9c:8d:c8:a1:1b:80:de:7f:
                    4a:4a:67:25:f6:7f:16:56:1e:fd:c7:50:11:54:d2:
                    49:a2:16:c9:43:d3:89:e5:41:32:f5:7f:8e:27:36:
                    9b:35:01:89:ae:16:f2:90:c3:3a:cc:f4:a0:60:82:
                    eb:44:62:cf:7f:52:60:06:fb:4b:ed:b6:63:e4:88:
                    f4:bb:ef:4c:e3:0a:f4:cc:bf:2f:06:c3:56:48:c2:
                    bf:9b:6e:6f:5f:19:54:9b:bf:a7:91:aa:6b:20:2b:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D5:47:38:E4:0B:2B:99:D0:6A:7B:B9:B5:47:6C:8E:B8:49:D2:B4
            X509v3 Authority Key Identifier:
                keyid:CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:a5:8c:ae:69:42:37:e9:4c:0b:23:01:25:2a:1c:64:35:98:
         06:6d:81:ee:b7:d4:19:24:34:df:92:58:4d:aa:b8:09:c9:bd:
         c9:52:79:ae:a2:2b:4a:58:42:cf:66:47:8b:94:a9:24:0a:32:
         29:82:bb:6e:97:d0:ad:9e:da:49:64:6c:31:ad:e2:eb:45:9d:
         3b:f5:20:d7:62:b2:1a:b2:57:20:6d:7e:d7:78:a0:e4:0f:71:
         61:0b:25:ef:57:bc:6e:98:a4:2b:8a:22:bd:03:f1:00:c9:50:
         69:e9:3f:5c:3d:25:67:01:9e:d8:12:65:5d:5c:e8:83:01:c7:
         11:d7:50:c4:7a:11:61:8b:3b:c6:43:9f:93:d9:23:ef:26:fc:
         3c:de:0c:70:66:ee:db:40:79:c8:64:cc:35:3e:4a:7e:9a:cb:
         b0:e2:23:a3:85:cf:4a:a1:01:fe:96:66:f9:5b:8c:71:a2:2f:
         57:fc:c5:4d:2a:fe:ef:95:9f:af:8c:b1:d5:e5:32:c4:b5:8f:
         28:99:97:ef:08:ef:d3:db:37:50:66:aa:d2:c1:50:e5:56:f5:
         71:d3:bd:58:41:4d:23:87:12:52:bd:11:da:65:93:af:6c:fd:
         2c:bf:79:25:eb:69:b3:1c:fa:9c:ea:29:2c:72:b5:a6:41:d8:
         05:06:98:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMkuileSsP1wTgRBea3zpD9IiJmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I4ODAwOEQyMENBNkIzQUM4NEZENTdBODBEOTY5QUI4
NzY5QTVBQjAeFw0yMzA1MTUyMDIxMTVaFw0yNDA1MTMyMDI2MTVaMDMxMTAvBgNV
BAMTKEEwRDU0NzM4RTQwQjJCOTlEMDZBN0JCOUI1NDc2QzhFQjg0OUQyQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/SS/Wj8Ak/vkKsxV4SMX50zr
kHz5C1uDJSlBq9Ax1bxz6IPtCF8nDie2QToaEwNFdPQvfCPVflMxUqn3s1SFebk1
ZLw5MQZJFMW/gzsQ9CbaqHM/Nd8gVCZ5NZa4FXxbLnTaCw/FoFX1r5noX8FZpbQO
D/BNwV2TDQIwfYbBYH66e5p02mjN//T60Gxt/PNkJOuqxLusAiElrOCcjcihG4De
f0pKZyX2fxZWHv3HUBFU0kmiFslD04nlQTL1f44nNps1AYmuFvKQwzrM9KBggutE
Ys9/UmAG+0vttmPkiPS770zjCvTMvy8Gw1ZIwr+bbm9fGVSbv6eRqmsgK7kTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoNVHOOQLK5nQanu5tUdsjrhJ0rQwHwYDVR0j
BBgwFoAUy4gAjSDKazrIT9V6gNlpq4dppaswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0ZZSmkxMlVaZ2pRaUV1dFF3V0s3dUgzWVBIbjkxRng2S3B4MmNBWGRH
ZjQvMC9DQjg4MDA4RDIwQ0E2QjNBQzg0RkQ1N0E4MEQ5NjlBQjg3NjlBNUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NCODgwMDhEMjBDQTZCM0FD
ODRGRDU3QTgwRDk2OUFCODc2OUE1QUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dGWUppMTJVWmdqUWlFdXRRd1dLN3VIM1lQSG45MUZ4NktweDJjQVhkR2Y0LzAv
MzQzNTJlMzEzODMxMmUzMTMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttYQwDQYJKoZIhvcNAQELBQADggEBABqljK5p
QjfpTAsjASUqHGQ1mAZtge631BkkNN+SWE2quAnJvclSea6iK0pYQs9mR4uUqSQK
MimCu26X0K2e2klkbDGt4utFnTv1INdishqyVyBtftd4oOQPcWELJe9XvG6YpCuK
Ir0D8QDJUGnpP1w9JWcBntgSZV1c6IMBxxHXUMR6EWGLO8ZDn5PZI+8m/DzeDHBm
7ttAechkzDU+Sn6ay7DiI6OFz0qhAf6WZvlbjHGiL1f8xU0q/u+Vn6+MsdXlMsS1
jyiZl+8I79PbN1BmqtLBUOVW9XHTvVhBTSOHElK9Edplk69s/Sy/eSXrabMc+pzq
KSxytaZB2AUGmKI=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org