Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa
File:                     34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa (raw, json)
Hash identifier:          IXw2c73bRVBADqddKsYswRTlhaCv52PUE46US54olbY=
Subject key identifier:   46:0C:B6:F5:CA:47:17:CD:ED:12:91:4F:03:71:98:BD:77:54:39:3F
Certificate issuer:       /CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
Certificate serial:       75D71B2D9D11694853FC9CF2B0A1E6502A64E87E
Authority key identifier: CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa
Signing time:             Mon 15 May 2023 20:26:17 +0000
ROA not before:           Mon 15 May 2023 20:21:17 +0000
ROA not after:            Mon 13 May 2024 20:26:17 +0000
asID:                     269184
IP address blocks:        45.181.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d7:1b:2d:9d:11:69:48:53:fc:9c:f2:b0:a1:e6:50:2a:64:e8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
        Validity
            Not Before: May 15 20:21:17 2023 GMT
            Not After : May 13 20:26:17 2024 GMT
        Subject: CN=460CB6F5CA4717CDED12914F037198BD7754393F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ec:34:35:4b:83:ef:a0:47:3d:1b:27:c4:64:
                    61:8c:ba:29:2d:6a:07:eb:da:a2:e1:ab:b1:68:f4:
                    dd:87:f8:1c:df:5b:2e:b1:5a:7e:39:9d:ec:41:ad:
                    91:77:8c:86:61:47:f6:65:dd:17:01:d3:55:d2:24:
                    da:2c:ab:d0:c7:f0:ed:a9:2a:5f:6d:a9:60:7a:fd:
                    6a:3d:96:66:d6:a4:90:37:f5:9b:9d:55:26:46:8b:
                    42:38:03:7b:7c:3d:19:8d:a4:5f:f1:47:f5:3d:03:
                    96:90:86:23:c6:39:de:5a:59:69:c1:cd:18:0a:51:
                    5d:a7:38:e7:fc:6c:c2:76:39:57:1b:3f:12:57:0b:
                    33:ed:78:c6:c1:61:26:11:a5:bc:d8:6f:b7:ee:82:
                    29:26:40:a2:60:b4:39:a6:88:ab:7b:1e:96:94:1f:
                    80:10:6d:ce:5d:97:90:25:df:03:fa:9d:73:10:44:
                    d5:00:a1:58:4c:7e:0b:72:30:f8:6f:42:1f:a3:72:
                    e9:4f:d8:c0:8f:59:ae:6a:01:c5:37:a6:d6:a0:ea:
                    5d:a5:51:ca:a5:4b:4d:4a:1a:f3:cf:ae:01:4c:00:
                    6d:f0:de:73:b0:85:71:a6:28:62:56:97:c9:75:49:
                    0b:05:0f:79:f0:fc:7b:3d:4b:86:e2:2a:b3:e2:a1:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0C:B6:F5:CA:47:17:CD:ED:12:91:4F:03:71:98:BD:77:54:39:3F
            X509v3 Authority Key Identifier:
                keyid:CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:97:d9:86:88:09:ac:8c:e0:4c:98:7c:f7:e2:36:c9:f5:71:
         a1:31:f0:60:77:15:aa:17:ce:76:f2:84:25:5f:d6:bc:45:ff:
         fd:0c:fb:8e:ca:16:14:9b:54:16:d6:07:28:48:27:0b:e6:76:
         72:3a:f7:97:d6:13:dc:5e:82:ea:e2:e9:1e:73:a9:88:db:64:
         6b:aa:e0:63:2a:da:c4:04:36:bc:2a:8a:d6:b1:3b:47:e9:ac:
         16:1b:9b:a1:85:7f:7c:6c:f0:b5:65:31:87:61:92:bb:e0:ae:
         f4:8c:ef:70:e0:bf:98:0a:b5:c4:d8:26:b2:6e:e4:09:38:11:
         c5:13:f0:dc:24:d6:da:22:e1:5c:74:8e:ab:8f:8a:d1:12:af:
         b0:61:ad:11:b5:8a:ae:bf:7a:b4:dd:1c:e5:a2:68:4c:bd:9e:
         96:9f:9a:29:e4:71:7f:21:af:65:e4:6a:e8:0e:a4:8c:ba:43:
         d4:10:c5:79:e1:6f:1d:95:b5:81:b0:38:c7:5c:e0:5e:90:f1:
         cc:03:bf:d3:8e:1d:f0:0a:c4:94:dd:a0:cc:2a:9c:54:8f:75:
         af:2e:a9:55:15:1d:78:f1:00:ab:ac:25:45:dd:19:65:19:a3:
         d3:f9:eb:de:a0:b3:7e:0b:23:14:c5:38:15:94:9a:df:7e:72:
         0c:0e:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org