Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa
File:                     34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa (raw, json)
Hash identifier:          /7uIGXv/71DXwzPMB2rR8L89TYTKz63/xoDyBROn6iw=
Subject key identifier:   95:0C:D2:2F:CA:28:37:86:A8:26:1A:33:5C:A1:AD:DF:44:EA:A5:DA
Certificate issuer:       /CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
Certificate serial:       31A4F67E879CCB5C3516A3D63851FCAF73A36874
Authority key identifier: CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa
Signing time:             Mon 15 May 2023 20:26:23 +0000
ROA not before:           Mon 15 May 2023 20:21:23 +0000
ROA not after:            Mon 13 May 2024 20:26:23 +0000
asID:                     269184
IP address blocks:        45.181.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a4:f6:7e:87:9c:cb:5c:35:16:a3:d6:38:51:fc:af:73:a3:68:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
        Validity
            Not Before: May 15 20:21:23 2023 GMT
            Not After : May 13 20:26:23 2024 GMT
        Subject: CN=950CD22FCA283786A8261A335CA1ADDF44EAA5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:07:2a:6c:93:cc:7d:79:aa:59:df:00:65:
                    5d:00:8c:69:f7:79:94:07:87:e5:f0:7d:d5:b6:bb:
                    4d:ca:0d:55:28:46:ad:7b:9f:43:16:95:dd:f3:44:
                    d2:33:db:cf:3b:c6:16:d6:a0:81:7c:b9:93:5e:8f:
                    55:c2:f6:8d:6d:ae:e2:8b:16:2e:57:9a:9f:d6:f9:
                    56:da:15:35:14:64:52:da:6a:c8:e3:86:31:10:fb:
                    74:57:7c:29:99:04:77:16:6c:be:92:72:4f:91:c0:
                    ed:d6:17:cb:b3:e7:e5:30:8e:f8:1a:95:7f:b7:c0:
                    bb:ca:69:3e:42:51:12:bf:21:02:1c:b8:29:d2:6a:
                    f8:33:e3:5d:4b:f1:cf:0d:88:4e:71:8c:b0:d0:b6:
                    b9:94:bf:d8:e2:25:31:97:e1:7f:52:d6:1b:a8:c4:
                    99:d2:2e:e2:28:89:9f:2b:d6:a9:7e:97:f2:06:ed:
                    c7:be:42:04:77:34:71:ca:a6:de:66:65:c0:3c:0e:
                    fc:35:a9:31:b6:b9:42:fa:48:ea:3e:ff:5e:2b:2c:
                    13:b0:7d:eb:30:fc:d6:ac:2c:1f:26:eb:9c:52:bd:
                    a9:1d:56:22:c7:bb:04:65:63:10:24:f7:d2:d3:e5:
                    04:50:87:78:ad:07:a9:c1:c1:51:1d:76:42:89:39:
                    b8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0C:D2:2F:CA:28:37:86:A8:26:1A:33:5C:A1:AD:DF:44:EA:A5:DA
            X509v3 Authority Key Identifier:
                keyid:CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:52:17:66:8d:9a:d9:0f:e0:c6:1b:c7:e1:ca:0c:7c:2d:5e:
         d7:74:1d:c2:ab:81:47:a7:17:6f:a9:0d:68:c2:33:6d:f2:cc:
         55:56:37:32:4c:5d:fd:50:11:72:90:98:5e:4d:84:03:8f:3f:
         4a:ef:df:89:09:76:86:b2:83:ea:bd:83:3a:08:3d:c5:22:7c:
         ea:04:b9:51:04:a7:17:06:02:20:23:2c:d8:b2:bb:5c:b9:08:
         ac:f1:ac:b6:0c:6c:f6:60:bd:da:d1:7d:a4:ce:b1:9a:2d:a2:
         1f:92:fc:a3:c8:e1:69:1e:79:9b:00:1e:d5:94:cf:f2:d7:a4:
         34:1f:b5:6e:b1:95:4b:02:84:4e:9f:d1:23:19:e5:2f:8c:85:
         cb:7d:30:da:c6:42:0b:1e:a3:8a:34:9a:56:79:5e:a7:03:d5:
         60:7f:90:71:25:b5:26:82:9c:f6:ba:d1:2e:13:9f:d3:ed:a6:
         04:f5:a4:d0:3a:50:e9:c1:f1:ef:b0:bc:65:fb:b3:2e:22:19:
         c7:0f:70:6a:02:c7:73:3b:05:b3:c3:58:04:78:46:6f:aa:86:
         80:a8:2a:28:77:ab:b4:30:e8:f5:05:c3:9f:db:2c:b6:e4:4b:
         83:4b:d0:81:28:73:12:24:a3:81:b8:57:85:d9:09:15:f6:d5:
         be:79:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:30 2024 by rpki-client on console-ams.rpki-client.org