Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131382e302f32332d3233203d3e20323636353834.roa
File:                     34352e372e3131382e302f32332d3233203d3e20323636353834.roa (raw, json)
Hash identifier:          Lq1IdLz11cvC4dVokOI0V9IviV6R0YumPddNAkOj2OE=
Subject key identifier:   05:B8:78:9F:A0:65:0B:7C:34:20:60:F6:13:2F:A9:9E:A7:A2:37:BA
Certificate issuer:       /CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
Certificate serial:       68D08FDD51D8555067777DE593B4AAE189886718
Authority key identifier: CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131382e302f32332d3233203d3e20323636353834.roa
Signing time:             Tue 20 Jun 2023 13:20:05 +0000
ROA not before:           Tue 20 Jun 2023 13:15:05 +0000
ROA not after:            Tue 18 Jun 2024 13:20:05 +0000
asID:                     266584
IP address blocks:        45.7.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d0:8f:dd:51:d8:55:50:67:77:7d:e5:93:b4:aa:e1:89:88:67:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFB94B3528DB4AA42655F32491EFCB3F404B31CD
        Validity
            Not Before: Jun 20 13:15:05 2023 GMT
            Not After : Jun 18 13:20:05 2024 GMT
        Subject: CN=05B8789FA0650B7C342060F6132FA99EA7A237BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:73:91:8b:8d:d3:3b:ff:3c:f2:3b:3d:70:
                    29:cb:1b:c2:41:d1:54:c4:c7:09:fc:d4:f9:59:9a:
                    49:64:03:66:da:6a:0b:73:63:94:f8:5a:92:45:5f:
                    e7:75:44:69:12:7b:ef:cd:06:ef:e6:f3:52:c1:17:
                    ee:4f:9c:a1:53:21:4a:09:e2:3a:ab:ec:f5:a5:95:
                    91:76:dd:8f:22:b4:2a:3b:fc:9f:53:50:2a:96:8d:
                    15:ff:d8:48:50:50:fb:f3:33:90:eb:f5:a2:5d:d0:
                    fa:20:fe:f3:d5:8c:e7:7c:2c:74:75:f8:6b:da:f4:
                    74:c0:47:ad:a2:93:9f:34:1a:4a:d3:f0:91:36:e1:
                    6a:e0:c6:11:3d:e1:2c:69:0e:a3:82:41:9a:7a:ae:
                    75:e7:17:bd:ae:ce:e9:d4:ba:05:74:88:be:4a:1f:
                    ac:33:51:3a:b4:b5:69:fd:e2:c6:bf:29:67:32:5c:
                    d3:da:43:9d:64:70:e1:75:3a:5c:f1:b4:b0:e1:32:
                    b5:00:3a:24:8e:d5:57:2d:d6:ac:a8:b8:0b:31:3a:
                    d3:fa:4a:b6:ad:12:c6:b7:82:70:8d:fe:64:93:26:
                    65:4b:49:54:95:9b:64:cf:bb:a3:84:06:33:70:f5:
                    6a:88:ad:95:65:39:b1:16:23:0e:26:1b:62:d7:4f:
                    19:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B8:78:9F:A0:65:0B:7C:34:20:60:F6:13:2F:A9:9E:A7:A2:37:BA
            X509v3 Authority Key Identifier:
                keyid:CF:B9:4B:35:28:DB:4A:A4:26:55:F3:24:91:EF:CB:3F:40:4B:31:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFB94B3528DB4AA42655F32491EFCB3F404B31CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/34352e372e3131382e302f32332d3233203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:2c:73:b7:4c:91:24:73:51:96:f6:d8:73:d6:a7:6f:c5:3c:
         90:b9:1a:53:8f:a6:a4:8c:0c:d7:91:55:47:ed:ba:21:8c:80:
         6f:96:09:d3:cf:10:bd:c7:be:ff:97:e0:34:d8:cb:75:f3:44:
         4e:ca:34:38:18:7c:a9:d8:df:a9:b9:76:9e:0e:a2:e4:f5:ec:
         77:d0:39:2b:67:13:ea:b4:97:3a:7f:3a:f0:e2:a5:a0:e5:8b:
         16:ff:6c:e7:12:64:35:2f:55:df:2a:7d:57:0e:34:35:c5:cb:
         3e:50:c4:ca:39:dd:17:d1:fe:ae:c5:a2:15:15:dc:ae:83:67:
         90:46:a1:39:0e:e4:38:cb:13:e1:6f:af:7b:e5:3b:f9:90:0c:
         34:9c:00:c6:06:87:93:ae:f4:64:79:d6:a3:e9:7b:b4:1a:8a:
         07:f7:4c:e2:45:21:17:46:32:e5:8c:b3:bf:d6:33:ba:ca:96:
         ee:e4:62:49:2a:6c:df:d0:2b:75:27:41:49:a5:5d:00:01:98:
         41:fa:31:c1:71:53:5e:2c:98:eb:88:0b:11:21:ee:65:85:5e:
         23:d1:fe:21:34:44:7e:4f:12:86:be:eb:46:b6:e6:c1:ea:09:
         99:dd:57:a0:54:ce:e0:3e:ee:f6:14:21:6f:76:69:91:39:c0:
         b3:65:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org