Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133322e302f32332d3233203d3e20323636393636.roa
File:                     34352e3232362e3133322e302f32332d3233203d3e20323636393636.roa (raw, json)
Hash identifier:          jId3BFzdQ2vHitxPK+a3c0a+BMxXsr0EWSsZEBDvQ/4=
Subject key identifier:   51:74:FC:DC:01:74:56:62:5A:2C:F2:95:13:63:39:E2:FD:53:68:49
Certificate issuer:       /CN=80C240FD65B3474E7A81FEE3D72F0FFFC2B09170
Certificate serial:       5362E787CC96453B509658EC6005FB80466D6596
Authority key identifier: 80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133322e302f32332d3233203d3e20323636393636.roa
Signing time:             Fri 23 Jun 2023 20:00:00 +0000
ROA not before:           Fri 23 Jun 2023 19:55:00 +0000
ROA not after:            Fri 21 Jun 2024 20:00:00 +0000
asID:                     266966
IP address blocks:        45.226.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:62:e7:87:cc:96:45:3b:50:96:58:ec:60:05:fb:80:46:6d:65:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C240FD65B3474E7A81FEE3D72F0FFFC2B09170
        Validity
            Not Before: Jun 23 19:55:00 2023 GMT
            Not After : Jun 21 20:00:00 2024 GMT
        Subject: CN=5174FCDC017456625A2CF295136339E2FD536849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e4:16:01:7e:3c:ef:a2:c1:58:6a:57:00:1d:
                    9e:82:4c:fd:8a:d9:c2:c7:2d:05:c4:03:31:e3:75:
                    e0:fc:1d:26:7a:09:c7:68:8c:9d:82:a2:86:80:d0:
                    24:a4:77:f2:58:46:dc:ef:3c:6f:7a:1e:e2:d3:05:
                    e4:73:d8:0f:b5:79:a3:89:45:47:47:11:2c:0c:a8:
                    1b:19:07:7c:fd:1d:f9:0c:03:1d:04:10:9b:85:f8:
                    83:a3:91:7f:d6:4a:50:e4:5e:c5:db:a5:0f:85:d2:
                    6f:fd:7d:80:f1:1e:b3:1e:3a:3f:a1:fe:08:3b:0f:
                    15:43:77:23:3a:03:ef:8f:20:c6:4e:47:72:4f:a7:
                    df:12:fa:33:b5:f1:e8:ed:55:b2:f9:ac:a2:41:72:
                    76:bf:ab:de:31:fb:41:07:b2:68:96:8a:84:ee:84:
                    1f:e4:f6:30:ad:5f:4d:04:59:3c:cf:b2:84:a8:df:
                    65:3c:1c:ec:83:88:7e:d8:04:b7:1d:1f:28:e2:13:
                    3a:84:49:87:96:96:b7:47:ce:c4:50:48:c1:48:06:
                    16:4e:e4:a1:3d:b8:bb:2b:bd:e6:5c:78:c6:29:d9:
                    09:52:30:24:e0:dc:e0:d4:6b:ec:cd:ec:86:95:05:
                    a4:bb:a9:18:13:b5:cf:8d:cb:b2:3c:2e:06:c1:61:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:74:FC:DC:01:74:56:62:5A:2C:F2:95:13:63:39:E2:FD:53:68:49
            X509v3 Authority Key Identifier:
                keyid:80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133322e302f32332d3233203d3e20323636393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:0a:d7:d6:5f:e2:81:2d:aa:4a:85:af:3a:e0:15:46:01:82:
         b8:f9:af:7c:b8:d4:5f:68:98:ca:6d:6a:50:22:e6:b5:db:44:
         a6:c8:e0:92:b9:75:7f:a4:3d:a6:33:55:fe:97:e9:43:52:e5:
         e0:c4:f7:87:6c:bc:46:2a:07:54:6d:38:42:28:6a:15:19:7e:
         4e:18:dd:9e:d4:db:64:76:7e:f3:aa:12:8e:f9:d0:37:fb:00:
         91:67:d5:36:49:16:38:b4:6a:a0:ef:b6:c8:22:13:70:a5:59:
         11:90:6c:1d:e0:fb:ab:f4:8e:3f:f7:74:dc:18:11:b7:34:3d:
         c0:79:f6:31:d1:9d:41:7d:3b:20:9a:fa:20:45:8c:a5:fc:dc:
         24:57:f1:95:4f:9d:44:27:29:40:51:29:1b:06:5c:80:9f:6e:
         0c:29:99:54:21:2d:cd:fc:87:9f:b3:1d:7d:9c:bb:2f:00:5c:
         5c:17:c8:08:c5:c6:17:9a:0e:82:7d:c1:64:9b:1c:84:86:cb:
         77:df:d9:9b:f9:0a:79:53:b7:51:1b:20:10:2d:94:5c:c7:00:
         bf:d6:44:d7:14:59:61:e8:22:72:68:d4:69:08:b1:3f:aa:95:
         c1:31:86:b8:1a:f6:55:ae:62:09:5f:2b:26:f5:54:71:5c:30:
         7e:18:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org