Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133332e302f32342d3234203d3e20323636393636.roa
File:                     34352e3232362e3133332e302f32342d3234203d3e20323636393636.roa (raw, json)
Hash identifier:          Z25FTiwvr7rIcMSHZojYQesNZrFRelVDBb4tJGX8T2Y=
Subject key identifier:   A3:BC:4E:A8:BB:AF:FD:28:82:86:14:A0:18:EE:71:BF:6D:68:26:FD
Certificate issuer:       /CN=80C240FD65B3474E7A81FEE3D72F0FFFC2B09170
Certificate serial:       71BC6E5043186683C6AE4F66D91A8FB01A75C15C
Authority key identifier: 80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133332e302f32342d3234203d3e20323636393636.roa
Signing time:             Fri 23 Jun 2023 20:00:00 +0000
ROA not before:           Fri 23 Jun 2023 19:55:00 +0000
ROA not after:            Fri 21 Jun 2024 20:00:00 +0000
asID:                     266966
IP address blocks:        45.226.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bc:6e:50:43:18:66:83:c6:ae:4f:66:d9:1a:8f:b0:1a:75:c1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C240FD65B3474E7A81FEE3D72F0FFFC2B09170
        Validity
            Not Before: Jun 23 19:55:00 2023 GMT
            Not After : Jun 21 20:00:00 2024 GMT
        Subject: CN=A3BC4EA8BBAFFD28828614A018EE71BF6D6826FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:bc:2e:69:f8:76:f7:08:ac:37:95:28:54:
                    a9:35:fa:ed:9e:fc:0d:dd:3f:62:e0:5c:e1:64:df:
                    0a:d9:19:c3:d9:d4:7f:8f:ec:7b:a6:89:f5:c8:6a:
                    41:95:c7:34:dc:dd:3a:0d:79:55:60:b1:2c:d1:bb:
                    d9:7a:90:e7:69:5a:ca:15:05:bf:0d:9c:90:f2:a6:
                    e3:f1:72:e6:c8:13:69:94:4b:9f:89:31:5d:40:f1:
                    78:38:3c:75:ba:47:f8:70:26:72:1f:73:cf:52:a2:
                    12:70:09:8e:db:9e:a8:27:9d:18:da:a7:36:c2:9a:
                    c9:fb:4c:dd:43:53:1d:62:24:ac:77:39:e8:52:0a:
                    fc:ec:a3:66:de:3c:bd:66:ad:e4:ef:a5:df:12:65:
                    13:2d:1e:39:00:03:6d:cb:08:7e:68:57:fd:18:7c:
                    69:ec:0f:fc:26:03:41:ad:c5:da:d8:f4:7e:dc:69:
                    ae:7d:dc:03:d1:35:e4:07:18:84:6d:6d:23:0c:8a:
                    58:8d:76:96:dd:b2:67:11:36:cd:20:39:3b:a8:07:
                    d8:6a:79:dd:5f:a1:27:f1:6d:b7:8d:78:86:70:6d:
                    dd:bb:7f:48:31:d2:dc:f0:9e:6d:f4:a1:01:da:1b:
                    7b:6b:f9:95:ec:58:7c:15:b7:0c:0b:dc:c1:e2:52:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BC:4E:A8:BB:AF:FD:28:82:86:14:A0:18:EE:71:BF:6D:68:26:FD
            X509v3 Authority Key Identifier:
                keyid:80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133332e302f32342d3234203d3e20323636393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:65:bd:6d:b2:c3:0a:4f:f8:73:fc:d0:b8:d3:04:07:da:76:
         ee:5f:da:ba:1b:78:67:c5:b0:8e:29:e5:4c:b0:4e:27:6a:38:
         c3:0f:d4:14:e7:da:ef:8b:fd:45:09:86:dd:d2:4e:fc:c7:15:
         87:ab:bf:3e:38:2f:0c:6b:e6:93:3e:3c:c8:79:62:04:a8:81:
         d9:df:d4:64:f2:12:95:fd:b3:71:3e:d4:c8:09:b5:d3:5b:5d:
         cf:88:a1:df:4d:b2:09:3c:44:40:bc:6d:28:14:d8:3e:07:04:
         ee:6b:54:72:27:81:03:62:b3:5f:b2:6a:de:2b:44:c9:9b:6c:
         e4:9c:c7:48:ef:c0:0c:42:a8:08:48:37:6f:b8:6a:52:a3:33:
         fd:3d:36:bd:c4:5a:e8:df:ed:1b:fb:2f:4f:22:f4:48:9e:00:
         a0:dd:f3:10:57:cf:e9:57:fd:55:fd:ca:ee:a6:d8:c9:82:e8:
         17:32:64:03:61:76:b5:8b:9a:97:81:80:f1:13:b9:b6:3f:53:
         34:ca:92:98:a2:69:7d:7a:dc:22:7b:b0:b3:40:5c:42:94:99:
         8b:c5:31:89:91:e9:c3:4c:11:ec:b2:41:de:da:7c:51:4e:7c:
         31:d0:41:97:19:1d:3b:24:67:09:2e:e5:3f:c5:78:6c:bf:90:
         3b:4e:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org