Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133342e302f32342d3234203d3e20323636393636.roa
File:                     34352e3232362e3133342e302f32342d3234203d3e20323636393636.roa (raw, json)
Hash identifier:          32Iv7FxnYpLAEGgCgRdU6uYURrLOp96SfI/IQUecxVM=
Subject key identifier:   94:B5:B6:C4:AB:90:25:85:90:24:E7:96:ED:7A:E9:9E:17:1F:7F:00
Certificate issuer:       /CN=80C240FD65B3474E7A81FEE3D72F0FFFC2B09170
Certificate serial:       6D1E144664C17F545F36C27FCD69D88617A4F47D
Authority key identifier: 80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133342e302f32342d3234203d3e20323636393636.roa
Signing time:             Fri 23 Jun 2023 20:00:00 +0000
ROA not before:           Fri 23 Jun 2023 19:55:00 +0000
ROA not after:            Fri 21 Jun 2024 20:00:00 +0000
asID:                     266966
IP address blocks:        45.226.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1e:14:46:64:c1:7f:54:5f:36:c2:7f:cd:69:d8:86:17:a4:f4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C240FD65B3474E7A81FEE3D72F0FFFC2B09170
        Validity
            Not Before: Jun 23 19:55:00 2023 GMT
            Not After : Jun 21 20:00:00 2024 GMT
        Subject: CN=94B5B6C4AB9025859024E796ED7AE99E171F7F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:da:fa:e3:98:db:18:e2:66:68:51:45:56:e2:
                    e0:b5:39:4c:75:f0:0a:af:50:5e:fd:1b:2a:30:68:
                    d1:d1:56:13:7f:36:c6:23:3d:2a:a1:d9:18:dd:ac:
                    48:4b:03:79:3e:61:2f:99:f1:df:a9:78:43:c8:91:
                    e7:73:8b:5c:f7:35:f2:0e:45:8b:b0:42:ed:78:2b:
                    d7:25:02:6b:c1:1a:c9:9f:dd:94:e3:bc:de:fe:db:
                    b5:9f:ff:fe:6e:e6:4f:b4:8a:81:10:2a:10:a8:c0:
                    b7:9b:68:22:63:74:78:56:19:82:0f:0d:ae:90:61:
                    df:ad:67:6f:c8:4e:c0:94:ba:84:d9:37:f2:93:8a:
                    68:e2:14:e9:b7:fa:f8:31:27:7f:f3:d2:a4:c9:d5:
                    ef:88:ff:99:4f:35:4d:7b:c7:1e:18:49:c0:34:83:
                    ed:67:c6:41:e0:da:7e:e3:71:e4:f2:7f:6b:d9:80:
                    64:a9:2c:50:80:1b:e7:eb:05:5e:4d:7c:ba:26:4f:
                    44:8c:90:55:92:e5:3f:bd:af:66:72:ff:59:59:c0:
                    99:09:86:db:e6:4a:11:f8:b0:a1:01:0d:f7:d8:ab:
                    86:3f:39:9e:42:51:3f:15:24:6c:07:c7:7c:a8:5a:
                    b0:74:91:41:d1:64:26:86:10:8f:80:fb:7d:48:db:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B5:B6:C4:AB:90:25:85:90:24:E7:96:ED:7A:E9:9E:17:1F:7F:00
            X509v3 Authority Key Identifier:
                keyid:80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133342e302f32342d3234203d3e20323636393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:c1:0a:5c:d8:ad:45:87:f5:73:db:b9:48:f4:a8:88:b0:49:
         39:7d:84:6a:53:aa:01:ba:5f:09:1a:5f:96:58:f8:c9:d7:97:
         7e:f8:f5:37:8b:4e:72:b3:45:03:d5:d2:df:45:a9:c9:82:74:
         c0:ac:2b:34:43:bf:26:fc:c6:d7:43:ac:21:7b:28:f3:64:10:
         26:cb:52:0d:8b:c4:a8:b0:f9:b4:90:a1:68:00:f9:b6:6f:bd:
         02:8c:dc:be:77:9e:75:21:9e:42:f5:34:f2:90:19:5b:f9:1a:
         3b:bd:4b:31:70:22:d6:b2:bd:b8:dc:7b:20:e3:45:c5:7c:09:
         8c:d7:7c:96:8f:fd:11:58:bd:0a:aa:4a:a2:09:be:65:62:b3:
         b4:00:ee:90:df:d0:e1:4f:fa:d1:c9:0d:8a:77:c4:1c:16:5c:
         de:77:54:c8:be:b4:3b:85:fc:28:71:e0:84:8b:52:11:42:73:
         a0:cc:21:3f:94:cc:92:97:15:b3:c1:0c:4f:12:16:39:0f:49:
         b6:f1:cd:d7:54:5f:50:99:0e:61:c5:c8:33:cf:d1:78:bd:0c:
         70:c9:63:12:fb:cd:83:94:03:5b:fe:db:3f:9f:86:ab:3b:3b:
         88:d9:2e:6e:fb:e9:b2:d4:3a:d4:e7:44:ca:f3:3c:42:a1:b3:
         74:cd:8a:db
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbR4URmTBf1RfNsJ/zWnYhhek9H0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBDMjQwRkQ2NUIzNDc0RTdBODFGRUUzRDcyRjBGRkZD
MkIwOTE3MDAeFw0yMzA2MjMxOTU1MDBaFw0yNDA2MjEyMDAwMDBaMDMxMTAvBgNV
BAMTKDk0QjVCNkM0QUI5MDI1ODU5MDI0RTc5NkVEN0FFOTlFMTcxRjdGMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo2vrjmNsY4mZoUUVW4uC1OUx1
8AqvUF79GyowaNHRVhN/NsYjPSqh2RjdrEhLA3k+YS+Z8d+peEPIkedzi1z3NfIO
RYuwQu14K9clAmvBGsmf3ZTjvN7+27Wf//5u5k+0ioEQKhCowLebaCJjdHhWGYIP
Da6QYd+tZ2/ITsCUuoTZN/KTimjiFOm3+vgxJ3/z0qTJ1e+I/5lPNU17xx4YScA0
g+1nxkHg2n7jceTyf2vZgGSpLFCAG+frBV5NfLomT0SMkFWS5T+9r2Zy/1lZwJkJ
htvmShH4sKEBDffYq4Y/OZ5CUT8VJGwHx3yoWrB0kUHRZCaGEI+A+31I2zRJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlLW2xKuQJYWQJOeW7XrpnhcffwAwHwYDVR0j
BBgwFoAUgMJA/WWzR056gf7j1y8P/8KwkXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1ViU2ZXR1F0dENHWXhyZ1lxMjhSNm1xdDluU2VrNHB1WHFpQVFmeUpT
VHIvMC84MEMyNDBGRDY1QjM0NzRFN0E4MUZFRTNENzJGMEZGRkMyQjA5MTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgwQzI0MEZENjVCMzQ3NEU3
QTgxRkVFM0Q3MkYwRkZGQzJCMDkxNzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NVYlNmV0dRdHRDR1l4cmdZcTI4UjZtcXQ5blNlazRwdVhxaUFRZnlKU1RyLzAv
MzQzNTJlMzIzMjM2MmUzMTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt4oYwDQYJKoZIhvcNAQELBQADggEBAK/BClzY
rUWH9XPbuUj0qIiwSTl9hGpTqgG6XwkaX5ZY+MnXl3749TeLTnKzRQPV0t9FqcmC
dMCsKzRDvyb8xtdDrCF7KPNkECbLUg2LxKiw+bSQoWgA+bZvvQKM3L53nnUhnkL1
NPKQGVv5Gju9SzFwItayvbjceyDjRcV8CYzXfJaP/RFYvQqqSqIJvmVis7QA7pDf
0OFP+tHJDYp3xBwWXN53VMi+tDuF/Chx4ISLUhFCc6DMIT+UzJKXFbPBDE8SFjkP
SbbxzddUX1CZDmHFyDPP0Xi9DHDJYxL7zYOUA1v+2z+fhqs7O4jZLm776bLUOtTn
RMrzPEKhs3TNits=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org