Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133352e302f32342d3234203d3e20323636393636.roa
File:                     34352e3232362e3133352e302f32342d3234203d3e20323636393636.roa (raw, json)
Hash identifier:          RYsRKABfehNzwz49nU/5hDePzRwTrprNvSpLfN87A0Y=
Subject key identifier:   D7:F4:5A:8F:EF:46:9E:6A:EB:08:3F:D6:BF:DE:17:3D:75:E8:14:0D
Certificate issuer:       /CN=80C240FD65B3474E7A81FEE3D72F0FFFC2B09170
Certificate serial:       1921A40C7F95635CA8A243BD10B21A999540C9B1
Authority key identifier: 80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133352e302f32342d3234203d3e20323636393636.roa
Signing time:             Fri 23 Jun 2023 20:00:00 +0000
ROA not before:           Fri 23 Jun 2023 19:55:00 +0000
ROA not after:            Fri 21 Jun 2024 20:00:00 +0000
asID:                     266966
IP address blocks:        45.226.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:21:a4:0c:7f:95:63:5c:a8:a2:43:bd:10:b2:1a:99:95:40:c9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C240FD65B3474E7A81FEE3D72F0FFFC2B09170
        Validity
            Not Before: Jun 23 19:55:00 2023 GMT
            Not After : Jun 21 20:00:00 2024 GMT
        Subject: CN=D7F45A8FEF469E6AEB083FD6BFDE173D75E8140D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:9d:97:95:88:56:d2:1e:64:3d:39:e1:a7:
                    12:12:7b:7f:26:7d:2d:57:34:f2:33:1e:ed:d5:d8:
                    31:61:35:b7:07:85:56:59:20:06:f9:78:c5:39:ce:
                    f4:f5:32:fa:99:6a:87:ce:33:86:29:17:29:a2:0c:
                    50:e9:94:1a:08:94:71:33:8c:2f:c3:a8:bc:f4:66:
                    bb:b8:ec:e1:b9:fc:24:a9:cd:15:90:a1:90:06:2b:
                    f5:67:de:2f:a7:5a:87:f8:8a:eb:30:d3:c6:40:31:
                    1e:7c:5e:74:3c:c8:89:ea:7a:b9:b3:d8:7e:b7:e2:
                    db:43:a8:da:c9:1d:df:a3:7c:e1:d9:ff:00:d3:59:
                    d5:5c:49:c2:44:97:5f:18:bb:07:32:61:7b:37:20:
                    af:73:8b:d9:31:99:bf:60:58:7b:3f:e1:31:fa:4b:
                    c7:7a:0f:8e:81:91:2e:81:83:b4:f2:27:20:be:f9:
                    6e:96:3c:85:7b:cf:39:63:b2:f1:df:75:51:fe:85:
                    5c:54:00:cf:2d:b2:42:8d:0a:d5:b8:58:12:b7:1f:
                    63:9e:e1:5c:25:0a:c3:1a:1e:46:6e:5d:8d:c7:ab:
                    c7:2f:36:ab:90:c6:47:81:24:cb:67:dc:ba:78:02:
                    4d:22:cc:21:66:f7:4e:18:bc:fc:ab:c8:40:dd:06:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F4:5A:8F:EF:46:9E:6A:EB:08:3F:D6:BF:DE:17:3D:75:E8:14:0D
            X509v3 Authority Key Identifier:
                keyid:80:C2:40:FD:65:B3:47:4E:7A:81:FE:E3:D7:2F:0F:FF:C2:B0:91:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80C240FD65B3474E7A81FEE3D72F0FFFC2B09170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/0/34352e3232362e3133352e302f32342d3234203d3e20323636393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:2c:bf:cb:1e:75:1d:1d:d3:3f:16:fa:90:0e:c3:0e:32:3f:
         54:62:13:7f:91:18:92:15:1d:5e:5b:7a:be:71:8c:a6:c3:51:
         db:7b:57:ea:0f:34:78:b1:56:a0:bc:29:a0:fa:27:63:ba:bd:
         9e:38:69:9f:f6:84:26:21:5e:9f:35:19:6c:93:29:ff:d8:32:
         cb:a7:22:7a:c4:fb:b1:b4:28:f5:ed:d6:0a:93:f0:7a:66:d9:
         3f:50:d6:fc:0c:e3:57:16:cd:8d:9b:67:7a:c0:ca:20:15:67:
         13:56:db:f0:55:96:d3:7c:3c:90:97:bb:80:49:2c:ec:a2:ba:
         8c:c4:d0:81:97:8f:87:ce:f4:0f:10:30:49:c3:54:38:39:ff:
         37:21:6a:8d:62:16:8a:06:9b:b6:76:25:0f:2f:39:e1:29:df:
         25:e0:85:9c:49:1a:d7:aa:e3:c6:99:49:77:55:18:16:02:05:
         35:ee:57:c8:ab:75:42:ff:6e:e8:d0:d6:77:f6:be:8d:fb:1f:
         e4:2b:89:ea:0f:61:b1:67:90:04:ce:83:ba:42:93:9d:f9:56:
         1e:cb:2d:a3:a4:f3:3c:9b:fe:17:b0:76:6a:4f:a3:41:af:2b:
         ab:fc:f5:8d:f9:b3:a9:53:41:85:a3:73:41:12:d3:4e:81:ad:
         2c:86:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org