Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/1/34352e3232362e3133332e302f32342d3234203d3e20323636393636.roa
File:                     34352e3232362e3133332e302f32342d3234203d3e20323636393636.roa (raw, json)
Hash identifier:          lrzpnBTLywYOT9NHviEjZUulbOu2KpnkYhwyUx3lnI4=
Subject key identifier:   AC:76:5D:0A:15:60:C3:44:28:87:41:09:01:E5:7F:46:A9:92:9A:BF
Certificate issuer:       /CN=B7198336C94BDD28C2F8CB039F8DA85B03BC1E98
Certificate serial:       6AE1BD5CF3218EDAE74536C633DF6DBDBF8800DA
Authority key identifier: B7:19:83:36:C9:4B:DD:28:C2:F8:CB:03:9F:8D:A8:5B:03:BC:1E:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7198336C94BDD28C2F8CB039F8DA85B03BC1E98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/1/34352e3232362e3133332e302f32342d3234203d3e20323636393636.roa
Signing time:             Wed 03 Apr 2024 18:30:30 +0000
ROA not before:           Wed 03 Apr 2024 18:25:30 +0000
ROA not after:            Wed 02 Apr 2025 18:30:30 +0000
asID:                     266966
IP address blocks:        45.226.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e1:bd:5c:f3:21:8e:da:e7:45:36:c6:33:df:6d:bd:bf:88:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7198336C94BDD28C2F8CB039F8DA85B03BC1E98
        Validity
            Not Before: Apr  3 18:25:30 2024 GMT
            Not After : Apr  2 18:30:30 2025 GMT
        Subject: CN=AC765D0A1560C3442887410901E57F46A9929ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9a:a6:ca:bf:d6:80:e7:44:75:9f:bb:e7:84:
                    5c:ff:9a:24:c4:76:5c:26:65:3a:85:69:1f:d9:06:
                    c0:b3:1e:3d:29:8a:c8:ef:8d:9c:24:86:d4:7d:62:
                    de:c7:7c:03:f4:fd:31:46:16:73:a5:ca:ac:d4:1b:
                    3d:37:09:60:79:be:28:0e:84:c5:98:6f:37:52:be:
                    5b:29:8d:9e:b2:90:a1:fb:8c:73:41:b0:c4:51:30:
                    09:0f:8e:7a:99:c5:05:93:31:7e:07:41:09:7f:6e:
                    fd:e9:2a:46:a9:ee:d3:e8:38:11:3e:a5:05:0c:eb:
                    e5:70:d7:90:85:95:17:e8:35:d5:1c:c2:62:d9:8c:
                    ca:d1:ef:e3:c4:92:49:82:49:9d:f4:9f:ba:e0:77:
                    5d:68:35:16:52:b1:49:42:0f:e9:ea:92:bd:63:31:
                    41:87:e3:56:fb:c6:74:91:2a:49:08:eb:5d:ed:be:
                    24:75:c1:5a:a5:d3:5c:89:ca:ab:52:84:33:03:bd:
                    ba:9f:f6:0a:07:ad:e7:6e:c4:c3:79:40:e7:9d:f3:
                    df:e0:3a:c9:a4:24:5e:04:20:f8:1b:03:fd:19:b8:
                    73:25:35:a1:63:4c:1a:d0:51:a0:76:a5:e3:c2:d4:
                    05:c2:08:99:37:ad:8e:d7:e6:d7:c4:34:b1:75:98:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:76:5D:0A:15:60:C3:44:28:87:41:09:01:E5:7F:46:A9:92:9A:BF
            X509v3 Authority Key Identifier:
                keyid:B7:19:83:36:C9:4B:DD:28:C2:F8:CB:03:9F:8D:A8:5B:03:BC:1E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/1/B7198336C94BDD28C2F8CB039F8DA85B03BC1E98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7198336C94BDD28C2F8CB039F8DA85B03BC1E98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/1/34352e3232362e3133332e302f32342d3234203d3e20323636393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:13:9b:36:8f:06:e8:fe:1f:a5:ac:d3:f7:5b:e0:ea:17:0d:
         21:28:ea:24:bd:e1:25:a4:e2:ee:a3:70:3d:4f:66:58:9c:d6:
         71:ab:36:1a:d1:a1:cf:96:bb:57:a5:b5:61:e2:23:56:f9:18:
         79:b6:65:ff:6d:85:e6:c7:5c:85:e0:24:39:03:c2:c9:aa:13:
         49:c7:57:a8:7d:77:60:cc:c7:80:e1:a2:75:1e:fd:60:a8:89:
         2a:15:d3:9b:9a:71:f1:14:d1:1c:fa:80:8e:14:e9:c1:da:ae:
         f3:9d:40:ea:72:76:1b:52:58:ba:b2:38:69:34:0b:75:3b:57:
         29:30:f7:00:61:2e:14:00:bf:91:40:16:28:06:cc:f8:a5:f5:
         0f:75:d7:71:ba:f6:bd:5f:89:60:8c:bf:b5:cd:48:c8:2f:c6:
         71:e8:39:83:ab:a7:7b:d8:1d:70:c5:16:f7:39:9e:99:32:3a:
         d6:38:4f:9c:ca:3e:5b:c5:2d:b9:cb:2f:ff:98:5c:08:ca:e4:
         04:ea:0c:a7:2e:3a:49:b3:2a:0e:1c:f9:03:35:2b:11:78:c4:
         da:d0:5a:08:8c:1b:6b:bd:6f:2c:65:22:4d:3c:ee:62:7f:c2:
         65:85:bf:5d:a9:57:7e:ca:5a:21:bd:fc:27:6a:b0:5e:90:b1:
         83:39:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org