Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/1/34352e3232362e3133342e302f32332d3233203d3e20323636393636.roa
File:                     34352e3232362e3133342e302f32332d3233203d3e20323636393636.roa (raw, json)
Hash identifier:          hgD5HR1vBPLtnDITppppZZW2/SpfP+3tRO8Mr5tYZT8=
Subject key identifier:   2C:92:A8:06:18:50:7E:C8:3D:A7:BB:D0:7C:95:1D:74:13:8F:DE:17
Certificate issuer:       /CN=B7198336C94BDD28C2F8CB039F8DA85B03BC1E98
Certificate serial:       4676B5EB0FD75B1338FDF55F23AC29CA662611C2
Authority key identifier: B7:19:83:36:C9:4B:DD:28:C2:F8:CB:03:9F:8D:A8:5B:03:BC:1E:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7198336C94BDD28C2F8CB039F8DA85B03BC1E98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/1/34352e3232362e3133342e302f32332d3233203d3e20323636393636.roa
Signing time:             Wed 03 Apr 2024 18:30:30 +0000
ROA not before:           Wed 03 Apr 2024 18:25:30 +0000
ROA not after:            Wed 02 Apr 2025 18:30:30 +0000
asID:                     266966
IP address blocks:        45.226.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:76:b5:eb:0f:d7:5b:13:38:fd:f5:5f:23:ac:29:ca:66:26:11:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7198336C94BDD28C2F8CB039F8DA85B03BC1E98
        Validity
            Not Before: Apr  3 18:25:30 2024 GMT
            Not After : Apr  2 18:30:30 2025 GMT
        Subject: CN=2C92A80618507EC83DA7BBD07C951D74138FDE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:58:77:1c:1a:72:97:a4:ee:4e:7c:83:64:
                    35:12:16:68:d7:b1:7d:90:b2:e5:cb:a4:ff:56:93:
                    9d:ef:2a:ba:80:22:cb:8d:8f:d4:ee:11:65:d6:ed:
                    34:4d:c4:4a:28:b3:5c:5c:d9:0b:75:94:99:e1:2d:
                    60:ef:6e:b7:07:53:95:1a:bc:a8:12:50:e8:7e:a0:
                    cc:d6:f5:80:34:bc:60:1e:3b:57:c4:7b:0e:d7:f0:
                    a1:d8:2e:5f:f6:81:e3:b1:9e:33:fb:6a:90:10:62:
                    90:f8:2a:46:a4:15:be:31:50:57:ac:1e:d9:8a:31:
                    aa:96:a9:c7:7a:11:6f:d2:a1:fa:c9:54:68:15:b7:
                    d2:fd:09:b6:55:5d:97:42:55:2b:e9:a6:c7:d6:94:
                    bf:e5:ab:20:3c:26:35:bf:cb:ed:9d:f6:d4:f2:22:
                    56:ed:36:cb:12:62:21:12:6b:72:a6:92:16:b9:5e:
                    24:24:fc:fd:2c:2f:ca:74:f7:8e:99:1a:f9:c6:7c:
                    fa:d5:d0:17:39:4c:ab:4e:69:bb:be:96:ca:01:8c:
                    07:bf:9f:17:c3:bd:f3:f8:4a:82:9e:df:60:52:4e:
                    29:62:7b:46:37:9f:3f:6b:d0:b4:a8:7d:15:46:c5:
                    29:1a:8b:ec:c9:8d:4f:14:6b:d8:d3:1b:63:a3:f5:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:92:A8:06:18:50:7E:C8:3D:A7:BB:D0:7C:95:1D:74:13:8F:DE:17
            X509v3 Authority Key Identifier:
                keyid:B7:19:83:36:C9:4B:DD:28:C2:F8:CB:03:9F:8D:A8:5B:03:BC:1E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/1/B7198336C94BDD28C2F8CB039F8DA85B03BC1E98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7198336C94BDD28C2F8CB039F8DA85B03BC1E98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUbSfWGQttCGYxrgYq28R6mqt9nSek4puXqiAQfyJSTr/1/34352e3232362e3133342e302f32332d3233203d3e20323636393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:97:e5:80:78:19:b8:3a:a8:51:da:02:f9:cc:4c:71:2f:17:
         93:1e:fa:b5:0e:2a:75:91:9e:b0:62:73:26:66:86:b5:fc:ae:
         72:4b:81:07:97:2a:41:03:22:a9:32:34:8e:d4:f4:1a:84:a7:
         16:cb:0b:e4:75:4b:c7:a6:78:d9:9c:2c:0b:df:f8:11:a3:a4:
         08:17:5c:3a:c1:e1:55:35:da:ba:4e:34:cc:86:d4:61:92:fd:
         68:70:c2:86:a3:06:c6:94:f0:07:25:3a:a6:34:87:49:fd:f8:
         21:3a:ad:f3:11:36:66:22:af:ea:80:0e:e3:eb:77:57:45:49:
         52:50:dd:f4:17:b5:cb:1d:68:c2:65:23:18:18:6f:bd:74:e6:
         e7:0f:d1:26:53:70:0b:5e:ca:de:84:78:db:cf:3b:6c:15:18:
         4e:f8:a4:f9:d7:35:8b:ec:ef:22:cd:15:ec:56:32:ca:d2:8a:
         9a:87:96:a3:eb:16:ca:cd:e2:cf:ed:73:43:cc:5d:f1:58:99:
         a3:7f:2b:8f:fa:75:19:08:12:53:ea:d8:98:98:3b:a8:8e:c0:
         c6:d9:8a:bc:d5:60:af:e7:ca:1e:ad:83:e8:fe:52:5b:47:12:
         95:c1:0b:f7:50:28:ed:21:93:67:a1:a0:1e:67:8f:c0:ce:16:
         93:1e:35:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org