Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa
File:                     34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa (raw, json)
Hash identifier:          RmIn8rHH9Adkt+bKdWcO+hYcaeu/HeiJRKq88VygfoQ=
Subject key identifier:   7F:FF:1A:FE:F4:30:77:C4:8A:F1:74:DA:F9:9A:A3:54:DF:26:D5:16
Certificate issuer:       /CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
Certificate serial:       062A499AE0C1F175812B415B4936907D16BA0A7D
Authority key identifier: CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa
Signing time:             Mon 15 May 2023 20:26:21 +0000
ROA not before:           Mon 15 May 2023 20:21:21 +0000
ROA not after:            Mon 13 May 2024 20:26:21 +0000
asID:                     269184
IP address blocks:        45.181.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2a:49:9a:e0:c1:f1:75:81:2b:41:5b:49:36:90:7d:16:ba:0a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
        Validity
            Not Before: May 15 20:21:21 2023 GMT
            Not After : May 13 20:26:21 2024 GMT
        Subject: CN=7FFF1AFEF43077C48AF174DAF99AA354DF26D516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:fd:b7:1f:f4:2a:69:8d:e0:11:93:85:be:
                    58:ce:57:f5:3e:7c:c2:00:b5:85:3a:4b:05:5d:b7:
                    9c:00:1b:f5:f0:58:82:9e:8f:4d:cf:89:41:3c:0a:
                    ac:96:89:b8:21:66:5d:5a:e8:57:9e:db:c0:f0:bd:
                    8e:6d:d4:75:66:04:16:23:7e:36:55:0f:51:5d:7e:
                    49:22:ff:16:3d:66:77:02:de:b8:85:72:fd:c5:08:
                    26:df:7b:3c:d9:a5:20:34:32:e1:1d:ad:43:d2:2d:
                    f2:c1:a8:64:ac:83:b4:94:12:04:b0:3f:d8:e1:3e:
                    7d:c2:ea:11:67:ec:7c:d5:54:4c:4a:bc:7e:a3:d7:
                    1a:46:6d:67:d6:6f:ac:4a:eb:a6:cd:73:31:07:17:
                    69:4a:f6:11:05:3b:8f:0a:39:9f:a5:36:5c:1f:a2:
                    88:ea:76:d5:9a:5c:5b:28:53:12:74:92:aa:bb:25:
                    d2:57:27:75:72:34:10:c6:c2:aa:6d:bf:80:c6:d7:
                    bf:11:6c:42:0f:84:5b:b3:7d:81:c8:d6:24:32:6d:
                    e4:c1:f8:32:4a:1a:50:08:ed:76:88:37:17:b4:d0:
                    b5:00:aa:42:6e:86:97:83:16:c8:77:1a:a6:92:f3:
                    0d:f1:a7:af:77:e1:29:b6:60:ef:59:0b:84:16:8a:
                    62:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FF:1A:FE:F4:30:77:C4:8A:F1:74:DA:F9:9A:A3:54:DF:26:D5:16
            X509v3 Authority Key Identifier:
                keyid:CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:d4:65:b8:d1:c6:f2:00:26:0e:13:b9:55:a0:89:62:f7:98:
         7a:57:01:26:94:28:74:ba:2b:4b:f0:5d:55:1e:48:d4:6a:5b:
         00:61:5e:92:ed:1a:0b:69:1c:5f:89:7e:3b:cf:5b:a4:fc:11:
         ba:79:0a:3f:f6:a4:5e:67:d2:be:55:91:6b:b6:c9:90:07:20:
         29:54:8d:e9:80:7c:6f:ba:79:2e:71:7c:f9:03:99:08:6b:80:
         81:3f:40:f3:79:ff:41:8a:58:8f:09:4e:c4:93:73:94:f4:50:
         f2:fc:74:81:97:04:f6:78:39:1e:c2:6b:11:54:36:99:f2:ae:
         b0:e2:1a:ec:17:4a:5f:75:48:1c:d5:32:b8:fa:b9:b6:7e:b0:
         6c:0f:91:1c:56:df:5e:f4:8b:44:d1:f0:85:f4:75:2a:f5:a6:
         93:4c:b3:92:ba:4c:79:08:cc:08:47:2c:c8:53:3f:3a:b6:8c:
         25:c4:2b:ce:85:ed:0f:2f:c6:c7:4c:32:af:01:da:4d:a4:32:
         51:0b:cc:52:56:d5:7a:11:e0:fe:53:87:a2:a3:58:4a:68:e9:
         a6:4a:db:23:cd:ae:2e:65:7e:07:93:1f:66:3c:b0:80:80:85:
         1b:b1:5f:e5:57:73:34:a6:86:87:2f:4d:66:9e:1d:0f:53:a6:
         41:39:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org