Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa
File:                     34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa (raw, json)
Hash identifier:          KJHU2OS/oTKBOUmcbVLETIbc2hX/5LjZDOMQRi9z6Hc=
Subject key identifier:   B4:5E:C7:76:90:56:AE:E5:60:C5:A4:9A:EF:2E:2D:FF:D4:55:89:A3
Certificate issuer:       /CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
Certificate serial:       4B23A70F69D1DFE3B2D7307F3D4672B4F759611D
Authority key identifier: CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa
Signing time:             Mon 15 May 2023 20:26:30 +0000
ROA not before:           Mon 15 May 2023 20:21:30 +0000
ROA not after:            Mon 13 May 2024 20:26:30 +0000
asID:                     269184
IP address blocks:        45.181.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:23:a7:0f:69:d1:df:e3:b2:d7:30:7f:3d:46:72:b4:f7:59:61:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB88008D20CA6B3AC84FD57A80D969AB8769A5AB
        Validity
            Not Before: May 15 20:21:30 2023 GMT
            Not After : May 13 20:26:30 2024 GMT
        Subject: CN=B45EC7769056AEE560C5A49AEF2E2DFFD45589A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:34:e9:1d:4c:11:ba:5f:35:1f:d5:9a:44:
                    d0:f3:9a:ab:c8:f5:59:07:e9:b4:33:5b:c4:1e:f7:
                    19:0f:53:55:ec:56:6b:54:2d:93:7d:db:57:8d:68:
                    fa:19:2f:a0:95:0f:98:32:5f:df:3a:69:39:4f:ee:
                    50:26:48:ea:f7:aa:63:53:57:c1:78:19:b5:e5:12:
                    b6:58:11:6d:b5:67:76:e1:18:3f:7f:6c:fe:d8:1e:
                    47:0f:1a:16:85:c7:55:49:89:e7:a2:21:34:00:8c:
                    d8:f0:b4:45:89:3e:ef:5a:f5:a2:30:e2:7d:a4:90:
                    48:78:0c:63:f3:b2:75:ea:a3:54:cb:c6:e0:91:7d:
                    bf:65:a1:62:bf:34:e7:6f:1a:c8:89:b2:fb:c4:a7:
                    83:65:2d:75:18:42:e8:6f:9b:b8:91:13:38:f4:00:
                    dd:64:18:72:83:ec:39:90:e1:c9:39:33:9e:7e:95:
                    38:e0:f3:2d:c7:9d:5d:5f:ed:33:13:47:55:55:3e:
                    39:02:ae:2c:5f:34:e8:74:34:c0:a7:06:dd:35:70:
                    6a:60:4a:1a:3d:ac:d0:d6:04:64:43:11:ec:b0:d4:
                    de:78:d5:ee:1b:cb:cb:9e:d4:17:db:6d:d9:da:98:
                    89:8d:5a:98:81:8a:1b:d1:fb:27:89:7c:98:81:83:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5E:C7:76:90:56:AE:E5:60:C5:A4:9A:EF:2E:2D:FF:D4:55:89:A3
            X509v3 Authority Key Identifier:
                keyid:CB:88:00:8D:20:CA:6B:3A:C8:4F:D5:7A:80:D9:69:AB:87:69:A5:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB88008D20CA6B3AC84FD57A80D969AB8769A5AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:73:9b:d3:d0:68:cf:00:0b:b0:c6:d2:77:8e:22:bc:4e:
         10:ca:2b:69:42:d4:b2:8e:71:0b:fd:6b:d4:d0:25:ed:b7:bb:
         e6:92:c6:41:42:99:a8:4e:e9:68:52:59:58:2b:b1:50:58:55:
         4a:57:f6:f8:98:fc:60:27:48:fe:54:e2:41:d5:91:e6:15:32:
         35:3b:e2:89:d2:e8:15:e4:ea:e2:f0:f0:e5:ef:4f:39:e0:a8:
         ad:80:7f:00:ad:29:5e:b0:8b:de:3e:5d:b7:95:a6:23:f6:af:
         d4:94:4c:9e:1e:00:03:c2:96:13:27:26:e7:fe:d7:9f:7a:96:
         fb:46:02:5b:8a:ff:8a:07:44:0b:23:d5:7f:71:d5:f1:f0:2e:
         01:b5:92:76:26:3e:03:0f:d2:1c:96:71:55:59:98:80:8e:f0:
         5d:d8:80:79:15:f0:e5:2c:27:03:62:a6:cd:32:0c:de:6c:61:
         3e:00:67:4a:89:ef:80:43:c5:19:e2:b7:12:05:ed:e6:88:7c:
         53:df:2b:56:1a:f9:01:8c:26:b8:c1:9f:2e:e1:e4:37:4e:ed:
         26:1f:aa:00:5b:f7:4b:45:e5:88:61:57:33:75:26:94:8e:06:
         63:d9:a1:a0:b2:30:15:b2:90:0d:15:d9:29:3e:26:9f:0a:56:
         b8:e3:e8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org