Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/34352e3138302e3136302e302f32322d3234203d3e20323639313432.roa
File:                     34352e3138302e3136302e302f32322d3234203d3e20323639313432.roa (raw, json)
Hash identifier:          Onv2r97Ua2XztehV5ZkjWUSbKfn90Evoo4UxrUV/KS8=
Subject key identifier:   84:5F:B2:F8:C4:CA:D3:20:CB:41:D3:26:94:AF:6D:6F:B5:E1:10:42
Certificate issuer:       /CN=20C37C967AD9517587DAEF31174C2C326A14929F
Certificate serial:       6848CCCC14011791DB3C74175160598925E83AD0
Authority key identifier: 20:C3:7C:96:7A:D9:51:75:87:DA:EF:31:17:4C:2C:32:6A:14:92:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20C37C967AD9517587DAEF31174C2C326A14929F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/34352e3138302e3136302e302f32322d3234203d3e20323639313432.roa
Signing time:             Fri 15 Sep 2023 14:26:00 +0000
ROA not before:           Fri 15 Sep 2023 14:21:00 +0000
ROA not after:            Fri 13 Sep 2024 14:26:00 +0000
asID:                     269142
IP address blocks:        45.180.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:48:cc:cc:14:01:17:91:db:3c:74:17:51:60:59:89:25:e8:3a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20C37C967AD9517587DAEF31174C2C326A14929F
        Validity
            Not Before: Sep 15 14:21:00 2023 GMT
            Not After : Sep 13 14:26:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:11:82:ff:0e:be:af:2c:17:a8:10:39:31:
                    02:37:1a:28:46:57:a8:30:80:7e:91:4c:60:ce:11:
                    55:15:d8:75:5d:ce:92:64:fa:32:70:ed:9c:5f:ad:
                    4e:de:db:f1:88:82:33:59:87:f3:1e:20:0c:74:76:
                    fc:48:b9:7c:68:4d:61:36:9c:e8:b3:c9:3d:86:1c:
                    54:a8:39:17:07:76:43:90:73:84:55:2e:88:dc:fb:
                    0e:0c:4a:89:30:59:6a:31:ee:38:57:56:68:41:f2:
                    b7:52:95:e2:e4:56:bb:4c:64:de:fb:0c:13:b1:0e:
                    63:48:06:96:73:5d:b9:56:29:36:07:e5:87:55:93:
                    e3:1b:56:42:b2:3a:2c:a6:8c:df:8c:04:ab:f4:67:
                    16:2b:5f:c4:7b:82:6d:a6:ee:88:bf:d7:c4:66:4b:
                    f6:0f:b1:11:4b:0f:bc:d9:d9:40:cb:f2:15:d6:f4:
                    58:7d:7d:64:06:7c:f9:5a:99:2b:14:69:81:31:aa:
                    5c:28:8a:bf:d7:c0:a9:af:e6:f2:5f:fd:8d:57:29:
                    3a:a0:f7:31:b6:9d:9b:9f:67:ef:29:57:f8:a5:fe:
                    b0:d0:a7:6b:86:67:88:b2:71:09:ff:7b:f9:96:bc:
                    2d:e6:af:5f:6d:f4:18:4e:57:44:b0:82:41:d9:dc:
                    dc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5F:B2:F8:C4:CA:D3:20:CB:41:D3:26:94:AF:6D:6F:B5:E1:10:42
            X509v3 Authority Key Identifier:
                keyid:20:C3:7C:96:7A:D9:51:75:87:DA:EF:31:17:4C:2C:32:6A:14:92:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/20C37C967AD9517587DAEF31174C2C326A14929F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20C37C967AD9517587DAEF31174C2C326A14929F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/34352e3138302e3136302e302f32322d3234203d3e20323639313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:37:52:0b:6f:08:26:18:70:41:1d:ac:d9:da:99:e7:a9:85:
         2a:2e:c5:31:40:b7:c2:29:17:b8:8c:dd:5e:54:79:51:ed:19:
         14:85:40:8a:34:a4:9f:ef:7f:af:e5:c7:a1:7c:79:83:3f:bd:
         c8:ec:6f:1c:e0:36:76:e3:7b:77:b9:16:05:af:38:d2:45:e4:
         08:bf:77:ea:d4:f6:55:fe:cc:77:2a:2c:ab:a7:a8:cb:45:e7:
         f4:5c:f7:5d:d3:db:59:02:53:5e:2c:ff:91:75:6b:fb:fb:e8:
         32:e7:32:cc:8f:f9:e8:99:cd:ba:69:2a:05:64:e5:dc:c4:3f:
         16:37:ad:57:27:66:2b:91:38:e6:ec:e3:59:b0:bb:57:10:2d:
         99:40:65:9f:36:08:2c:70:93:a7:2a:e2:8c:b8:7c:74:54:dc:
         1c:81:4d:c9:e9:e6:4b:3a:57:28:b2:b9:dc:87:c5:26:d7:77:
         79:c4:1d:97:19:99:58:cf:de:fa:6d:a1:00:fa:4a:b1:87:22:
         c7:11:d3:45:cb:a1:43:2c:e6:6a:c2:79:9f:92:92:23:ce:86:
         f0:ed:04:96:9a:05:f4:6b:33:2a:56:b3:31:2d:7f:42:f8:f6:
         5d:f6:5b:87:14:b7:55:36:10:8c:25:1d:17:e7:73:ce:58:68:
         1b:5e:8a:78
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUaEjMzBQBF5HbPHQXUWBZiSXoOtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBDMzdDOTY3QUQ5NTE3NTg3REFFRjMxMTc0QzJDMzI2
QTE0OTI5RjAeFw0yMzA5MTUxNDIxMDBaFw0yNDA5MTMxNDI2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzU0NTExODJGRjBFQkVBRjJD
MTdBODEwMzkzMTAyMzcxQTI4NDY1N0E4MzA4MDdFOTE0QzYwQ0UxMTU1MTVEODc1
NURDRTkyNjRGQTMyNzBFRDlDNUZBRDRFREVEQkYxODg4MjMzNTk4N0YzMUUyMDBD
NzQ3NkZDNDhCOTdDNjg0RDYxMzY5Q0U4QjNDOTNEODYxQzU0QTgzOTE3MDc3NjQz
OTA3Mzg0NTUyRTg4RENGQjBFMEM0QTg5MzA1OTZBMzFFRTM4NTc1NjY4NDFGMkI3
NTI5NUUyRTQ1NkJCNEM2NERFRkIwQzEzQjEwRTYzNDgwNjk2NzM1REI5NTYyOTM2
MDdFNTg3NTU5M0UzMUI1NjQyQjIzQTJDQTY4Q0RGOEMwNEFCRjQ2NzE2MkI1RkM0
N0I4MjZEQTZFRTg4QkZEN0M0NjY0QkY2MEZCMTExNEIwRkJDRDlEOTQwQ0JGMjE1
RDZGNDU4N0Q3RDY0MDY3Q0Y5NUE5OTJCMTQ2OTgxMzFBQTVDMjg4QUJGRDdDMEE5
QUZFNkYyNUZGRDhENTcyOTNBQTBGNzMxQjY5RDlCOUY2N0VGMjk1N0Y4QTVGRUIw
RDBBNzZCODY2Nzg4QjI3MTA5RkY3QkY5OTZCQzJERTZBRjVGNkRGNDE4NEU1NzQ0
QjA4MjQxRDlEQ0RDRUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxUURgv8Ovq8sF6gQOTECNxooRleoMIB+kUxgzhFVFdh1Xc6SZPoy
cO2cX61O3tvxiIIzWYfzHiAMdHb8SLl8aE1hNpzos8k9hhxUqDkXB3ZDkHOEVS6I
3PsODEqJMFlqMe44V1ZoQfK3UpXi5Fa7TGTe+wwTsQ5jSAaWc125Vik2B+WHVZPj
G1ZCsjospozfjASr9GcWK1/Ee4Jtpu6Iv9fEZkv2D7ERSw+82dlAy/IV1vRYfX1k
Bnz5WpkrFGmBMapcKIq/18Cpr+byX/2NVyk6oPcxtp2bn2fvKVf4pf6w0KdrhmeI
snEJ/3v5lrwt5q9fbfQYTldEsIJB2dzc7QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FIRfsvjEytMgy0HTJpSvbW+14RBCMB8GA1UdIwQYMBaAFCDDfJZ62VF1h9rvMRdM
LDJqFJKfMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dKMzZib3c0Q0toSE50
cG9RVHZjcHBhaXdDTW9kRXl5UUNKNzRnWlhpYW1KLzAvMjBDMzdDOTY3QUQ5NTE3
NTg3REFFRjMxMTc0QzJDMzI2QTE0OTI5Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yMEMzN0M5NjdBRDk1MTc1ODdEQUVGMzExNzRDMkMzMjZBMTQ5
MjlGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HSjM2Ym93NENLaEhOdHBvUVR2
Y3BwYWl3Q01vZEV5eVFDSjc0Z1pYaWFtSi8wLzM0MzUyZTMxMzgzMDJlMzEzNjMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5MzEzNDMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LbSgMA0GCSqGSIb3DQEBCwUAA4IBAQA5N1ILbwgmGHBBHazZ2pnnqYUqLsUxQLfC
KRe4jN1eVHlR7RkUhUCKNKSf73+v5cehfHmDP73I7G8c4DZ243t3uRYFrzjSReQI
v3fq1PZV/sx3Kiyrp6jLRef0XPdd09tZAlNeLP+RdWv7++gy5zLMj/nomc26aSoF
ZOXcxD8WN61XJ2YrkTjm7ONZsLtXEC2ZQGWfNggscJOnKuKMuHx0VNwcgU3J6eZL
Olcosrnch8Um13d5xB2XGZlYz976baEA+kqxhyLHEdNFy6FDLOZqwnmfkpIjzobw
7QSWmgX0azMqVrMxLX9C+PZd9luHFLdVNhCMJR0X53POWGgbXop4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org