Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/34352e3232362e3133382e302f32332d3233203d3e20323636393637.roa
File:                     34352e3232362e3133382e302f32332d3233203d3e20323636393637.roa (raw, json)
Hash identifier:          eAtGFxRDCAo9nr8OR1sEjE0I40AUmc18ZpQ+ckTRyqY=
Subject key identifier:   FF:D5:DD:98:54:9A:1C:94:C0:FF:C6:B8:DB:4D:6D:46:2E:7B:EF:1A
Certificate issuer:       /CN=AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291
Certificate serial:       73776592FEAA0DA3C32606E89E39996D3A398C39
Authority key identifier: AC:84:02:A9:ED:B1:31:C8:A9:68:1A:6F:1E:A9:7A:1F:09:D2:D2:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/34352e3232362e3133382e302f32332d3233203d3e20323636393637.roa
Signing time:             Wed 24 May 2023 12:28:57 +0000
ROA not before:           Wed 24 May 2023 12:23:57 +0000
ROA not after:            Wed 22 May 2024 12:28:57 +0000
asID:                     266967
IP address blocks:        45.226.138.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:77:65:92:fe:aa:0d:a3:c3:26:06:e8:9e:39:99:6d:3a:39:8c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291
        Validity
            Not Before: May 24 12:23:57 2023 GMT
            Not After : May 22 12:28:57 2024 GMT
        Subject: CN=FFD5DD98549A1C94C0FFC6B8DB4D6D462E7BEF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:33:b8:98:ae:03:fd:10:95:48:9e:2e:44:
                    03:e5:dc:72:40:54:ef:7f:89:e5:a8:03:bc:a3:23:
                    b0:8c:7a:66:c8:7d:d4:fe:48:df:5d:0f:1d:ec:13:
                    43:2b:a2:05:86:a0:50:b4:0d:ca:e1:db:b3:f1:2d:
                    08:fc:9f:d9:6c:d1:9d:b0:36:d3:48:3e:32:8f:74:
                    8c:d4:26:10:c3:40:b9:9e:e2:87:39:18:4e:6b:da:
                    20:b4:38:9c:54:d6:39:b8:1e:7a:5f:a2:65:c8:38:
                    b5:e9:1b:26:fc:a1:a8:3d:6b:18:54:61:dc:3a:39:
                    ae:83:49:12:81:fd:88:a9:0f:fc:8b:8a:6b:3a:66:
                    65:a2:82:f8:9f:8f:ad:c4:e3:51:eb:94:43:95:1d:
                    0a:2a:1b:6e:80:35:60:21:52:6d:1a:9d:5b:d0:3a:
                    bd:14:e7:b3:44:46:60:96:64:1c:b0:5e:3e:e4:01:
                    47:18:13:6f:63:31:a3:67:02:aa:5f:56:55:e0:d4:
                    b1:1d:04:d1:25:5d:3d:22:4b:60:6a:bb:d6:31:64:
                    83:fc:f9:79:83:d4:08:1c:f1:a2:a1:09:e1:64:20:
                    f3:ce:42:19:5a:67:23:f3:28:83:27:83:0a:06:b7:
                    43:f3:31:37:2c:5d:69:93:d6:01:ef:9c:65:41:0e:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D5:DD:98:54:9A:1C:94:C0:FF:C6:B8:DB:4D:6D:46:2E:7B:EF:1A
            X509v3 Authority Key Identifier:
                keyid:AC:84:02:A9:ED:B1:31:C8:A9:68:1A:6F:1E:A9:7A:1F:09:D2:D2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC8402A9EDB131C8A9681A6F1EA97A1F09D2D291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/0/34352e3232362e3133382e302f32332d3233203d3e20323636393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:c2:e2:2a:3c:44:d8:b0:99:c8:b0:21:e5:ab:fb:f8:41:
         01:78:22:8a:e9:40:c2:65:21:8f:ae:ed:69:07:8f:14:0c:de:
         cd:4b:fc:3c:1e:e1:b8:5c:69:11:a0:e1:02:36:99:52:1f:be:
         2d:6d:ed:c1:d3:f3:42:61:9f:c8:34:bc:e6:00:35:af:2b:75:
         69:38:59:15:5b:8a:20:b2:49:33:c4:6b:b4:5f:0a:c7:31:58:
         eb:3e:3d:36:e7:0e:9a:02:24:06:25:2d:92:48:04:42:97:0f:
         6b:e4:c6:89:33:e3:46:fd:f0:fb:2e:d0:47:9b:a5:50:bb:88:
         a1:d9:94:9e:96:52:b9:34:c7:32:65:a9:26:4a:f3:3a:83:4a:
         7b:e9:cb:9c:6d:f0:f4:e7:84:9f:a8:a6:d7:35:ca:2e:35:69:
         b6:de:2f:2f:ae:92:f2:2d:d7:3c:be:dd:34:07:74:15:7b:54:
         ee:ed:c7:30:5a:6c:5f:ff:b1:9b:da:0a:2a:a7:44:ee:14:4c:
         0a:a9:1f:6e:86:2b:61:d0:2e:4e:c9:6a:0f:ef:f2:9f:57:b0:
         a4:0f:cf:23:b0:f9:9e:e9:dc:d4:8b:58:c0:e4:1b:51:98:97:
         66:c7:06:e6:f6:4a:e4:5e:df:38:e5:b0:7a:69:cd:d3:d2:ce:
         72:5f:f5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org