Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/34352e362e3132342e302f32332d3233203d3e20323636313334.roa
File:                     34352e362e3132342e302f32332d3233203d3e20323636313334.roa (raw, json)
Hash identifier:          rtNu19PbugLUwpgexHdcORW2FBp43+g9x0YOWNp3gG0=
Subject key identifier:   69:A9:B5:AE:7D:2E:0A:E3:C0:BA:EE:A8:35:1E:B5:A2:92:66:98:65
Certificate issuer:       /CN=4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4
Certificate serial:       29C0EB8030D41FEDA704481B441D3101E4EB66DE
Authority key identifier: 4B:E4:B7:D8:44:EB:7B:C0:81:B6:DF:A5:A9:8D:6D:E9:0F:CD:9C:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/34352e362e3132342e302f32332d3233203d3e20323636313334.roa
Signing time:             Sun 10 Sep 2023 20:15:28 +0000
ROA not before:           Sun 10 Sep 2023 20:10:28 +0000
ROA not after:            Sun 08 Sep 2024 20:15:28 +0000
asID:                     266134
IP address blocks:        45.6.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c0:eb:80:30:d4:1f:ed:a7:04:48:1b:44:1d:31:01:e4:eb:66:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4
        Validity
            Not Before: Sep 10 20:10:28 2023 GMT
            Not After : Sep  8 20:15:28 2024 GMT
        Subject: CN=69A9B5AE7D2E0AE3C0BAEEA8351EB5A292669865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:ac:d5:b3:7a:a2:e9:63:32:68:1e:79:e9:
                    f8:f5:29:ba:3e:21:17:5f:cb:6f:2f:15:4c:d0:8a:
                    d7:67:75:35:85:a5:24:a7:e1:52:5d:6e:29:e0:cf:
                    b1:0d:9d:71:14:c2:ef:cc:64:f2:e3:73:bd:2e:86:
                    4c:eb:96:da:ff:e5:35:1d:e6:90:74:bb:54:97:ba:
                    c8:d0:9b:86:6d:52:30:d8:6a:77:64:78:52:bc:4d:
                    a6:c8:43:a5:dd:7b:1e:f8:72:90:17:f6:cb:57:47:
                    cb:ad:68:c4:b7:05:3f:ac:d6:74:61:37:d5:3a:de:
                    89:8b:fc:aa:e3:9c:e7:a4:96:94:4b:9d:08:ca:01:
                    d6:5a:81:cd:07:51:2c:40:fc:99:7a:bd:e7:03:cb:
                    58:bc:f3:f7:ff:a4:d0:fc:66:cc:fe:ea:fd:d8:42:
                    f7:c5:36:b9:b5:ca:90:61:23:5b:51:c9:03:93:89:
                    09:f5:31:d4:59:3e:37:03:d8:9b:c7:09:84:d2:63:
                    64:9e:89:90:a8:8f:07:e2:52:bc:eb:4c:dc:16:3c:
                    27:cf:d9:d7:6f:8d:aa:3f:46:6d:74:ed:cc:45:3d:
                    97:32:2d:52:e4:58:9e:0d:d7:54:f8:03:f0:17:5f:
                    91:bb:23:cb:86:f2:63:5e:eb:40:77:cc:a5:02:ce:
                    4a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A9:B5:AE:7D:2E:0A:E3:C0:BA:EE:A8:35:1E:B5:A2:92:66:98:65
            X509v3 Authority Key Identifier:
                keyid:4B:E4:B7:D8:44:EB:7B:C0:81:B6:DF:A5:A9:8D:6D:E9:0F:CD:9C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/34352e362e3132342e302f32332d3233203d3e20323636313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:a0:b7:91:86:c8:a9:b2:c2:00:be:9e:3c:7b:60:87:4f:e7:
         1a:2c:5f:52:4b:1d:4f:da:48:86:da:0a:e3:26:57:c5:eb:b7:
         eb:1e:0a:a5:1d:ff:b1:3a:14:8b:57:92:6c:c1:19:06:33:ba:
         e0:af:d3:53:78:0d:31:6d:a9:f8:80:4b:b3:95:25:06:a2:87:
         b6:40:b0:a0:1a:1d:ee:93:f6:c9:4f:c1:39:89:2c:ff:65:37:
         72:3d:24:06:e3:57:64:57:35:39:25:1c:9a:8e:b0:a3:ce:ce:
         7a:8c:b2:f7:93:af:23:44:15:81:ed:d6:38:9b:17:b2:8d:d5:
         ac:fb:48:20:d0:54:09:ff:01:9d:96:29:9b:14:2f:0a:a3:68:
         b9:78:9f:47:90:f3:2e:ce:2d:b1:21:6f:02:e8:aa:df:cf:f3:
         93:be:f5:8b:d0:bf:a3:2b:8c:16:15:23:b2:cf:c3:39:fa:ff:
         da:a1:2b:0b:1c:8e:2e:6c:0e:c7:b0:f3:7c:3f:1e:58:7f:c8:
         a1:85:e0:da:5b:87:79:38:d1:8c:ca:30:c0:29:f9:68:88:a4:
         32:74:ab:cb:d1:8d:09:75:a6:fe:0e:1b:e2:20:e7:72:34:88:
         d2:45:f4:98:3a:b3:84:8c:be:f1:5a:51:e7:4e:55:67:64:6a:
         b1:e2:09:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org