Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139382e302f32342d3238203d3e20323639313937.roa
File:                     34352e3138312e3139382e302f32342d3238203d3e20323639313937.roa (raw, json)
Hash identifier:          6N5RRTJHclS330gQC7LU+/VdVEcgoGs345/C9y1skAc=
Subject key identifier:   0B:97:C9:C5:E7:AA:05:C4:84:F8:C7:04:C6:E6:25:FB:89:AB:A3:FB
Certificate issuer:       /CN=06AB476C0D831228F3F27817D9D72D20D21DB145
Certificate serial:       461A1C7D339F66696897799BDAB7FE63A8420596
Authority key identifier: 06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139382e302f32342d3238203d3e20323639313937.roa
Signing time:             Tue 01 Aug 2023 13:01:30 +0000
ROA not before:           Tue 01 Aug 2023 12:56:30 +0000
ROA not after:            Tue 30 Jul 2024 13:01:30 +0000
asID:                     269197
IP address blocks:        45.181.198.0/24 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1a:1c:7d:33:9f:66:69:68:97:79:9b:da:b7:fe:63:a8:42:05:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AB476C0D831228F3F27817D9D72D20D21DB145
        Validity
            Not Before: Aug  1 12:56:30 2023 GMT
            Not After : Jul 30 13:01:30 2024 GMT
        Subject: CN=0B97C9C5E7AA05C484F8C704C6E625FB89ABA3FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:17:96:0d:1b:d5:68:b7:14:03:fe:3e:0f:
                    43:e3:1a:98:c6:6f:44:50:65:7f:a2:03:c2:5f:7a:
                    ba:c2:ca:e6:41:14:7c:a8:14:2a:87:46:30:ab:a1:
                    10:1d:41:1c:28:f9:24:f4:ff:31:e7:c2:e7:24:b3:
                    e9:4a:98:c2:de:75:da:70:a0:ed:f8:5b:e8:3b:be:
                    2a:3b:6d:45:2e:f2:1b:9f:94:50:95:a2:bf:c4:fb:
                    ce:ec:ad:9c:1e:c5:22:15:30:83:66:70:86:50:4b:
                    d0:21:4c:68:14:4d:be:1a:90:f8:4d:51:52:7e:0f:
                    ff:eb:31:ea:ef:3c:49:c6:47:1a:cb:e2:7a:1c:7b:
                    88:84:e9:b3:52:38:cd:b5:29:40:45:99:aa:cd:06:
                    c3:84:39:41:77:87:ef:53:31:de:ea:f5:15:7f:af:
                    15:49:5d:b0:6b:19:2f:1a:b0:89:c9:e4:08:a3:5b:
                    3a:59:98:39:4e:89:f9:d8:52:fb:7c:5f:30:64:9f:
                    13:4c:3a:08:b0:5a:fd:fe:48:df:b9:b1:85:b3:88:
                    e2:d5:65:07:af:2a:0f:67:75:c6:bd:1a:f1:ff:5e:
                    f7:5c:de:53:f5:2c:0a:4b:80:55:16:9c:7f:80:18:
                    5c:9b:d9:36:13:54:76:60:60:62:7d:40:4e:33:58:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:97:C9:C5:E7:AA:05:C4:84:F8:C7:04:C6:E6:25:FB:89:AB:A3:FB
            X509v3 Authority Key Identifier:
                keyid:06:AB:47:6C:0D:83:12:28:F3:F2:78:17:D9:D7:2D:20:D2:1D:B1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/06AB476C0D831228F3F27817D9D72D20D21DB145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06AB476C0D831228F3F27817D9D72D20D21DB145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/34352e3138312e3139382e302f32342d3238203d3e20323639313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:27:66:46:14:8e:f2:e3:37:83:52:b9:f8:36:ec:ae:ff:3d:
         34:92:98:f5:d9:5c:58:e6:b7:c4:58:a0:ca:c9:76:48:86:39:
         ab:97:65:eb:4c:9a:dd:29:32:a2:d3:9a:c3:d5:08:b2:39:de:
         0d:d2:2e:11:e2:a3:00:11:34:cb:e1:6d:a5:04:16:96:1b:54:
         19:59:a5:f1:f5:89:79:2d:ea:7c:48:52:5e:23:47:16:a4:3f:
         d7:25:82:a2:40:9f:b1:fe:ab:2c:7e:0e:44:3d:70:54:7c:be:
         09:05:cc:1e:c6:d8:9d:79:08:66:26:45:92:12:47:2b:55:60:
         bd:18:db:68:91:4d:1a:04:bf:e2:38:aa:8c:34:f2:20:33:32:
         93:1c:f0:00:49:16:0a:6d:e7:73:6e:54:1e:11:39:47:02:0b:
         4c:da:9c:16:c6:61:87:92:99:29:c7:d0:d7:b6:13:64:e4:97:
         8a:49:88:46:d2:f6:46:36:0c:c6:3b:76:e5:25:22:2f:5f:52:
         19:08:ae:c0:7d:df:e2:93:52:62:e9:72:2d:76:40:6c:12:8e:
         3a:12:6e:be:d2:73:27:fc:25:73:d8:2b:20:89:0a:c5:c8:61:
         fa:cb:4d:41:b1:ea:88:50:c5:7f:30:e4:bd:dc:7f:4c:1c:5c:
         8e:3f:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org