Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/AS61592.roa
File:                     AS61592.roa (raw, json)
Hash identifier:          ZgbmXuMTCrD5g/Ssmy2RLfvb6fAQqwaGppmYt9+Xhog=
Subject key identifier:   25:C4:9A:98:A0:1C:5D:D7:24:04:AE:1C:5C:FC:86:30:81:30:02:4E
Certificate issuer:       /CN=6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F
Certificate serial:       2A0A776AEA1C59BA06E50AD10567C41998E9A8D8
Authority key identifier: 6A:B6:E1:6E:8F:16:16:97:0F:1B:CE:4C:CA:23:DF:CF:F7:B0:FB:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/AS61592.roa
Signing time:             Mon 25 Mar 2024 18:51:16 +0000
ROA not before:           Mon 25 Mar 2024 18:46:16 +0000
ROA not after:            Mon 24 Mar 2025 18:51:16 +0000
asID:                     61592
IP address blocks:        45.224.216.0/22 maxlen: 22
                          45.224.216.0/23 maxlen: 23
                          45.224.216.0/24 maxlen: 24
                          45.224.217.0/24 maxlen: 24
                          45.224.218.0/23 maxlen: 23
                          45.224.218.0/24 maxlen: 24
                          45.224.219.0/24 maxlen: 24
                          45.232.188.0/22 maxlen: 22
                          45.232.188.0/23 maxlen: 23
                          45.232.188.0/24 maxlen: 24
                          45.232.189.0/24 maxlen: 24
                          45.232.190.0/23 maxlen: 23
                          45.232.190.0/24 maxlen: 24
                          45.232.191.0/24 maxlen: 24
                          45.234.100.0/22 maxlen: 22
                          45.234.100.0/23 maxlen: 23
                          45.234.100.0/24 maxlen: 24
                          45.234.101.0/24 maxlen: 24
                          45.234.102.0/23 maxlen: 23
                          45.234.102.0/24 maxlen: 24
                          45.234.103.0/24 maxlen: 24
                          2804:4c34::/32 maxlen: 32
                          2804:4c34::/34 maxlen: 34
                          2804:4c34::/36 maxlen: 36
                          2804:4c34:1::/48 maxlen: 48
                          2804:4c34:1000::/36 maxlen: 36
                          2804:4c34:2000::/36 maxlen: 36
                          2804:4c34:3000::/36 maxlen: 36
                          2804:4c34:4000::/34 maxlen: 34
                          2804:4c34:4000::/36 maxlen: 36
                          2804:4c34:4000::/48 maxlen: 48
                          2804:4c34:4001::/48 maxlen: 48
                          2804:4c34:4002::/48 maxlen: 48
                          2804:4c34:4003::/48 maxlen: 48
                          2804:4c34:4004::/48 maxlen: 48
                          2804:4c34:4005::/48 maxlen: 48
                          2804:4c34:4006::/48 maxlen: 48
                          2804:4c34:4007::/48 maxlen: 48
                          2804:4c34:4008::/48 maxlen: 48
                          2804:4c34:4009::/48 maxlen: 48
                          2804:4c34:400a::/48 maxlen: 48
                          2804:4c34:400b::/48 maxlen: 48
                          2804:4c34:400e::/48 maxlen: 48
                          2804:4c34:400f::/48 maxlen: 48
                          2804:4c34:4010::/46 maxlen: 46
                          2804:4c34:4014::/48 maxlen: 48
                          2804:4c34:4015::/48 maxlen: 48
                          2804:4c34:4016::/48 maxlen: 48
                          2804:4c34:5000::/36 maxlen: 36
                          2804:4c34:6000::/36 maxlen: 36
                          2804:4c34:7000::/36 maxlen: 36
                          2804:4c34:8000::/33 maxlen: 33
                          2804:4c34:8000::/34 maxlen: 34
                          2804:4c34:8000::/36 maxlen: 36
                          2804:4c34:9000::/36 maxlen: 36
                          2804:4c34:a000::/36 maxlen: 36
                          2804:4c34:b000::/36 maxlen: 36
                          2804:4c34:c000::/34 maxlen: 34
                          2804:4c34:c000::/36 maxlen: 36
                          2804:4c34:c000::/48 maxlen: 48
                          2804:4c34:c001::/48 maxlen: 48
                          2804:4c34:c002::/48 maxlen: 48
                          2804:4c34:c003::/48 maxlen: 48
                          2804:4c34:c004::/48 maxlen: 48
                          2804:4c34:c005::/48 maxlen: 48
                          2804:4c34:c006::/48 maxlen: 48
                          2804:4c34:c007::/48 maxlen: 48
                          2804:4c34:c009::/48 maxlen: 48
                          2804:4c34:c00a::/48 maxlen: 48
                          2804:4c34:c00b::/48 maxlen: 48
                          2804:4c34:c010::/48 maxlen: 48
                          2804:4c34:c011::/48 maxlen: 48
                          2804:4c34:c012::/48 maxlen: 48
                          2804:4c34:c013::/48 maxlen: 48
                          2804:4c34:c014::/48 maxlen: 48
                          2804:4c34:c015::/48 maxlen: 48
                          2804:4c34:c016::/48 maxlen: 48
                          2804:4c34:c017::/48 maxlen: 48
                          2804:4c34:c018::/48 maxlen: 48
                          2804:4c34:c01a::/48 maxlen: 48
                          2804:4c34:c01b::/48 maxlen: 48
                          2804:4c34:c01c::/48 maxlen: 48
                          2804:4c34:c01d::/48 maxlen: 48
                          2804:4c34:c01e::/48 maxlen: 48
                          2804:4c34:c01f::/48 maxlen: 48
                          2804:4c34:c020::/48 maxlen: 48
                          2804:4c34:c021::/48 maxlen: 48
                          2804:4c34:c022::/48 maxlen: 48
                          2804:4c34:c023::/48 maxlen: 48
                          2804:4c34:c024::/48 maxlen: 48
                          2804:4c34:c025::/48 maxlen: 48
                          2804:4c34:c026::/48 maxlen: 48
                          2804:4c34:c027::/48 maxlen: 48
                          2804:4c34:c028::/48 maxlen: 48
                          2804:4c34:c029::/48 maxlen: 48
                          2804:4c34:c02a::/48 maxlen: 48
                          2804:4c34:c030::/48 maxlen: 48
                          2804:4c34:c032::/47 maxlen: 47
                          2804:4c34:c034::/48 maxlen: 48
                          2804:4c34:c035::/48 maxlen: 48
                          2804:4c34:c036::/48 maxlen: 48
                          2804:4c34:c037::/48 maxlen: 48
                          2804:4c34:c039::/48 maxlen: 48
                          2804:4c34:c03a::/48 maxlen: 48
                          2804:4c34:c03b::/48 maxlen: 48
                          2804:4c34:c03c::/48 maxlen: 48
                          2804:4c34:c03d::/48 maxlen: 48
                          2804:4c34:c03e::/48 maxlen: 48
                          2804:4c34:c03f::/48 maxlen: 48
                          2804:4c34:c040::/44 maxlen: 44
                          2804:4c34:c054::/47 maxlen: 47
                          2804:4c34:c056::/48 maxlen: 48
                          2804:4c34:c057::/48 maxlen: 48
                          2804:4c34:c059::/48 maxlen: 48
                          2804:4c34:c05a::/47 maxlen: 47
                          2804:4c34:d000::/36 maxlen: 36
                          2804:4c34:e000::/36 maxlen: 36
                          2804:4c34:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0a:77:6a:ea:1c:59:ba:06:e5:0a:d1:05:67:c4:19:98:e9:a8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F
        Validity
            Not Before: Mar 25 18:46:16 2024 GMT
            Not After : Mar 24 18:51:16 2025 GMT
        Subject: CN=25C49A98A01C5DD72404AE1C5CFC86308130024E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:d7:86:a2:58:a3:57:0c:fb:d1:bb:23:e1:
                    0b:d4:76:7f:8a:c7:6d:c0:18:95:4c:c2:55:7c:44:
                    42:b5:87:12:91:1c:5f:77:ae:29:45:8e:be:d0:ef:
                    96:de:2b:8a:53:2c:ed:f5:d9:69:0d:b0:6f:8b:74:
                    63:42:86:c9:da:b9:9e:14:d7:37:29:bc:37:6e:95:
                    d0:2b:17:cb:97:bb:23:0d:b7:43:50:45:a5:3a:28:
                    58:c7:4c:62:8a:b3:ca:98:15:19:0a:83:b0:10:74:
                    c6:49:8c:4e:32:86:a1:f5:e7:40:76:61:7c:08:0a:
                    4e:e6:91:39:ea:72:c1:02:10:5b:49:bd:ae:00:a8:
                    14:d4:b5:55:c5:6b:de:e7:6c:a2:8f:bd:45:1a:38:
                    08:e3:d8:ed:22:82:f4:49:86:e4:ed:5e:2f:b6:59:
                    73:40:2e:59:27:e3:fd:67:41:3d:e3:c7:b5:f7:1c:
                    dd:97:8a:ba:eb:be:c0:84:9b:f2:47:63:c3:a0:c2:
                    c2:77:00:d7:65:62:2e:e2:55:d7:98:25:c5:ea:66:
                    53:3a:50:f1:f3:93:95:00:d4:45:39:6e:4e:bc:de:
                    c6:53:03:c5:6d:49:51:66:06:6b:8a:4d:d2:25:b3:
                    28:81:78:55:df:6b:5a:50:62:73:b3:78:82:02:ce:
                    ac:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C4:9A:98:A0:1C:5D:D7:24:04:AE:1C:5C:FC:86:30:81:30:02:4E
            X509v3 Authority Key Identifier:
                keyid:6A:B6:E1:6E:8F:16:16:97:0F:1B:CE:4C:CA:23:DF:CF:F7:B0:FB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AB6E16E8F1616970F1BCE4CCA23DFCFF7B0FB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/AS61592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.216.0/22
                  45.232.188.0/22
                  45.234.100.0/22
                IPv6:
                  2804:4c34::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:ae:57:75:a0:2f:37:8b:a9:29:f1:8d:df:8b:f6:ba:4b:50:
         9b:9d:dc:10:d7:5b:88:a2:8a:d0:89:30:9f:7b:49:97:2b:b1:
         38:29:04:a3:88:f9:1e:a7:07:ca:9b:70:f4:8e:40:2f:01:ad:
         36:bf:34:17:fe:8e:fd:cc:8d:f6:0a:fc:c5:18:41:3f:5c:b9:
         8f:b8:89:27:6d:c5:02:b8:8d:ba:89:ad:50:76:7c:5c:25:7f:
         a2:96:98:3b:4d:b8:1a:45:b4:6a:6b:0a:52:02:b4:c0:b8:84:
         07:c8:93:af:35:77:c8:d6:b3:b0:36:0a:0e:9f:f5:2d:7e:85:
         89:94:8d:f5:dd:47:86:9c:73:e9:ee:e1:de:38:b2:59:09:ae:
         cb:da:4a:44:95:29:d2:d0:2a:de:4b:f2:12:2d:e4:6f:1b:73:
         fc:ef:37:51:e2:8b:6b:c9:c9:1a:f0:bc:b4:95:48:88:3d:89:
         5d:f7:2d:07:50:31:20:e8:e0:53:af:ce:d7:f1:46:3f:b3:9c:
         cd:be:ff:b1:59:8a:f2:aa:f0:fb:2e:f4:36:f7:85:40:9d:88:
         aa:02:16:05:fc:ff:52:c6:61:3a:6d:f3:b6:f4:b1:85:82:81:
         f2:94:4b:b2:9d:e2:3f:b4:5f:35:a8:ad:eb:2e:0c:6b:4c:5c:
         d2:16:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org