Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa
File:                     34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa (raw, json)
Hash identifier:          wv6dDoHl3pF9eOx1sBCXmA+rqgL5ENouHwhljel5pWM=
Subject key identifier:   D2:8B:E2:B6:01:A1:F1:09:30:FE:7F:FF:02:9F:A5:FC:95:8C:0D:1D
Certificate issuer:       /CN=246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC
Certificate serial:       255D598D7A51564CD61CDDE419810A57C63F7529
Authority key identifier: 24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa
Signing time:             Thu 11 Apr 2024 21:19:01 +0000
ROA not before:           Thu 11 Apr 2024 21:14:01 +0000
ROA not after:            Thu 10 Apr 2025 21:19:01 +0000
asID:                     268054
IP address blocks:        45.167.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5d:59:8d:7a:51:56:4c:d6:1c:dd:e4:19:81:0a:57:c6:3f:75:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC
        Validity
            Not Before: Apr 11 21:14:01 2024 GMT
            Not After : Apr 10 21:19:01 2025 GMT
        Subject: CN=D28BE2B601A1F10930FE7FFF029FA5FC958C0D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f0:31:96:d7:7c:45:a0:93:27:af:dd:07:bb:
                    86:e5:4b:b5:02:14:c8:18:7f:56:e0:d4:7c:5f:73:
                    7e:36:fb:ef:f8:71:1d:68:c1:ec:f8:d2:8a:c1:62:
                    10:7f:e3:af:8d:3d:c3:6c:e8:f0:bf:77:bf:de:b8:
                    e7:f9:1c:b9:9a:f8:64:72:a9:43:b8:7c:89:cd:8b:
                    ec:b9:54:ae:d7:e4:4d:71:a9:3a:29:6a:79:3f:9d:
                    62:4c:00:0f:3b:c4:48:83:52:c6:ef:5f:f2:0f:78:
                    9c:98:f1:9e:c7:ca:11:ef:a8:4f:3a:9c:01:f2:cb:
                    aa:a9:00:f7:7e:8b:37:98:8d:e6:62:d1:32:19:f9:
                    5d:fb:96:aa:d2:ca:e1:18:61:bb:95:26:2f:50:0a:
                    fc:03:e8:b3:fd:7d:5a:40:88:73:0d:c5:d5:df:f2:
                    2c:40:16:f0:75:ba:31:3c:d0:c7:fa:56:d1:2f:20:
                    26:de:25:99:31:80:42:6f:c6:2e:63:57:eb:26:66:
                    ba:de:85:f0:21:27:cf:c5:cb:8c:a2:37:b0:f3:d9:
                    93:a6:e2:9f:d3:a5:49:07:81:fb:91:5c:4f:f2:ed:
                    69:61:43:ed:08:0f:a6:f1:06:fa:3b:b9:c4:f8:3d:
                    75:bb:eb:1f:a2:a5:b1:9d:c4:9c:8f:be:bc:80:f2:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8B:E2:B6:01:A1:F1:09:30:FE:7F:FF:02:9F:A5:FC:95:8C:0D:1D
            X509v3 Authority Key Identifier:
                keyid:24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:82:43:af:cc:7a:6d:48:11:9b:fc:4f:40:95:bf:d4:81:84:
         13:ca:66:6e:c1:24:1b:15:56:2c:48:ab:dc:11:a4:bc:fc:6d:
         5d:25:57:60:f7:4d:78:af:cb:2c:23:01:ed:e1:b1:be:c9:8f:
         3c:98:4d:1b:e3:46:e1:3d:1b:b1:1d:a6:71:fb:78:da:19:62:
         d3:31:63:73:5e:96:03:47:07:90:c0:ab:1f:30:ea:5c:7a:ed:
         8b:82:c8:05:cb:43:4f:ef:0b:2d:cc:2b:94:94:bd:c0:f9:ff:
         3d:79:9b:02:91:40:b4:e9:93:c6:48:0b:63:46:41:6c:c1:6d:
         46:e3:fd:8d:17:5d:1d:b1:d6:4d:8c:21:d3:02:96:01:35:f9:
         84:5d:62:ff:d6:59:fa:d3:ea:07:b1:b6:2b:92:aa:a7:88:c6:
         ce:28:aa:51:b4:1b:81:b1:f1:15:fd:28:bd:67:a2:5c:78:c2:
         25:dd:df:1e:62:88:1e:03:f3:04:e7:58:06:2e:d0:2b:6e:af:
         db:c8:99:9c:2c:5f:79:f1:d2:58:a6:31:19:f2:ec:69:08:9c:
         89:c4:44:fd:80:e5:27:bf:6d:9f:a7:67:af:77:55:ca:a9:2a:
         76:38:29:d7:e9:9e:58:23:3a:b3:b0:68:c8:c9:ab:d8:65:e8:
         d1:40:e6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org