Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/34352e3136372e3130352e302f32342d3234203d3e20323638303534.roa
File:                     34352e3136372e3130352e302f32342d3234203d3e20323638303534.roa (raw, json)
Hash identifier:          UPPDPJ3YjthkbJ56JuJN9h1EwvYHQuDAU1d0eoJL5YE=
Subject key identifier:   9E:0B:93:13:77:2F:DE:48:1F:11:DA:82:20:79:8D:A4:5C:DB:2E:15
Certificate issuer:       /CN=246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC
Certificate serial:       6C5BC6544E6C38FDA7417641EE9B22717964A072
Authority key identifier: 24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/34352e3136372e3130352e302f32342d3234203d3e20323638303534.roa
Signing time:             Sun 22 Oct 2023 23:50:23 +0000
ROA not before:           Sun 22 Oct 2023 23:45:23 +0000
ROA not after:            Sun 20 Oct 2024 23:50:23 +0000
asID:                     268054
IP address blocks:        45.167.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5b:c6:54:4e:6c:38:fd:a7:41:76:41:ee:9b:22:71:79:64:a0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC
        Validity
            Not Before: Oct 22 23:45:23 2023 GMT
            Not After : Oct 20 23:50:23 2024 GMT
        Subject: CN=9E0B9313772FDE481F11DA8220798DA45CDB2E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:30:bb:1b:35:0c:3d:7c:89:71:d5:a8:90:
                    29:7f:23:45:f1:9f:c8:10:58:1e:32:51:ae:31:87:
                    75:39:66:a7:20:b2:2d:77:d7:fa:a6:62:c2:f9:90:
                    0d:ae:0e:63:25:d4:ba:dc:fd:f6:9a:af:f8:a0:73:
                    c5:c7:09:76:43:3f:1a:da:49:88:76:cc:92:93:44:
                    c3:2a:92:58:23:a5:24:c9:a4:41:1d:93:88:d5:21:
                    9d:04:6d:96:ac:24:8f:80:5c:9d:e1:52:99:97:6d:
                    e7:e5:78:6e:e6:8f:43:9b:9d:72:ba:c9:9c:68:5b:
                    2c:0a:3c:9d:8a:72:69:c9:af:3d:8d:7e:b1:72:5d:
                    64:ad:1e:81:fa:bb:ff:47:d0:d5:32:56:6a:3d:09:
                    6c:67:2f:7a:19:ee:f9:13:cf:12:de:3d:e0:75:10:
                    d3:64:45:b7:f6:86:ba:29:0e:66:7a:fb:57:3f:08:
                    43:2c:86:3f:3c:2d:19:5d:d7:4c:8f:46:4d:94:66:
                    23:25:48:c6:0c:ca:ae:d9:43:84:0f:68:3c:e1:d7:
                    62:df:8f:7b:58:5e:f6:c6:91:c3:97:e7:67:63:51:
                    61:54:f3:dc:be:01:82:ca:27:16:f5:48:97:65:a7:
                    73:d9:4e:b3:cc:c3:fe:85:e7:c7:89:89:bd:c5:4c:
                    8a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0B:93:13:77:2F:DE:48:1F:11:DA:82:20:79:8D:A4:5C:DB:2E:15
            X509v3 Authority Key Identifier:
                keyid:24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/34352e3136372e3130352e302f32342d3234203d3e20323638303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:bf:32:76:eb:e0:67:2d:87:86:8e:c3:7f:89:56:05:9c:9a:
         4a:67:0f:72:ab:23:f0:26:ed:51:1f:80:fe:e1:bd:8b:9d:e1:
         70:35:44:31:85:6b:59:f6:ca:0b:4d:63:8f:31:39:f4:12:d7:
         97:d0:57:5f:5d:1e:3c:51:45:6e:9c:1b:9a:e9:5c:e6:53:c0:
         99:3a:bc:1d:ee:c1:55:65:1a:2f:cf:e7:4a:75:2e:18:19:f1:
         7d:24:c7:be:15:20:f2:bb:a7:73:28:86:c0:23:bc:50:8c:f5:
         cf:d7:67:90:89:c3:e2:26:7d:78:10:29:b6:1e:6a:c4:df:47:
         67:cd:56:8c:10:61:f7:91:d0:fd:cb:f8:a8:4d:c2:b3:dd:5d:
         f2:31:91:1a:ee:c8:bf:36:78:a3:65:aa:5e:76:4b:f6:96:a1:
         7d:69:eb:5a:68:f2:40:51:dc:bb:00:35:77:4b:e6:51:a0:63:
         c5:3f:1c:23:6e:5b:97:79:00:89:36:ab:dd:4e:d7:cf:64:15:
         04:d0:b3:a9:99:53:56:fe:89:c0:72:8e:d6:ae:fd:77:44:6e:
         ec:49:53:4a:d5:0f:8a:61:0b:41:a1:c1:23:bc:a8:37:72:85:
         8b:ec:3b:7d:f3:d0:e4:74:3a:76:57:57:3d:0f:8e:2e:43:47:
         9e:b3:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org