Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/34352e362e3139362e302f32342d3234203d3e20323636353633.roa
File:                     34352e362e3139362e302f32342d3234203d3e20323636353633.roa (raw, json)
Hash identifier:          V0QDsoevoSebtq4Dpr39t8pCzzBqRgXqVGK7wJ8P854=
Subject key identifier:   F7:A8:2A:E8:EF:FB:FE:01:E3:66:1E:98:B0:3E:DE:F9:4E:91:8F:F4
Certificate issuer:       /CN=2C8F79E76852475DDED25004F5D935390FAB63C4
Certificate serial:       0C8716D7C5095D2046CA3AA2E3D64FFB5814E754
Authority key identifier: 2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8F79E76852475DDED25004F5D935390FAB63C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/34352e362e3139362e302f32342d3234203d3e20323636353633.roa
Signing time:             Thu 20 Apr 2023 13:55:12 +0000
ROA not before:           Thu 20 Apr 2023 13:50:12 +0000
ROA not after:            Thu 18 Apr 2024 13:55:12 +0000
asID:                     266563
IP address blocks:        45.6.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:87:16:d7:c5:09:5d:20:46:ca:3a:a2:e3:d6:4f:fb:58:14:e7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C8F79E76852475DDED25004F5D935390FAB63C4
        Validity
            Not Before: Apr 20 13:50:12 2023 GMT
            Not After : Apr 18 13:55:12 2024 GMT
        Subject: CN=F7A82AE8EFFBFE01E3661E98B03EDEF94E918FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:c4:9e:01:2a:0c:cd:7e:d4:ba:78:1e:a4:
                    57:3c:af:ea:17:20:7d:60:5c:2a:3b:e0:ec:9d:e5:
                    48:37:a7:fc:d0:96:dc:60:21:05:18:50:08:24:87:
                    96:11:02:df:d4:c9:c5:0b:27:8d:37:08:6b:89:23:
                    46:9f:8f:1a:02:55:ff:d6:bb:b6:30:64:42:e1:a3:
                    d7:0a:22:a1:ba:83:8a:c3:0b:0a:5a:d8:de:1e:2a:
                    dc:f1:75:1d:d2:90:37:12:07:41:90:23:5f:05:6e:
                    f7:3e:3f:40:ff:83:b4:11:b9:1a:42:93:7c:f9:2c:
                    6b:c6:01:d8:d0:72:2b:34:a9:85:d9:90:63:39:c8:
                    f9:3e:53:02:83:44:d2:0e:51:9b:e7:ec:df:27:a7:
                    aa:5b:d6:46:0e:df:28:13:34:00:fa:a9:07:c7:67:
                    02:be:11:a6:02:de:23:65:a7:05:96:a0:c5:5f:2f:
                    4f:66:c9:11:d4:61:f8:5a:f5:fa:b5:61:d9:dc:b5:
                    1c:04:1c:14:ec:d4:bb:bc:58:31:65:10:75:23:d5:
                    4b:1d:b3:2d:73:83:66:18:f7:f3:ec:0d:5f:28:07:
                    3f:af:4f:49:c7:fc:f5:a1:fb:eb:42:73:70:28:9f:
                    65:df:5e:83:ff:2e:7a:40:09:94:96:b9:2b:d7:a8:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A8:2A:E8:EF:FB:FE:01:E3:66:1E:98:B0:3E:DE:F9:4E:91:8F:F4
            X509v3 Authority Key Identifier:
                keyid:2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/2C8F79E76852475DDED25004F5D935390FAB63C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8F79E76852475DDED25004F5D935390FAB63C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/34352e362e3139362e302f32342d3234203d3e20323636353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:b1:7a:21:cd:08:6c:77:a9:17:39:f3:53:d7:b6:1e:97:50:
         39:d3:16:77:8b:47:a2:3c:b3:85:49:c8:50:38:b7:ca:58:2b:
         64:c4:18:62:2d:e0:84:cd:f3:3b:b1:c2:87:c2:3b:18:6e:8a:
         c2:fe:87:d3:4e:ef:88:e5:30:31:a0:bf:4f:37:d3:9b:52:4c:
         64:7c:d2:a5:fd:cb:5b:d5:2f:bb:5b:20:a8:4b:bd:77:be:bd:
         e0:87:c3:9b:de:0a:41:18:08:10:d1:d2:e8:11:50:7c:03:f6:
         98:2c:d1:5d:bb:52:e6:d3:f7:da:06:96:15:20:1e:13:01:09:
         79:30:ba:f7:0b:90:b7:d4:a5:45:3e:ab:46:bc:66:37:79:d4:
         8b:7b:01:3e:82:5c:85:98:89:74:51:7d:37:af:94:a2:17:9c:
         dc:8b:00:fd:06:f6:ff:06:9d:4f:39:31:2a:6d:d8:36:d6:4f:
         b1:c8:8c:e6:02:dc:cf:ce:2f:42:74:90:26:5a:bc:e5:7e:b2:
         d1:e0:af:55:ae:3e:76:2e:20:fb:e8:4d:46:e0:45:d6:07:6b:
         f2:2f:c2:d9:3f:f9:ee:90:12:08:d2:4d:d1:ec:3a:26:1d:a8:
         f8:57:c1:1c:b7:dd:ea:23:fc:96:46:25:ba:d4:7b:9d:1b:0e:
         54:61:42:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org