Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133322e302f32332d3233203d3e20323637363634.roa
File:                     34352e37312e3133322e302f32332d3233203d3e20323637363634.roa (raw, json)
Hash identifier:          ymQ9AzZOLpflexRbka+CVuIdyTO+Z6SdJ7A1camoOUw=
Subject key identifier:   66:41:F7:0A:4E:89:BF:E2:8F:09:30:6A:BD:6E:B5:83:ED:01:44:24
Certificate issuer:       /CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
Certificate serial:       615CD9FC8617F1716218C4119656EB61096DB651
Authority key identifier: 6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133322e302f32332d3233203d3e20323637363634.roa
Signing time:             Tue 28 Mar 2023 14:38:10 +0000
ROA not before:           Tue 28 Mar 2023 14:33:10 +0000
ROA not after:            Tue 26 Mar 2024 14:38:10 +0000
asID:                     267664
IP address blocks:        45.71.132.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5c:d9:fc:86:17:f1:71:62:18:c4:11:96:56:eb:61:09:6d:b6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
        Validity
            Not Before: Mar 28 14:33:10 2023 GMT
            Not After : Mar 26 14:38:10 2024 GMT
        Subject: CN=6641F70A4E89BFE28F09306ABD6EB583ED014424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:f8:11:ba:5d:f8:68:db:47:9d:a7:f8:4b:
                    89:03:c0:2c:74:60:33:9a:1c:dd:55:87:1b:db:ab:
                    00:ad:4c:f7:7a:84:09:8a:79:68:ec:23:80:b8:ff:
                    94:38:23:7a:1a:f6:fa:65:dc:a4:f3:b6:25:60:82:
                    b3:67:20:7f:ff:e5:f1:ae:a1:f6:00:15:db:06:8b:
                    65:5d:e4:38:f9:e9:40:c2:32:19:89:d0:70:30:ae:
                    48:10:a8:e9:70:e6:9e:e9:a3:aa:bc:c8:ce:e4:de:
                    a3:8f:f9:30:59:d5:ce:7e:02:cf:a3:a1:e4:23:0a:
                    67:42:76:97:a8:83:ad:e8:50:4b:f5:23:c1:68:40:
                    d0:4e:37:4f:b0:9f:29:62:be:d5:12:b1:c8:27:c6:
                    a5:2e:a5:4c:8a:a4:9b:56:77:6e:69:cb:ee:03:25:
                    c7:fe:40:b4:ec:35:df:3a:5e:88:37:78:76:93:69:
                    66:8a:bb:53:9c:29:51:18:76:f2:38:5d:91:dc:c2:
                    84:cc:56:02:26:9f:b4:b8:6e:c2:32:44:07:5a:95:
                    81:b8:29:d5:20:05:27:42:1c:07:00:9a:f8:35:70:
                    dd:3f:b8:e2:8a:ad:a5:c7:37:0d:56:80:49:36:5f:
                    14:16:ac:05:c8:80:a4:31:83:cd:f2:0f:54:15:93:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:41:F7:0A:4E:89:BF:E2:8F:09:30:6A:BD:6E:B5:83:ED:01:44:24
            X509v3 Authority Key Identifier:
                keyid:6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133322e302f32332d3233203d3e20323637363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:40:da:26:c7:fc:a2:af:fb:d3:09:81:2d:31:7c:90:00:ac:
         e3:b8:f8:58:19:e1:e8:57:3a:1a:8e:dd:38:ca:cb:86:7b:22:
         53:ef:ba:a6:2d:1c:68:7f:84:e1:10:93:aa:dc:30:31:be:26:
         ad:46:c6:4a:cf:21:11:03:10:39:31:e4:7d:fe:9b:c3:6b:e1:
         b7:72:56:7f:6b:bf:d0:bc:ab:1b:0b:a5:62:28:58:ec:e4:f4:
         38:8b:90:ed:06:9c:70:21:39:94:b0:c8:65:f5:a7:cc:82:3c:
         50:02:74:ca:32:73:2d:70:4e:82:27:4c:4a:7d:e8:7a:bb:20:
         2c:2c:48:e9:6a:ff:ec:c9:9a:47:b9:d8:04:cd:78:f6:3c:4d:
         13:71:49:6b:cc:84:6c:26:e1:fe:64:22:a4:1a:40:4d:f1:86:
         93:fa:99:d4:02:c6:62:b3:58:d5:4e:4b:07:56:fc:43:2e:db:
         67:64:f3:5c:e9:42:8b:0d:5f:53:1a:f2:15:82:f2:a4:81:b5:
         95:8b:2d:04:cd:ec:8a:6a:c8:fb:09:31:d6:4e:14:37:74:47:
         3f:80:d8:93:b2:6b:38:92:ff:6d:81:0e:d8:11:18:1a:90:14:
         95:06:bc:15:19:b7:f9:0c:3d:c8:a7:50:f5:8f:d7:9a:79:26:
         56:f6:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:53 2025 by rpki-client