Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133332e302f32342d3330203d3e20323637363634.roa
File:                     34352e37312e3133332e302f32342d3330203d3e20323637363634.roa (raw, json)
Hash identifier:          YdsGzfdJs1WhNdaHc2gUnAnvrJnGC8hnu7/hgtLZGgM=
Subject key identifier:   5F:24:EA:2B:F3:5B:8F:05:44:5B:4A:BE:77:1E:4C:FF:91:CB:83:32
Certificate issuer:       /CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
Certificate serial:       417D6C3AE805150F72843A460084C1D6A8672C2A
Authority key identifier: 6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133332e302f32342d3330203d3e20323637363634.roa
Signing time:             Tue 03 Jan 2023 14:43:15 +0000
ROA not before:           Tue 03 Jan 2023 14:38:15 +0000
ROA not after:            Tue 02 Jan 2024 14:43:15 +0000
asID:                     267664
IP address blocks:        45.71.133.0/24 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7d:6c:3a:e8:05:15:0f:72:84:3a:46:00:84:c1:d6:a8:67:2c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
        Validity
            Not Before: Jan  3 14:38:15 2023 GMT
            Not After : Jan  2 14:43:15 2024 GMT
        Subject: CN=5F24EA2BF35B8F05445B4ABE771E4CFF91CB8332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:25:00:4f:ed:1a:2a:df:84:de:0b:18:0f:
                    aa:0e:67:cc:3e:ec:72:02:cb:36:3c:c5:a2:1c:c6:
                    ce:26:11:77:e0:70:8c:85:0d:86:79:e0:ce:1f:b8:
                    1b:d3:6b:2a:d2:05:2a:30:96:a1:b1:cc:31:28:93:
                    5b:91:03:38:79:c5:c3:18:b9:63:ba:9f:60:6c:a9:
                    53:4f:4d:91:57:38:71:db:44:99:6f:36:e7:bb:c5:
                    7d:84:2a:63:e7:88:69:9d:0e:b3:e2:37:aa:e2:66:
                    09:55:f2:66:f1:74:18:e7:9b:cf:d7:a0:81:d9:e9:
                    06:c3:33:39:13:98:d7:e6:53:70:7a:cd:92:22:32:
                    d2:b9:cd:61:a5:f7:9b:ec:71:10:54:e3:e0:83:c4:
                    25:3f:a9:6c:e8:f2:63:d8:54:89:8f:7e:77:02:2f:
                    bf:6a:95:50:c6:ca:fe:3e:67:74:74:88:eb:91:c4:
                    29:51:b1:64:09:47:e3:88:2b:df:73:25:09:68:22:
                    64:be:3f:eb:bd:5c:f3:9a:8a:01:bb:35:35:4d:fb:
                    a6:34:82:ed:50:0d:7a:4b:66:ce:84:5d:ba:77:67:
                    db:d9:44:5b:e4:4d:3a:26:05:ee:ac:73:40:e3:97:
                    fd:5d:d7:b3:d5:08:a8:54:5c:b1:c2:b1:cf:a5:8b:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:24:EA:2B:F3:5B:8F:05:44:5B:4A:BE:77:1E:4C:FF:91:CB:83:32
            X509v3 Authority Key Identifier:
                keyid:6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133332e302f32342d3330203d3e20323637363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d7:68:dd:18:c4:bb:41:31:15:cf:fe:2c:96:80:a4:72:9a:
         9b:8a:03:3b:84:23:ac:99:85:58:87:5f:18:cf:b3:ea:f3:0a:
         ab:95:f3:9d:18:86:61:5c:3d:82:79:06:0e:48:27:43:2c:8e:
         05:0d:d5:6f:31:24:f1:26:48:d3:30:61:84:63:4f:d6:0a:e3:
         47:8f:50:4a:d9:80:ce:a4:31:0f:c1:da:25:05:6f:2b:b3:25:
         94:58:4c:9b:8d:a4:be:a6:b4:6b:70:f0:ec:22:5f:b8:c2:0c:
         c7:42:18:09:3c:c1:5c:f5:12:46:19:e7:49:8e:b5:80:42:0e:
         6d:80:f3:d9:52:91:d9:21:40:88:2c:e5:a4:7a:d4:7e:18:f7:
         c9:d1:4c:42:53:cb:6d:56:5f:b7:e6:51:a3:a3:66:07:9e:05:
         bf:53:02:9a:de:6a:0d:d2:86:2d:4f:c7:73:8b:e8:04:87:76:
         35:9b:e3:e5:31:3a:0f:3b:a1:e1:b8:dc:9c:93:ad:02:da:b7:
         67:51:84:4d:cd:0d:8b:57:dc:f9:fc:9a:f8:66:a2:d6:5f:47:
         3b:8f:eb:2a:8d:c5:e8:46:a1:a7:9c:be:af:18:99:66:89:27:
         69:d4:fb:66:c7:60:70:1f:07:93:cb:b4:2b:4e:02:f6:87:8e:
         61:25:41:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org