Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133342e302f32332d3233203d3e20323637363634.roa
File:                     34352e37312e3133342e302f32332d3233203d3e20323637363634.roa (raw, json)
Hash identifier:          LwK4ShutY1uwHvjez2+LsVZdMMwP7ONuBfRzqwWdJb8=
Subject key identifier:   E2:DA:7D:90:5A:96:0A:1F:82:AE:5F:EA:3A:7A:D5:38:61:91:79:25
Certificate issuer:       /CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
Certificate serial:       15C485C798808C95B9DBA57D66AE5EE13C8E7913
Authority key identifier: 6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133342e302f32332d3233203d3e20323637363634.roa
Signing time:             Tue 28 Mar 2023 14:38:20 +0000
ROA not before:           Tue 28 Mar 2023 14:33:20 +0000
ROA not after:            Tue 26 Mar 2024 14:38:20 +0000
asID:                     267664
IP address blocks:        45.71.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c4:85:c7:98:80:8c:95:b9:db:a5:7d:66:ae:5e:e1:3c:8e:79:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
        Validity
            Not Before: Mar 28 14:33:20 2023 GMT
            Not After : Mar 26 14:38:20 2024 GMT
        Subject: CN=E2DA7D905A960A1F82AE5FEA3A7AD53861917925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fb:bc:c1:7c:61:c1:de:8b:40:f3:6d:87:ac:
                    74:1b:80:78:8a:a0:49:6a:e8:6a:58:ed:92:34:e0:
                    d5:3b:27:2a:23:2e:05:76:12:13:6e:5a:e7:6e:af:
                    01:cb:f2:21:db:83:dd:86:fe:b5:0d:30:bb:d9:b8:
                    10:9a:4b:d7:70:d6:ec:a3:4e:66:a7:fe:8c:c3:df:
                    fd:f1:6e:c5:ca:ff:60:e8:10:9e:df:32:38:69:25:
                    b3:e5:5b:38:bb:5c:c5:ec:72:5b:8e:c3:e4:ae:27:
                    76:fd:cf:a4:aa:8e:50:60:31:66:54:7e:bc:69:f7:
                    4f:a1:29:27:81:2c:b5:54:88:8b:1f:50:f2:5e:e8:
                    cd:98:92:78:4b:41:34:90:d6:0c:44:49:f4:f7:df:
                    f0:44:79:1f:6e:a2:17:fc:c0:ab:48:1b:18:d0:e7:
                    56:5e:0b:eb:b0:81:49:c9:9a:71:b9:1f:2d:e8:07:
                    64:81:96:34:6d:cd:07:b6:d4:1a:17:e0:fa:cb:ed:
                    00:97:bd:ae:77:42:39:ad:b3:05:e4:e2:a4:d6:f2:
                    e6:3d:55:81:9b:bc:75:24:b6:2f:60:44:3f:f6:0d:
                    a3:ec:88:76:e0:32:db:21:a2:6f:2e:7c:80:14:29:
                    cf:23:30:88:a4:98:a5:00:eb:9a:aa:64:b9:76:9c:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DA:7D:90:5A:96:0A:1F:82:AE:5F:EA:3A:7A:D5:38:61:91:79:25
            X509v3 Authority Key Identifier:
                keyid:6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133342e302f32332d3233203d3e20323637363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:be:7e:37:1e:6e:2d:cd:b4:70:ad:a8:76:c4:4d:9b:22:d2:
         76:a8:c1:27:60:17:75:b8:1e:0b:4f:a2:e8:f2:20:ef:bd:75:
         69:15:8b:e1:b9:d6:5f:1c:a0:22:17:9d:b5:b2:77:16:95:09:
         af:37:2a:0d:43:32:74:f3:3e:7f:79:10:15:9e:e7:63:45:b7:
         cc:14:1f:45:b3:28:ad:11:c4:fd:fc:1b:cc:11:47:83:e1:a3:
         5e:21:f7:8b:b4:27:0c:3d:d4:28:cb:2f:fd:71:53:9d:11:a4:
         d8:71:1b:07:63:6f:7a:4e:4a:fa:ee:31:6c:ed:c4:c3:9c:22:
         79:0c:e2:fd:d2:89:98:6e:af:16:6f:64:9b:6f:72:d5:83:a7:
         a8:81:ca:fd:76:40:ea:51:b4:31:c8:94:3e:13:d0:74:5b:77:
         a3:2a:14:c3:45:f9:35:70:e4:8e:e7:dc:74:c3:67:e1:e6:9b:
         5c:f5:6c:96:68:a5:0b:3e:3e:55:5d:b6:63:62:93:f2:7b:14:
         fe:3b:46:6c:d0:ba:2f:18:52:1f:11:a2:5e:42:e1:a8:b3:20:
         c1:44:5c:9b:b2:42:b4:0a:58:ad:34:c4:5f:7c:87:7b:5e:95:
         7f:ac:32:37:7b:71:4f:ac:da:5c:41:79:22:fc:86:d9:31:af:
         f1:e2:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org