Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133342e302f32342d3330203d3e20323637363634.roa
File:                     34352e37312e3133342e302f32342d3330203d3e20323637363634.roa (raw, json)
Hash identifier:          TnpJKFpL4YBNPgrknVBHnrdifrJ0JNM4Es2uTk4nwoA=
Subject key identifier:   1D:82:BA:B5:EF:56:9E:C2:6E:80:5B:60:E1:F5:52:96:BE:AF:94:CB
Certificate issuer:       /CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
Certificate serial:       4061977E044E65BFC2D02224392ED953DEAA8E2F
Authority key identifier: 6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133342e302f32342d3330203d3e20323637363634.roa
Signing time:             Tue 03 Jan 2023 14:42:30 +0000
ROA not before:           Tue 03 Jan 2023 14:37:30 +0000
ROA not after:            Tue 02 Jan 2024 14:42:30 +0000
asID:                     267664
IP address blocks:        45.71.134.0/24 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:61:97:7e:04:4e:65:bf:c2:d0:22:24:39:2e:d9:53:de:aa:8e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
        Validity
            Not Before: Jan  3 14:37:30 2023 GMT
            Not After : Jan  2 14:42:30 2024 GMT
        Subject: CN=1D82BAB5EF569EC26E805B60E1F55296BEAF94CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:4d:f7:dd:14:87:4c:0b:7a:0d:bc:a1:8f:
                    e4:13:92:b5:f5:61:2c:87:d1:f3:7f:b4:05:20:b4:
                    4b:d6:72:bc:d7:73:bf:df:79:e3:91:4d:2c:d2:59:
                    e9:72:90:42:da:31:e8:90:d7:e4:59:9c:96:d3:67:
                    08:6e:22:b2:50:1d:78:21:64:fc:40:e3:7d:03:09:
                    b8:0d:1b:b5:6d:ff:52:58:d2:77:9c:e4:e6:43:e8:
                    a9:26:b3:41:6b:4f:5a:80:21:4d:3b:e7:2f:a9:3c:
                    b9:d4:62:e0:93:a4:8b:b1:4f:1f:aa:19:33:e8:e4:
                    53:19:07:d0:10:c6:0a:90:0e:21:0f:cf:1f:a2:7f:
                    5d:ae:01:85:26:df:85:4e:48:51:f2:d5:d0:bc:c3:
                    4f:cc:3a:52:9e:c2:64:82:f2:98:21:d1:62:ea:c3:
                    46:4f:91:2c:75:4d:de:0d:25:b1:45:ef:fe:d9:08:
                    ea:08:3e:48:99:05:b6:95:ff:b6:a2:83:da:21:82:
                    5f:46:18:34:e2:9c:56:36:81:83:bc:e7:9f:6b:28:
                    3c:1b:27:3b:81:a1:3b:49:1d:89:14:77:52:b4:36:
                    17:e1:7e:78:20:0f:e7:32:2c:4b:9a:59:16:5f:23:
                    d4:7c:82:9c:c2:0d:8c:a0:d2:e3:af:3c:21:95:8b:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:82:BA:B5:EF:56:9E:C2:6E:80:5B:60:E1:F5:52:96:BE:AF:94:CB
            X509v3 Authority Key Identifier:
                keyid:6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133342e302f32342d3330203d3e20323637363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:1f:f9:84:ec:e4:0b:c9:1f:57:30:93:8b:e0:7f:95:38:bb:
         fa:69:78:e4:72:6d:f7:b5:5b:8b:7b:6c:2b:1b:49:67:d3:7c:
         23:2f:28:cd:82:4a:66:e9:ae:87:d9:b7:ce:8a:33:52:a7:8b:
         6b:3d:2e:b6:3a:80:d0:2e:6a:e4:da:c9:20:ef:da:12:74:08:
         af:95:a9:74:8d:56:6d:b7:52:88:c4:4d:7e:92:2d:b6:36:55:
         be:90:9b:d7:79:fc:c5:ce:0c:26:fd:d5:f7:d5:f1:4d:8e:55:
         e4:80:83:c6:80:76:99:d6:d2:0b:ef:cb:55:11:50:fe:06:23:
         c2:e5:39:ca:27:3b:b7:60:0e:c1:11:01:c6:46:5a:89:31:42:
         3d:35:ab:2c:53:3d:4a:c5:b5:06:05:47:af:2f:f0:54:28:ac:
         e9:6d:00:82:a4:ea:f2:dd:43:e0:88:02:1e:15:5d:c2:09:68:
         02:2f:8a:74:d1:0c:d0:09:b2:98:7a:25:7e:66:29:a9:e0:68:
         8f:70:ea:fd:b2:24:97:9e:48:54:47:e9:7b:8b:51:69:96:64:
         6a:3d:05:02:18:8d:cc:f3:28:6d:14:ec:2e:2e:5e:9e:87:5c:
         73:6c:8c:32:ba:ff:59:24:cc:bf:b5:3b:6a:dd:d3:1d:07:00:
         20:d2:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org