Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3232203d3e20323636393635.roa
File:                     34352e3232362e36302e302f32322d3232203d3e20323636393635.roa (raw, json)
Hash identifier:          nGZNGwoPhSelBVvUOASEXo2cpsiWX0Jcq5Gk2OVjiYM=
Subject key identifier:   6E:13:4F:5A:2F:C8:EE:CB:96:C7:3B:EF:95:C2:93:56:CF:26:41:AC
Certificate issuer:       /CN=6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7
Certificate serial:       655FE5D5FC4600A376008BD21046E5EC54294140
Authority key identifier: 6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3232203d3e20323636393635.roa
Signing time:             Fri 22 Mar 2024 17:00:00 +0000
ROA not before:           Fri 22 Mar 2024 16:55:00 +0000
ROA not after:            Sat 22 Mar 2025 17:00:00 +0000
asID:                     266965
IP address blocks:        45.226.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5f:e5:d5:fc:46:00:a3:76:00:8b:d2:10:46:e5:ec:54:29:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7
        Validity
            Not Before: Mar 22 16:55:00 2024 GMT
            Not After : Mar 22 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:12:00:2b:ac:7c:7c:d4:44:f7:b3:8d:f4:44:
                    d8:b2:ac:3d:1c:c5:4e:ea:48:38:30:be:45:83:4c:
                    f4:59:b2:24:e6:22:88:c6:d2:64:1a:96:2a:1b:36:
                    4b:1f:56:72:08:a2:a6:30:e0:43:37:14:65:d9:e3:
                    42:dd:3d:66:b4:9b:66:08:7b:27:c9:0f:7d:42:bb:
                    31:8c:3b:16:ea:e3:dc:ac:c8:a7:0e:84:3c:c7:8f:
                    31:18:36:60:71:10:66:de:95:6a:fd:e5:81:a8:ce:
                    d5:69:49:9f:42:f3:8f:ec:4c:3d:1c:8d:93:d4:ea:
                    29:e7:7c:20:34:37:33:71:cc:06:2d:f6:b6:af:83:
                    f2:9b:4f:5e:bf:91:2a:d4:90:13:18:72:d7:2f:74:
                    9c:53:e3:1c:48:00:ad:25:3d:46:b1:2c:28:3d:38:
                    5a:3f:4e:6e:e5:28:3d:97:5c:94:38:95:db:f5:16:
                    30:ae:2c:45:24:73:b4:d1:76:81:51:ad:56:66:70:
                    40:d5:ee:f1:f7:49:3c:e3:be:62:0d:93:10:b5:50:
                    ac:24:f8:5f:39:96:40:e1:0c:9b:11:0d:81:b3:f0:
                    23:7e:6e:c9:56:c0:da:89:93:d2:e2:e7:0a:74:b9:
                    69:8e:4e:f1:a8:e1:b0:b7:30:d8:83:aa:9b:62:45:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:13:4F:5A:2F:C8:EE:CB:96:C7:3B:EF:95:C2:93:56:CF:26:41:AC
            X509v3 Authority Key Identifier:
                keyid:6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3232203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:b8:dc:41:12:15:22:af:2f:6d:69:e4:3d:c8:c0:37:c5:51:
         49:47:3d:b3:1a:cc:5d:99:7c:81:a5:25:db:e0:da:2d:07:67:
         e4:3f:3f:cf:b8:a1:21:f8:e4:21:32:2d:5b:3b:82:79:95:cd:
         cf:db:52:7f:30:11:5e:ca:c0:94:85:14:3d:3d:f6:43:5f:30:
         18:92:b1:0a:5c:3b:4c:70:11:1d:74:a5:c6:51:9f:e4:75:dd:
         c9:07:b4:ae:02:2e:27:c2:ea:09:4c:8f:b5:9d:be:25:95:b4:
         8f:4c:1c:79:0d:8b:f0:39:c6:7c:ed:20:23:b8:04:87:bf:36:
         9a:42:f3:59:53:9c:b7:f1:6a:fa:19:58:b5:c9:8b:95:6f:9d:
         26:78:8b:83:15:41:ba:f5:3d:cd:52:b5:7f:e7:59:5a:fb:7a:
         6c:33:35:d2:9b:c6:2d:5b:1d:0b:6a:e1:86:d2:50:33:b0:e4:
         e0:6f:86:7b:5e:03:79:e9:c5:3e:e4:44:bd:35:ff:2a:e0:5a:
         ca:ee:81:b3:72:59:b8:85:c5:01:52:2a:a2:bb:5c:32:66:31:
         5e:50:a2:e2:05:ca:e6:58:6a:38:6b:a5:f1:b0:2c:51:95:fe:
         8e:b5:02:f6:23:69:c0:6d:ed:ee:6b:d9:74:bf:3a:db:fe:9f:
         0b:31:9c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org