Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32332d3233203d3e20323636393635.roa
File:                     34352e3232362e36302e302f32332d3233203d3e20323636393635.roa (raw, json)
Hash identifier:          psegOR/8vPWXGphH8wcYPWyEj5ddai4Txcaeqv7+Y0Q=
Subject key identifier:   FB:DA:AF:4B:B8:00:DE:6D:7B:6D:87:3F:0A:6F:1C:E2:54:7E:97:08
Certificate issuer:       /CN=6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7
Certificate serial:       0BA20144E2E44188734DB3C492CF285AA84200D7
Authority key identifier: 6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32332d3233203d3e20323636393635.roa
Signing time:             Fri 22 Mar 2024 17:00:00 +0000
ROA not before:           Fri 22 Mar 2024 16:55:00 +0000
ROA not after:            Sat 22 Mar 2025 17:00:00 +0000
asID:                     266965
IP address blocks:        45.226.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a2:01:44:e2:e4:41:88:73:4d:b3:c4:92:cf:28:5a:a8:42:00:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7
        Validity
            Not Before: Mar 22 16:55:00 2024 GMT
            Not After : Mar 22 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:87:0f:22:7f:64:3d:e4:8e:ee:5b:b0:93:
                    ba:cb:93:1f:27:2d:81:88:ff:0c:fd:92:fb:35:5d:
                    2d:62:89:74:db:94:25:77:7b:84:3a:18:18:82:3d:
                    cd:76:de:f7:8f:9b:e0:c2:a9:d7:73:93:0a:7f:22:
                    c6:09:e6:d8:9a:eb:a7:23:76:e8:0f:ed:a2:93:0e:
                    04:21:7a:6b:aa:93:ec:7d:98:01:45:3c:52:6e:f8:
                    6c:1d:8c:2e:6c:92:9c:06:01:c4:81:27:1c:59:10:
                    8a:37:c7:f3:b5:14:06:04:96:d6:c7:e0:40:73:00:
                    27:bd:21:14:6c:ff:a8:20:38:b5:4b:6b:ce:31:3d:
                    e1:ed:8d:80:58:20:22:78:ed:f9:c7:cd:cc:c5:56:
                    fc:95:84:b3:9b:7f:e1:45:f9:94:a2:05:53:d6:7e:
                    c5:d2:ee:60:e6:95:a5:39:c0:8c:f9:53:a9:80:61:
                    ff:fc:e8:d6:5e:03:68:61:7f:bb:a0:96:d0:be:73:
                    3b:ef:64:8d:01:b4:52:2c:42:50:e4:da:bb:f2:5d:
                    ec:26:73:16:15:af:9f:ac:aa:53:5d:8e:bf:81:3f:
                    f0:f2:cc:0d:da:b8:92:fe:84:be:cb:da:b0:22:2a:
                    e5:e8:82:86:5a:31:a7:ea:1d:45:c9:fe:86:51:0f:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DA:AF:4B:B8:00:DE:6D:7B:6D:87:3F:0A:6F:1C:E2:54:7E:97:08
            X509v3 Authority Key Identifier:
                keyid:6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32332d3233203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:e1:a3:2d:cb:83:d3:ce:b6:b3:4f:f2:c0:d1:35:3f:2b:4c:
         6f:b9:c9:ef:98:b4:a7:7f:af:a3:90:c3:43:c7:f1:1e:95:db:
         66:ef:6e:06:ea:60:27:45:20:b5:05:40:17:74:22:c4:8b:b9:
         23:01:b5:43:1a:e4:90:ae:2f:07:87:d1:66:45:f8:73:d1:fb:
         58:5d:0a:fc:1b:fc:ab:e6:2b:5e:c6:04:fe:db:bc:f9:02:70:
         6a:4f:9f:a1:44:fb:84:42:82:41:9d:43:f7:c2:a8:fb:be:c9:
         fc:20:be:63:d3:9e:6a:84:82:71:8e:41:a1:ec:ac:d7:21:14:
         35:d5:49:59:01:dc:d0:3a:e7:92:a2:6d:c6:b3:8b:26:3c:28:
         fe:8c:34:5d:4f:f1:4c:03:23:df:4a:cb:0e:cb:c2:74:de:a3:
         0a:16:aa:35:8c:1c:94:3b:ab:e3:55:5b:b9:cb:0d:c6:80:36:
         7d:66:a5:c4:66:85:28:31:05:b5:5c:cb:03:99:16:8e:2f:c5:
         fd:a9:c9:f0:55:e5:1b:7b:bd:f6:67:b5:57:7e:ce:0e:01:c6:
         5e:72:a1:15:09:ea:69:18:82:fd:18:f6:7d:68:d9:f8:23:d6:
         3c:ce:ec:2c:13:bb:c4:6c:c4:e2:f3:bb:54:56:4f:94:06:d5:
         54:79:13:43
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUC6IBROLkQYhzTbPEks8oWqhCANcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNENUY0RUJDMzMwN0I5NkVGNUVFRDY2QUMyNTM3RUNF
OTc3QzlCNzAeFw0yNDAzMjIxNjU1MDBaFw0yNTAzMjIxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkYyRjg3MEYyMjdGNjQzREU0
OEVFRTVCQjA5M0JBQ0I5MzFGMjcyRDgxODhGRjBDRkQ5MkZCMzU1RDJENjI4OTc0
REI5NDI1Nzc3Qjg0M0ExODE4ODIzRENENzZERUY3OEY5QkUwQzJBOUQ3NzM5MzBB
N0YyMkM2MDlFNkQ4OUFFQkE3MjM3NkU4MEZFREEyOTMwRTA0MjE3QTZCQUE5M0VD
N0Q5ODAxNDUzQzUyNkVGODZDMUQ4QzJFNkM5MjlDMDYwMUM0ODEyNzFDNTkxMDhB
MzdDN0YzQjUxNDA2MDQ5NkQ2QzdFMDQwNzMwMDI3QkQyMTE0NkNGRkE4MjAzOEI1
NEI2QkNFMzEzREUxRUQ4RDgwNTgyMDIyNzhFREY5QzdDRENDQzU1NkZDOTU4NEIz
OUI3RkUxNDVGOTk0QTIwNTUzRDY3RUM1RDJFRTYwRTY5NUE1MzlDMDhDRjk1M0E5
ODA2MUZGRkNFOEQ2NUUwMzY4NjE3RkJCQTA5NkQwQkU3MzNCRUY2NDhEMDFCNDUy
MkM0MjUwRTREQUJCRjI1REVDMjY3MzE2MTVBRjlGQUNBQTUzNUQ4RUJGODEzRkYw
RjJDQzBEREFCODkyRkU4NEJFQ0JEQUIwMjIyQUU1RTg4Mjg2NUEzMUE3RUExRDQ1
QzlGRTg2NTEwRjkxNzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvy+HDyJ/ZD3kju5bsJO6y5MfJy2BiP8M/ZL7NV0tYol025Qld3uE
OhgYgj3Ndt73j5vgwqnXc5MKfyLGCebYmuunI3boD+2ikw4EIXprqpPsfZgBRTxS
bvhsHYwubJKcBgHEgSccWRCKN8fztRQGBJbWx+BAcwAnvSEUbP+oIDi1S2vOMT3h
7Y2AWCAieO35x83MxVb8lYSzm3/hRfmUogVT1n7F0u5g5pWlOcCM+VOpgGH//OjW
XgNoYX+7oJbQvnM772SNAbRSLEJQ5Nq78l3sJnMWFa+frKpTXY6/gT/w8swN2riS
/oS+y9qwIirl6IKGWjGn6h1Fyf6GUQ+RcwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FPvar0u4AN5te22HPwpvHOJUfpcIMB8GA1UdIwQYMBaAFGzV9OvDMHuW717tZqwl
N+zpd8m3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZWQ1JLTHlwUW11U2l1
eWtRTVZhYzhFOWVBOEJRdTNVeGNEMW1yVjhxU2t4LzAvNkNENUY0RUJDMzMwN0I5
NkVGNUVFRDY2QUMyNTM3RUNFOTc3QzlCNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82Q0Q1RjRFQkMzMzA3Qjk2RUY1RUVENjZBQzI1MzdFQ0U5NzdD
OUI3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82VkNSS0x5cFFtdVNpdXlrUU1W
YWM4RTllQThCUXUzVXhjRDFtclY4cVNreC8wLzM0MzUyZTMyMzIzNjJlMzYzMDJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM5MzYzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3i
PDANBgkqhkiG9w0BAQsFAAOCAQEAi+GjLcuD0862s0/ywNE1PytMb7nJ75i0p3+v
o5DDQ8fxHpXbZu9uBupgJ0UgtQVAF3QixIu5IwG1QxrkkK4vB4fRZkX4c9H7WF0K
/Bv8q+YrXsYE/tu8+QJwak+foUT7hEKCQZ1D98Ko+77J/CC+Y9OeaoSCcY5Boeys
1yEUNdVJWQHc0DrnkqJtxrOLJjwo/ow0XU/xTAMj30rLDsvCdN6jChaqNYwclDur
41VbucsNxoA2fWalxGaFKDEFtVzLA5kWji/F/anJ8FXlG3u99me1V37ODgHGXnKh
FQnqaRiC/Rj2fWjZ+CPWPM7sLBO7xGzE4vO7VFZPlAbVVHkTQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org