Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36322e302f32342d3234203d3e20323636393635.roa
File:                     34352e3232362e36322e302f32342d3234203d3e20323636393635.roa (raw, json)
Hash identifier:          cS3MigfW6PeRgzpJAh6BqxCZbNrKrz7reJEQO2KTb0U=
Subject key identifier:   98:B0:81:F3:C6:4B:8B:98:35:40:5A:46:D2:AD:1A:F7:45:03:47:8F
Certificate issuer:       /CN=6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7
Certificate serial:       75410379554A70EC90CE2D010D84B653628A7FDC
Authority key identifier: 6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36322e302f32342d3234203d3e20323636393635.roa
Signing time:             Fri 22 Mar 2024 17:00:00 +0000
ROA not before:           Fri 22 Mar 2024 16:55:00 +0000
ROA not after:            Sat 22 Mar 2025 17:00:00 +0000
asID:                     266965
IP address blocks:        45.226.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:41:03:79:55:4a:70:ec:90:ce:2d:01:0d:84:b6:53:62:8a:7f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7
        Validity
            Not Before: Mar 22 16:55:00 2024 GMT
            Not After : Mar 22 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:68:ec:f6:0f:e0:46:44:46:d5:22:58:a8:
                    ec:22:a8:f4:f1:4e:3e:fa:4a:8f:03:6a:cf:99:db:
                    2f:ef:d3:46:1b:47:a8:ea:40:8f:ad:a8:48:e7:55:
                    0c:0d:07:9e:b4:e9:b3:bb:8d:da:28:32:5d:b4:34:
                    91:e1:77:53:66:ef:d0:0a:e8:b7:ed:43:94:37:85:
                    55:56:14:4b:48:7d:3e:4f:6d:a4:fd:f1:51:38:c4:
                    2c:85:c1:f5:81:e6:48:d1:88:21:37:24:8e:1a:f4:
                    9d:ee:3b:fe:8d:59:dd:33:8a:d1:70:93:39:ef:a1:
                    3d:85:02:3b:64:ae:5c:50:ac:94:7a:ed:93:1d:f3:
                    7b:2f:94:53:3a:e5:06:82:b1:c7:27:6d:2c:b1:ef:
                    40:e1:b9:f1:ec:dd:40:28:3e:a8:04:7b:fc:cb:d1:
                    5b:02:73:fe:c6:6e:11:27:1a:1a:b1:1c:36:79:87:
                    8f:de:4b:54:6e:57:c2:e8:ec:fb:b9:13:c5:3d:1e:
                    66:11:15:73:47:57:0b:fe:0f:92:2f:58:b8:de:bb:
                    c0:22:b5:1f:41:a1:91:bc:fb:23:2c:63:01:02:ef:
                    93:d3:8b:e8:c8:72:ec:4e:3a:25:34:a0:4e:86:3b:
                    0f:96:a6:ce:41:8a:c1:d3:01:c4:03:8f:fa:9e:3d:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B0:81:F3:C6:4B:8B:98:35:40:5A:46:D2:AD:1A:F7:45:03:47:8F
            X509v3 Authority Key Identifier:
                keyid:6C:D5:F4:EB:C3:30:7B:96:EF:5E:ED:66:AC:25:37:EC:E9:77:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CD5F4EBC3307B96EF5EED66AC2537ECE977C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36322e302f32342d3234203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d1:13:75:41:3b:3a:9b:a3:5b:d5:b3:6a:f7:71:b6:63:fe:
         8f:83:24:12:21:99:22:52:c6:92:27:e3:62:9c:12:d4:42:02:
         63:b3:dd:9e:b7:2c:d1:ad:f4:18:89:1a:62:a1:f9:43:5c:a9:
         e7:e8:e6:b3:c5:70:c3:6f:6e:26:a8:0b:48:cb:5b:3e:13:69:
         19:e2:76:6c:93:c5:15:0a:21:08:be:e2:24:bb:6f:c7:bd:f0:
         15:dd:b9:35:ae:c8:29:a0:d4:f0:af:84:76:3a:0f:cf:c9:40:
         bd:11:65:db:52:2c:14:48:09:19:6f:06:ee:42:9c:19:38:ab:
         0e:a2:c6:4e:9a:4e:d8:c2:a7:a9:17:6b:41:ca:a4:e5:c7:89:
         d5:1a:e4:fa:79:09:04:bf:25:bd:d8:95:e6:57:89:1b:b4:4f:
         7d:12:33:82:6f:5a:64:a6:14:60:c1:19:d0:dd:d4:91:f1:0f:
         e7:47:1c:7d:35:99:ab:41:0d:07:a3:63:a7:ac:35:0d:d1:f6:
         b0:2c:98:2e:f5:69:e0:0c:34:c7:c1:78:cc:3b:11:be:76:b5:
         6c:9e:27:9b:25:4d:ee:5f:a4:2a:e4:ef:e2:51:2e:55:ba:60:
         c3:f6:0c:8e:84:d8:f7:32:dd:b2:e4:c9:73:55:33:be:83:eb:
         06:32:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org