Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3235302e302f32332d3233203d3e20323638323136.roa
File:                     34352e3233352e3235302e302f32332d3233203d3e20323638323136.roa (raw, json)
Hash identifier:          jJdXl3MuChIvWbyIaPE8n+pc6PX8zEkaZW8APJghxnc=
Subject key identifier:   0D:D1:48:E5:39:EB:84:86:C5:FD:01:39:02:45:E1:88:39:B7:94:3D
Certificate issuer:       /CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
Certificate serial:       0613A6DAE899762E32E34DD1B745376645DA41DD
Authority key identifier: 41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3235302e302f32332d3233203d3e20323638323136.roa
Signing time:             Wed 20 Mar 2024 23:39:35 +0000
ROA not before:           Wed 20 Mar 2024 23:34:35 +0000
ROA not after:            Wed 19 Mar 2025 23:39:35 +0000
asID:                     268216
IP address blocks:        45.235.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:13:a6:da:e8:99:76:2e:32:e3:4d:d1:b7:45:37:66:45:da:41:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
        Validity
            Not Before: Mar 20 23:34:35 2024 GMT
            Not After : Mar 19 23:39:35 2025 GMT
        Subject: CN=0DD148E539EB8486C5FD01390245E18839B7943D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:93:11:c2:c8:3c:85:4f:a4:47:82:d7:28:
                    28:ae:9b:d6:d9:55:a2:a5:b8:ac:b4:e5:c9:b0:36:
                    78:b4:af:83:47:ec:d3:89:f6:70:05:b2:f7:4a:34:
                    ce:82:97:84:28:3b:8d:45:cc:db:f4:f7:fb:3f:4d:
                    c4:5a:d1:52:05:07:c9:1e:4a:4c:54:ed:2c:e6:41:
                    f6:d2:24:57:09:3a:67:9d:53:48:a6:a3:cc:48:c3:
                    a3:d9:55:83:6f:78:64:af:36:cf:1e:ad:c1:91:86:
                    d4:b9:47:9a:83:6a:33:37:47:45:a0:99:a7:96:b7:
                    68:fb:3c:ca:d2:45:62:ac:37:49:8e:51:92:fc:53:
                    cc:c6:d7:99:bd:e5:0e:fa:a8:9f:e2:2e:74:23:5a:
                    c0:7f:6c:07:df:2e:04:3d:cb:a8:6c:26:8f:ec:87:
                    df:97:15:0e:e1:87:a0:37:57:9a:61:0e:db:22:08:
                    47:8d:2e:5a:79:21:db:b9:ee:d0:62:91:71:fe:01:
                    c5:42:33:6f:9f:c9:5e:9a:34:6b:6d:10:b1:c0:33:
                    bc:c6:7a:50:16:6b:0a:6e:17:81:08:ad:65:bb:24:
                    b3:69:70:f0:a9:02:af:d8:1d:5d:d9:88:7f:56:55:
                    8f:43:6f:0e:67:37:87:e8:b3:4d:9e:e1:51:0e:db:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D1:48:E5:39:EB:84:86:C5:FD:01:39:02:45:E1:88:39:B7:94:3D
            X509v3 Authority Key Identifier:
                keyid:41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3235302e302f32332d3233203d3e20323638323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:49:88:41:79:04:26:db:a1:f5:5f:b8:a1:05:7d:1d:35:66:
         8c:df:87:4d:e5:a6:a3:93:56:2f:e8:20:dd:17:88:61:f7:47:
         6d:55:57:4a:65:9f:b1:db:3d:9a:bd:92:39:8b:7a:44:7b:fa:
         9a:b6:9f:9f:43:70:12:e5:87:1b:2c:29:01:9c:6d:4f:c8:90:
         e5:8c:40:26:a8:31:90:8b:0d:7f:9c:8a:bc:6a:2f:92:b7:e1:
         f2:9a:ae:50:35:9c:96:76:db:5a:9f:49:58:08:c7:2e:e3:e7:
         ae:ba:f3:fb:f3:a9:db:fc:6d:26:b4:0e:6c:03:ed:04:75:b8:
         bd:ea:a1:db:6e:33:c7:b6:ad:97:70:eb:30:f2:4b:2a:d0:b8:
         8c:a0:3c:87:11:98:5f:58:52:09:7f:d4:cf:3a:81:5c:be:88:
         97:d6:99:f1:d4:56:ba:37:02:ac:5c:26:00:95:6b:04:46:69:
         66:7c:93:29:7e:f1:07:bc:73:09:7c:6e:04:90:52:82:74:a2:
         6a:0f:ec:9c:af:dc:15:59:9b:18:c9:24:d4:0f:32:ba:d1:e9:
         c2:7c:79:68:69:c1:1f:d6:45:a5:ec:c2:64:dc:56:a8:e1:96:
         b3:0b:fd:8e:e6:d7:22:97:47:9f:5f:e8:cc:bc:12:68:99:c1:
         78:b9:d6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org