Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36312e302f32342d3234203d3e20323638303533.roa
File:                     34352e3136372e36312e302f32342d3234203d3e20323638303533.roa (raw, json)
Hash identifier:          YX1V5JfGDQ7WQJnE+FBKVl88ha4Y1TE6Kt79/RpSCNU=
Subject key identifier:   81:34:29:66:74:BC:5C:0B:83:EA:01:55:9B:54:26:44:15:B8:6C:8C
Certificate issuer:       /CN=0F1137C27E661ED0B131846131EE7EB20F7A2385
Certificate serial:       0B04D1731505ACA2EA53F27CFC7673F4FEA2FD5D
Authority key identifier: 0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36312e302f32342d3234203d3e20323638303533.roa
Signing time:             Fri 05 Apr 2024 00:11:03 +0000
ROA not before:           Fri 05 Apr 2024 00:06:03 +0000
ROA not after:            Fri 04 Apr 2025 00:11:03 +0000
asID:                     268053
IP address blocks:        45.167.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:04:d1:73:15:05:ac:a2:ea:53:f2:7c:fc:76:73:f4:fe:a2:fd:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1137C27E661ED0B131846131EE7EB20F7A2385
        Validity
            Not Before: Apr  5 00:06:03 2024 GMT
            Not After : Apr  4 00:11:03 2025 GMT
        Subject: CN=8134296674BC5C0B83EA01559B54264415B86C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:91:ce:f3:7e:07:64:10:ad:83:01:f6:01:
                    38:e4:17:22:63:17:e0:50:f3:0c:d3:44:5b:cf:e7:
                    9a:62:e1:43:96:bd:b5:05:a2:bb:b0:90:c8:65:ec:
                    77:0c:f8:24:1c:60:46:6e:c5:f1:83:e8:b7:38:84:
                    b7:98:a5:4f:2a:6e:39:02:c9:c0:fb:2f:69:40:80:
                    1d:1e:97:25:a9:1d:c3:61:f1:23:95:17:eb:ea:ff:
                    f2:be:f8:19:b8:e5:30:0f:6e:f4:28:ac:46:c7:8d:
                    40:07:38:3b:f7:5c:3a:d3:f9:cf:80:ab:47:0f:9d:
                    50:e2:06:7e:ed:9a:51:0d:8c:05:98:07:d8:38:d9:
                    12:8e:f6:5a:ba:77:cc:67:86:ff:3d:5d:2d:a7:b9:
                    77:30:37:6c:b5:61:7f:5b:61:ea:05:c5:b1:f6:ab:
                    af:68:14:95:74:40:ec:ca:df:4d:a5:d9:6e:d0:db:
                    50:67:22:ca:c7:2e:ab:eb:86:83:d2:c9:83:1f:b0:
                    c7:e2:34:ff:4e:68:ab:6a:47:1a:4a:4d:e2:9a:ee:
                    6e:76:de:4d:1f:f6:4c:98:02:e8:4a:d6:db:41:05:
                    c9:41:8e:d8:9b:dc:f5:cf:f1:85:ca:78:95:50:f6:
                    b6:da:b6:1d:40:b1:a0:ee:41:71:e1:7a:73:e4:25:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:29:66:74:BC:5C:0B:83:EA:01:55:9B:54:26:44:15:B8:6C:8C
            X509v3 Authority Key Identifier:
                keyid:0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36312e302f32342d3234203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:f6:a2:ee:48:13:e2:b4:b3:bb:1c:33:f6:aa:1c:b6:31:fe:
         0b:3d:9e:f1:2c:f0:49:6e:ae:b4:48:53:d9:e4:a8:20:23:3e:
         56:e8:18:41:07:69:7f:d5:cc:d6:82:96:a2:12:cf:cf:6c:ef:
         62:be:fd:b9:b4:fb:35:a8:1b:93:37:9e:58:b6:ee:68:e1:23:
         2a:90:fd:66:8d:af:c7:72:41:3b:e9:dc:e4:5f:57:8c:d8:bf:
         cc:50:15:03:ea:a5:4f:5d:57:36:1d:ab:72:2d:c9:53:49:c9:
         56:5f:aa:27:f5:f6:fc:6a:04:52:e4:53:6a:69:a7:43:e9:ba:
         a6:ce:be:7c:1e:93:4b:db:c1:e4:e7:b1:e5:88:31:3a:36:83:
         74:fa:19:d7:20:80:01:5c:88:c0:57:fd:5d:dd:5b:df:b3:3d:
         f8:37:b9:e5:1f:5c:72:56:90:d3:56:c4:55:51:c2:b9:16:f3:
         08:13:e8:6e:2b:02:29:4e:2e:08:56:91:ba:a8:98:45:40:9a:
         99:7f:bc:55:79:14:cc:fa:35:61:a4:dc:cc:18:c7:94:76:a3:
         0e:91:e3:ca:59:0f:95:9f:81:12:57:99:99:09:23:6e:41:18:
         8a:26:d4:70:55:2d:4d:bb:f3:4b:71:62:30:bb:65:2a:ef:fe:
         01:f1:60:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:22:24 2024 by rpki-client on console-fra.rpki-client.org