Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36322e302f32342d3234203d3e20323638303533.roa
File:                     34352e3136372e36322e302f32342d3234203d3e20323638303533.roa (raw, json)
Hash identifier:          cgP5+jDDsSL+qTXYT+zV9M9HeDYdTvJULVeqysnTaTY=
Subject key identifier:   88:71:89:A0:65:ED:D7:3A:4C:24:E6:92:9B:0F:D4:6F:1D:7B:41:FE
Certificate issuer:       /CN=0F1137C27E661ED0B131846131EE7EB20F7A2385
Certificate serial:       02D461F6D682C3401A2D8D4663FF1AC07B9875FD
Authority key identifier: 0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36322e302f32342d3234203d3e20323638303533.roa
Signing time:             Fri 05 Apr 2024 00:11:04 +0000
ROA not before:           Fri 05 Apr 2024 00:06:04 +0000
ROA not after:            Fri 04 Apr 2025 00:11:04 +0000
asID:                     268053
IP address blocks:        45.167.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d4:61:f6:d6:82:c3:40:1a:2d:8d:46:63:ff:1a:c0:7b:98:75:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1137C27E661ED0B131846131EE7EB20F7A2385
        Validity
            Not Before: Apr  5 00:06:04 2024 GMT
            Not After : Apr  4 00:11:04 2025 GMT
        Subject: CN=887189A065EDD73A4C24E6929B0FD46F1D7B41FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:5e:74:a0:9b:59:d0:e2:8c:98:b6:ee:30:
                    26:fc:b7:36:f1:10:f4:2d:36:86:f4:24:cd:c6:e0:
                    1e:ea:a7:96:d4:c6:3e:47:cf:e4:43:f0:01:54:0f:
                    da:00:06:a5:de:c0:a5:1e:25:c4:5a:d3:87:db:60:
                    40:5b:2c:57:8a:00:78:52:fc:48:84:c6:1d:7d:5e:
                    90:9d:bf:c9:87:ad:68:fd:4d:22:ea:30:13:a8:e6:
                    3d:43:f6:be:51:e5:e7:77:df:4f:9e:f6:d4:a3:1f:
                    b0:50:94:aa:cb:40:42:4c:5f:2c:de:b0:a1:8c:25:
                    45:27:7c:91:03:43:d8:eb:b1:05:22:ee:4b:5f:28:
                    b3:23:00:2b:8f:9b:ef:b0:0c:de:e6:2d:ee:ab:4f:
                    6c:83:38:21:53:15:b9:5b:ba:b9:2e:70:29:3e:0f:
                    3d:87:53:9c:86:26:97:8d:7b:f4:f8:98:10:38:bf:
                    f7:69:ec:17:22:73:b5:bc:8a:92:f0:51:0a:08:b9:
                    c1:23:c9:7c:3d:53:e3:ef:72:67:59:e1:dc:66:7b:
                    e6:c1:05:b1:1a:b9:95:9f:c0:a2:ad:f7:8b:dd:1b:
                    27:24:29:4e:65:c4:56:f1:ed:49:88:a8:8d:0c:66:
                    38:1a:ad:4a:17:d8:e2:71:4b:d1:31:df:03:76:89:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:71:89:A0:65:ED:D7:3A:4C:24:E6:92:9B:0F:D4:6F:1D:7B:41:FE
            X509v3 Authority Key Identifier:
                keyid:0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36322e302f32342d3234203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:bb:c1:2c:9c:b6:36:1d:5e:ea:40:4c:34:03:77:da:65:f5:
         3d:40:6e:64:37:85:4d:7a:dc:dc:b3:83:a9:5e:ff:ca:c2:ab:
         3b:85:a1:a4:ea:31:81:fe:ce:85:3f:19:77:ff:dd:33:64:82:
         f2:30:22:8b:6f:64:07:df:cf:3b:af:0e:c7:c1:ef:44:e7:ae:
         9d:d7:65:ca:b7:cd:7f:75:51:21:79:e7:e8:c3:a6:fd:db:f1:
         2b:2d:d0:1e:2b:04:26:41:ae:de:c9:93:c3:31:f0:bf:fa:b3:
         71:90:e4:33:95:0d:ec:de:19:c8:a7:a3:91:be:55:66:e4:5d:
         1b:8c:2c:70:3b:3a:b5:1c:4d:f3:de:37:69:4d:36:57:c9:dd:
         80:de:ec:06:6b:31:7e:7f:75:1b:92:0c:3a:52:eb:99:29:e9:
         9f:c9:3c:3c:04:79:a0:ce:c8:c0:24:dd:1c:b0:77:54:22:8c:
         48:47:d4:f5:ea:d0:9d:14:15:33:b7:f0:c3:dd:6a:a5:08:23:
         2d:ae:5b:19:66:3e:1e:8a:fa:fd:24:7e:f7:cd:50:ad:46:5a:
         58:ff:29:a1:5b:8e:c3:42:49:16:ee:23:70:05:a6:38:37:c6:
         75:24:23:f4:1d:62:2d:6d:d8:32:cd:b2:f8:ef:5b:fb:37:29:
         40:11:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:22:25 2024 by rpki-client on console-fra.rpki-client.org