Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36332e302f32342d3234203d3e20323638303533.roa
File:                     34352e3136372e36332e302f32342d3234203d3e20323638303533.roa (raw, json)
Hash identifier:          bv2QUhmubpv9duKA9/nrShBqTKph6mkA3DIBtigI91I=
Subject key identifier:   97:D8:D5:6A:D6:53:71:37:4E:29:7C:50:EE:7A:C6:B4:B5:B2:A4:C4
Certificate issuer:       /CN=0F1137C27E661ED0B131846131EE7EB20F7A2385
Certificate serial:       4845B03FC6E82DA76484B3402B48C6FA9FD431A1
Authority key identifier: 0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36332e302f32342d3234203d3e20323638303533.roa
Signing time:             Fri 05 Apr 2024 00:11:04 +0000
ROA not before:           Fri 05 Apr 2024 00:06:04 +0000
ROA not after:            Fri 04 Apr 2025 00:11:04 +0000
asID:                     268053
IP address blocks:        45.167.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:45:b0:3f:c6:e8:2d:a7:64:84:b3:40:2b:48:c6:fa:9f:d4:31:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1137C27E661ED0B131846131EE7EB20F7A2385
        Validity
            Not Before: Apr  5 00:06:04 2024 GMT
            Not After : Apr  4 00:11:04 2025 GMT
        Subject: CN=97D8D56AD65371374E297C50EE7AC6B4B5B2A4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:a6:7f:b1:1e:95:27:05:ba:19:0b:4a:dc:
                    a9:4b:4f:d6:a5:26:37:55:db:96:a5:8f:ef:8e:37:
                    7b:06:8e:e3:8f:16:47:0a:2a:92:94:ee:51:c4:df:
                    53:db:96:71:01:5f:7d:7e:35:5e:83:55:3d:a0:f1:
                    85:34:72:71:a7:fb:77:c6:ac:a7:1a:c7:79:66:8e:
                    ea:d3:51:f2:e9:e4:82:fb:2a:33:1f:fb:64:7d:3b:
                    57:e1:d0:3b:ab:d5:45:a8:79:32:a6:35:43:b9:e0:
                    c2:e1:86:ea:e5:5c:2a:14:0e:db:82:83:0f:a1:82:
                    1c:65:16:d8:90:97:86:8f:33:ed:84:2c:c6:e6:45:
                    88:15:77:41:52:1d:58:e4:7c:d9:0f:9a:1d:9f:2f:
                    2e:f8:d1:96:d2:45:93:6c:15:8a:6b:23:e3:aa:d9:
                    86:70:c2:5e:72:99:a8:f4:e1:4a:22:ca:a2:fb:15:
                    45:32:19:89:44:95:9f:8a:9d:44:52:ff:13:60:69:
                    7b:70:f7:12:1b:4d:33:ee:43:9c:f1:bc:e4:36:86:
                    b7:af:2f:c8:5e:c8:a5:dd:9b:26:81:6a:4f:6d:b6:
                    51:2f:57:ae:84:aa:f2:eb:c4:e4:ff:bf:8a:a6:b9:
                    92:27:e8:51:83:96:3d:cb:6c:92:05:88:06:94:a5:
                    4e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D8:D5:6A:D6:53:71:37:4E:29:7C:50:EE:7A:C6:B4:B5:B2:A4:C4
            X509v3 Authority Key Identifier:
                keyid:0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36332e302f32342d3234203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2d:c4:fe:0d:1b:69:27:da:f6:d8:48:76:13:c2:27:6a:2e:
         ff:33:8a:a2:1a:38:9f:b0:6b:55:92:a1:5f:1d:99:57:c2:60:
         01:3c:76:d9:c3:fc:e5:b2:cb:41:b2:1d:6c:e4:43:b8:ee:3a:
         12:37:fa:65:05:13:fa:54:3b:33:2a:6b:16:78:22:50:f7:1a:
         ee:d7:bc:03:f9:73:65:1a:42:ea:26:04:8e:1a:da:a9:c9:a4:
         00:68:79:69:f7:3f:6a:54:b0:d8:ed:58:56:8d:3b:97:16:ea:
         f8:32:49:55:e4:74:36:5e:c1:52:0d:07:67:ac:1c:50:a3:2e:
         0f:cd:26:f2:17:9a:97:0d:69:a7:c2:5a:b4:cd:93:93:09:c2:
         7a:fe:e1:61:38:ce:5f:94:9b:ce:7b:7b:5b:73:71:3a:a3:42:
         1e:c5:55:31:db:6c:8e:a8:35:57:34:0c:5a:17:5d:4e:a5:cb:
         b4:3d:48:8f:87:14:a0:57:86:89:78:ee:7d:56:44:ed:27:78:
         77:56:f5:0c:70:53:33:cd:e3:bf:a4:4c:ba:82:fb:2e:81:2f:
         07:be:17:6d:6b:49:75:be:82:ff:bf:79:a6:d1:d6:dd:85:a5:
         cd:41:b6:9e:2d:5a:2d:c1:ec:a9:37:8d:fa:22:3a:c7:f0:3d:
         ca:de:5a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:22:25 2024 by rpki-client on console-fra.rpki-client.org