Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32322d3232203d3e20323637303936.roa
File:                     34352e3232392e32342e302f32322d3232203d3e20323637303936.roa (raw, json)
Hash identifier:          30fObaOYYDFMlqD+uO3BhoJH2JuVT+52YdwSVJJ1vFY=
Subject key identifier:   88:D6:18:7C:F3:7F:86:4F:AB:0E:CB:10:4C:DD:E4:3B:66:2D:DA:54
Certificate issuer:       /CN=636582609E674E63471883DB8D40527C9F7E57AD
Certificate serial:       61D90857AE17421FA17A1A3B34768D17B4F0687B
Authority key identifier: 63:65:82:60:9E:67:4E:63:47:18:83:DB:8D:40:52:7C:9F:7E:57:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636582609E674E63471883DB8D40527C9F7E57AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32322d3232203d3e20323637303936.roa
Signing time:             Tue 16 Apr 2024 11:46:49 +0000
ROA not before:           Tue 16 Apr 2024 11:41:49 +0000
ROA not after:            Tue 15 Apr 2025 11:46:49 +0000
asID:                     267096
IP address blocks:        45.229.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d9:08:57:ae:17:42:1f:a1:7a:1a:3b:34:76:8d:17:b4:f0:68:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636582609E674E63471883DB8D40527C9F7E57AD
        Validity
            Not Before: Apr 16 11:41:49 2024 GMT
            Not After : Apr 15 11:46:49 2025 GMT
        Subject: CN=88D6187CF37F864FAB0ECB104CDDE43B662DDA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:e6:83:64:b2:1b:db:9c:d4:49:ff:33:cd:
                    c0:ec:a6:ec:04:94:22:b0:fc:1d:4d:02:82:17:36:
                    78:37:51:12:0c:ae:e5:ae:ec:97:49:ab:6c:35:ef:
                    da:6d:6f:25:ea:00:6d:24:e6:f9:8f:e2:c2:f8:f4:
                    9c:8b:b1:ee:e2:df:e5:b8:90:2e:7a:82:43:95:a7:
                    e0:5c:40:66:e0:5f:f6:a4:24:e7:68:d8:7d:f2:ff:
                    df:c7:4f:45:0b:99:f3:a2:c6:c5:50:aa:6c:20:7d:
                    bf:59:1b:78:d9:b2:8e:c3:bb:aa:cb:a8:6e:e3:f4:
                    5e:5f:b7:40:8a:df:13:db:54:30:a5:bf:37:6f:5a:
                    93:40:e7:31:c0:28:be:41:2c:1d:1b:a5:de:e3:2d:
                    31:82:59:37:f0:4f:25:e4:c7:68:0d:7e:4f:89:87:
                    7c:1a:31:8b:52:fb:24:7d:02:60:85:81:8e:f1:8d:
                    9a:00:0e:43:d8:02:8a:fc:82:d0:01:fd:a9:5b:1e:
                    67:4d:49:da:55:63:53:22:87:82:2b:9b:9a:eb:67:
                    10:3c:94:35:78:92:8e:dd:03:2b:d6:59:fb:77:c7:
                    ee:7b:d4:97:4d:df:3b:cf:94:a0:f8:db:8d:22:e5:
                    83:a0:81:a4:29:5d:78:6a:2b:ce:6d:a0:67:e7:b6:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D6:18:7C:F3:7F:86:4F:AB:0E:CB:10:4C:DD:E4:3B:66:2D:DA:54
            X509v3 Authority Key Identifier:
                keyid:63:65:82:60:9E:67:4E:63:47:18:83:DB:8D:40:52:7C:9F:7E:57:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/636582609E674E63471883DB8D40527C9F7E57AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636582609E674E63471883DB8D40527C9F7E57AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32322d3232203d3e20323637303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:14:89:a9:17:be:d8:ef:89:f7:ce:c2:da:c1:e4:02:57:08:
         9f:3d:7b:66:9b:f8:51:be:cd:6f:5f:b3:b7:81:bd:e4:48:0a:
         7e:e8:8f:c3:42:92:0e:8d:be:b9:d8:49:cf:27:37:3c:64:48:
         1f:3c:82:8d:3f:f5:11:85:1b:4a:57:a0:f1:0d:82:0a:b7:d1:
         a4:8d:20:d5:d9:c1:53:c6:38:ac:f6:96:cb:65:3a:f6:9c:a6:
         90:48:f0:ea:bc:7b:5b:0f:f2:a3:05:c5:41:6c:98:10:b1:82:
         79:35:eb:08:3f:bb:b5:fe:e1:a3:de:90:4a:1c:e3:c3:a9:47:
         43:00:3d:8a:32:c6:7f:74:6f:32:e0:4c:9a:1f:fc:a8:4f:ed:
         5d:3b:db:1f:a7:83:55:8f:75:07:dd:4f:6f:0c:eb:7d:10:f3:
         c2:a9:23:23:14:bc:41:2a:56:2c:90:48:e1:dd:b0:c7:f0:0b:
         12:85:c0:4a:0e:a0:ce:db:96:51:3e:93:30:71:8f:d5:8b:bf:
         ee:f7:99:bb:e1:4e:78:89:26:69:22:08:83:55:64:6e:93:14:
         97:40:12:98:ef:d8:52:12:48:1e:8e:3e:7d:af:aa:2a:7c:0c:
         80:9a:b9:bd:56:ff:b9:7e:90:cc:9c:e4:3c:e2:a3:14:a6:b6:
         f0:a4:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org