Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32332d3233203d3e20323637303936.roa
File:                     34352e3232392e32342e302f32332d3233203d3e20323637303936.roa (raw, json)
Hash identifier:          n8u7l4sYCW+1Nf3XPdIOyjMG00IBecnTi3cYxF7aXxM=
Subject key identifier:   0A:DD:53:EC:96:3F:6F:F6:4A:A5:5C:04:99:20:62:01:F8:18:6C:C4
Certificate issuer:       /CN=636582609E674E63471883DB8D40527C9F7E57AD
Certificate serial:       483C6E6B8801EEBE2D7FC8EE2DECBD9C5885CC40
Authority key identifier: 63:65:82:60:9E:67:4E:63:47:18:83:DB:8D:40:52:7C:9F:7E:57:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636582609E674E63471883DB8D40527C9F7E57AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32332d3233203d3e20323637303936.roa
Signing time:             Tue 16 Apr 2024 11:46:55 +0000
ROA not before:           Tue 16 Apr 2024 11:41:55 +0000
ROA not after:            Tue 15 Apr 2025 11:46:55 +0000
asID:                     267096
IP address blocks:        45.229.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3c:6e:6b:88:01:ee:be:2d:7f:c8:ee:2d:ec:bd:9c:58:85:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636582609E674E63471883DB8D40527C9F7E57AD
        Validity
            Not Before: Apr 16 11:41:55 2024 GMT
            Not After : Apr 15 11:46:55 2025 GMT
        Subject: CN=0ADD53EC963F6FF64AA55C0499206201F8186CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:f7:7c:4e:95:bd:7c:e4:38:90:c8:85:cc:
                    f6:24:fc:2f:ac:f4:68:59:6a:88:55:43:8a:87:a0:
                    d1:f2:41:bd:02:6c:8c:84:f8:1e:00:83:1b:c4:8f:
                    a5:cd:8a:ef:fd:d4:dc:9f:00:c8:75:07:ec:24:0c:
                    59:a6:0a:5a:5c:dd:a5:ec:65:76:5c:a5:92:44:96:
                    a4:87:52:77:5f:80:d1:15:66:85:87:86:e8:b7:da:
                    af:b5:3c:09:d4:5a:e9:62:98:b7:9c:f5:4f:bf:db:
                    27:2f:2a:b8:dd:80:f1:11:9d:be:be:d6:57:77:0d:
                    e4:15:76:5d:aa:35:49:bf:5c:4b:27:3d:49:9b:56:
                    2b:b4:f6:17:b6:ab:b6:cf:5d:02:87:87:a7:02:57:
                    26:aa:77:5e:2c:d9:17:06:2b:74:52:ee:fb:4f:cc:
                    59:0d:6a:a0:8d:5e:a1:f0:6d:4c:29:79:de:66:fd:
                    7d:2d:6c:83:c5:d9:6a:bc:33:89:64:9f:6a:99:33:
                    be:50:ef:5b:a6:98:d4:85:03:32:2d:00:59:11:50:
                    4f:5e:09:07:02:2b:c3:4f:29:6b:1f:2d:85:1a:f9:
                    a4:49:84:81:9d:a3:18:5f:f3:96:3f:4a:45:49:54:
                    f1:ea:5c:eb:77:92:f9:d8:1b:94:0d:6c:de:ce:40:
                    5c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DD:53:EC:96:3F:6F:F6:4A:A5:5C:04:99:20:62:01:F8:18:6C:C4
            X509v3 Authority Key Identifier:
                keyid:63:65:82:60:9E:67:4E:63:47:18:83:DB:8D:40:52:7C:9F:7E:57:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/636582609E674E63471883DB8D40527C9F7E57AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636582609E674E63471883DB8D40527C9F7E57AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32332d3233203d3e20323637303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:49:b0:9e:00:cb:3b:36:e0:b5:99:a7:fd:29:bc:b1:b7:b3:
         32:71:54:98:5c:b0:f0:58:ea:00:01:5e:4b:85:43:da:8d:3b:
         11:52:c2:5c:f8:1c:b1:bb:4a:94:51:a0:48:76:7d:7b:fd:ee:
         e6:4d:dc:b7:89:0f:57:d8:30:69:5f:fe:ac:34:8d:fd:44:6f:
         67:47:ac:eb:42:46:ef:27:5d:95:06:b5:b2:7e:bb:08:40:ee:
         2e:19:1c:21:bd:4a:21:14:81:6f:36:c6:e4:a4:fa:93:24:6d:
         10:6c:d7:70:17:92:26:6e:11:68:df:c9:04:36:d0:3c:4a:67:
         ad:40:91:2a:2f:3b:cc:31:2f:4e:85:c2:ef:38:0c:59:b6:ce:
         d0:ed:24:19:66:fa:df:e1:c1:39:5e:52:19:f2:03:82:d7:8a:
         a8:1f:33:56:8d:d0:c2:3c:09:86:a6:16:31:ae:51:40:fc:25:
         ba:21:c9:f7:d2:19:c4:a7:ef:78:33:98:e1:22:8e:c0:e0:f0:
         90:d9:9d:48:1d:e1:ec:bd:f3:a1:43:32:cf:1f:8e:93:cb:47:
         6d:2a:c6:a9:dd:e1:9d:bf:86:67:28:89:91:7d:74:a9:10:96:
         e4:43:0d:e0:50:3c:4e:1c:b1:c6:96:ab:36:ba:59:0b:de:f7:
         fb:44:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org