Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32322d3234203d3e20323731343337.roa
File:                     34352e3232352e38302e302f32322d3234203d3e20323731343337.roa (raw, json)
Hash identifier:          wTiA0GAPYAF4BLwTHTQtGbRtVGNuhct+7D+8N0FJe9w=
Subject key identifier:   0B:DC:A1:D9:82:85:85:7A:B2:8A:41:23:43:8B:DC:C6:29:AB:5F:1D
Certificate issuer:       /CN=6F63D81A17E08120A679427E9F41DB2824A5A256
Certificate serial:       4E414F43C59A005E6E43462292EE1DACAC3B7547
Authority key identifier: 6F:63:D8:1A:17:E0:81:20:A6:79:42:7E:9F:41:DB:28:24:A5:A2:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F63D81A17E08120A679427E9F41DB2824A5A256.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32322d3234203d3e20323731343337.roa
Signing time:             Fri 01 Mar 2024 13:18:13 +0000
ROA not before:           Fri 01 Mar 2024 13:13:13 +0000
ROA not after:            Fri 28 Feb 2025 13:18:13 +0000
asID:                     271437
IP address blocks:        45.225.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:41:4f:43:c5:9a:00:5e:6e:43:46:22:92:ee:1d:ac:ac:3b:75:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F63D81A17E08120A679427E9F41DB2824A5A256
        Validity
            Not Before: Mar  1 13:13:13 2024 GMT
            Not After : Feb 28 13:18:13 2025 GMT
        Subject: CN=0BDCA1D98285857AB28A4123438BDCC629AB5F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:74:95:da:d4:da:18:70:f7:88:84:91:e9:76:
                    1f:32:a3:1d:c9:b0:c4:b2:b5:8b:c0:b2:75:e5:a7:
                    eb:c7:db:a5:06:3e:19:ec:e6:51:85:32:ed:84:59:
                    4f:4d:67:6d:cd:4c:49:66:11:20:e8:3f:cd:bf:ee:
                    96:52:0b:71:5d:5a:c9:f5:c0:07:6b:50:a6:f1:30:
                    73:0f:a2:82:ab:d6:90:83:3f:b0:99:cf:70:f1:99:
                    90:38:85:05:4f:9f:52:c5:af:a1:c2:a2:ad:c8:0e:
                    f4:f1:90:54:09:a1:20:ae:80:c2:96:80:ef:8d:82:
                    30:e5:27:f9:d6:d7:3f:6a:75:f0:e1:3a:58:f8:48:
                    99:d3:5c:35:8c:8c:25:de:07:52:76:55:0f:2a:24:
                    87:0f:af:89:03:98:3e:66:82:8f:db:de:ef:b4:ea:
                    c6:29:ba:97:9a:91:46:47:f4:2e:bf:58:80:50:2b:
                    07:fd:7a:f2:6f:10:8f:d8:e3:f4:32:21:6c:47:eb:
                    fb:ff:a1:eb:fb:35:f1:42:0e:c8:ff:dd:0d:19:b0:
                    cc:0d:bd:41:01:c6:d5:07:31:29:6d:a8:37:43:3d:
                    eb:f2:03:95:9a:ef:13:62:32:13:b9:6c:ac:30:5c:
                    bb:05:1c:c0:ca:0e:12:c0:98:ae:15:47:b7:7a:e9:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DC:A1:D9:82:85:85:7A:B2:8A:41:23:43:8B:DC:C6:29:AB:5F:1D
            X509v3 Authority Key Identifier:
                keyid:6F:63:D8:1A:17:E0:81:20:A6:79:42:7E:9F:41:DB:28:24:A5:A2:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/6F63D81A17E08120A679427E9F41DB2824A5A256.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F63D81A17E08120A679427E9F41DB2824A5A256.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32322d3234203d3e20323731343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:5a:f7:23:23:6d:cf:be:e7:ad:65:87:51:b0:42:d7:86:2b:
         ee:56:4f:54:60:c4:4b:7b:5b:3a:d3:2b:ab:b6:52:8a:79:69:
         82:10:3e:d8:30:6e:36:d7:d5:b1:08:59:d8:f9:48:56:be:67:
         0d:e2:68:eb:b4:9e:c4:ab:07:28:f0:53:01:48:90:53:af:0c:
         e7:2f:c8:d6:28:5d:11:87:f9:be:00:f9:4a:72:14:8f:82:7c:
         62:73:a0:8e:b4:fd:1e:fb:6b:6d:42:4d:ed:8f:cf:d6:54:ad:
         bc:a7:ff:f5:5c:2e:69:c5:f0:4a:d4:d9:65:bb:fd:89:42:d2:
         c5:45:3b:ec:6f:3b:0e:a0:fe:fe:80:dd:2f:07:ac:39:0f:96:
         cd:0d:77:ea:cf:30:e7:35:e3:82:57:d0:c8:65:9d:82:61:31:
         b4:98:26:bd:0e:c5:2f:62:b3:43:e2:2b:e4:90:f0:c0:98:93:
         9e:17:9b:15:c5:c5:4a:9e:3d:6c:a3:c3:ac:e5:c0:2e:e9:c9:
         25:dc:c9:ea:5c:20:a4:00:d3:d5:76:fd:5d:90:73:80:a7:b2:
         f7:30:5e:a9:6a:e7:b1:d3:a1:66:9f:93:f3:0c:41:21:56:42:
         7f:c1:40:33:39:22:92:96:cd:5f:4e:93:4e:16:ca:fa:2a:c5:
         0d:c0:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org