Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/0/34352e3233342e31312e302f32342d3234203d3e20323636323639.roa
File:                     34352e3233342e31312e302f32342d3234203d3e20323636323639.roa (raw, json)
Hash identifier:          O0hk/YEfsRhesYCnEu6FxyPPZG5XKVCDQAdmF5U73cA=
Subject key identifier:   CD:46:AC:37:2D:74:87:61:ED:99:7E:BB:92:BD:F0:3F:2C:92:39:51
Certificate issuer:       /CN=636412FBD9D29DFCC4665CD312A2163F6A148C82
Certificate serial:       6BA9C7A82172D70DBCDB026BB868710405271737
Authority key identifier: 63:64:12:FB:D9:D2:9D:FC:C4:66:5C:D3:12:A2:16:3F:6A:14:8C:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/636412FBD9D29DFCC4665CD312A2163F6A148C82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/0/34352e3233342e31312e302f32342d3234203d3e20323636323639.roa
Signing time:             Mon 15 Jan 2024 13:42:00 +0000
ROA not before:           Mon 15 Jan 2024 13:37:00 +0000
ROA not after:            Mon 13 Jan 2025 13:42:00 +0000
asID:                     266269
IP address blocks:        45.234.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a9:c7:a8:21:72:d7:0d:bc:db:02:6b:b8:68:71:04:05:27:17:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636412FBD9D29DFCC4665CD312A2163F6A148C82
        Validity
            Not Before: Jan 15 13:37:00 2024 GMT
            Not After : Jan 13 13:42:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:43:d0:98:90:60:17:ad:9d:29:5b:20:af:
                    95:0b:e5:ef:a6:86:d6:78:4f:3f:6d:ba:63:6b:23:
                    0e:52:95:f0:87:9f:0c:f5:22:ee:f0:51:f4:af:f1:
                    5f:da:ec:73:f3:ec:2a:a1:f2:8f:a1:80:d3:4f:46:
                    5c:16:30:04:47:1a:56:83:86:83:52:7a:67:ee:f7:
                    1e:2a:38:28:ea:d7:7a:e2:70:b1:e2:e0:e1:8a:2d:
                    5a:4c:36:bd:10:7e:7a:71:25:20:e9:a5:aa:f5:9a:
                    5b:ca:0f:fc:5d:5a:49:d7:04:ed:41:4f:b4:c4:04:
                    ca:b9:4a:e8:7e:53:20:8b:b1:51:6d:78:8b:cd:09:
                    01:02:6b:2d:f4:17:e6:5e:a6:c4:ff:3b:82:67:ea:
                    d9:43:51:e6:9c:9d:02:e3:15:af:91:e4:fb:ed:83:
                    9c:8b:48:9f:3f:40:67:6c:75:b2:f9:53:d0:73:8a:
                    de:66:fe:72:be:be:65:ae:b9:ba:30:53:ac:a1:ce:
                    5c:ba:3a:eb:96:cc:ae:5c:c8:a4:52:cb:bc:f9:ed:
                    0a:14:3a:76:eb:54:08:b1:5f:2b:5c:6d:7b:72:15:
                    6d:93:2d:3b:b5:6a:4b:db:e5:29:b4:01:84:2b:6c:
                    1a:56:f8:19:dc:57:29:dc:a6:9f:cb:c3:39:29:90:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:46:AC:37:2D:74:87:61:ED:99:7E:BB:92:BD:F0:3F:2C:92:39:51
            X509v3 Authority Key Identifier:
                keyid:63:64:12:FB:D9:D2:9D:FC:C4:66:5C:D3:12:A2:16:3F:6A:14:8C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/0/636412FBD9D29DFCC4665CD312A2163F6A148C82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/636412FBD9D29DFCC4665CD312A2163F6A148C82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97CnphQnCpLq1RBJqUeRtj5Lzwx1r8FFtimaUdtdyWZU/0/34352e3233342e31312e302f32342d3234203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:21:ba:bf:3b:7c:41:0a:d2:5b:e4:67:be:d7:b3:c0:da:4e:
         e5:50:20:d9:95:ea:a9:be:76:12:d6:c3:f8:24:8c:6c:e4:e4:
         c0:03:e6:bb:12:ca:bc:af:90:b2:f1:3e:b1:03:02:8d:54:b8:
         c6:df:a7:c7:a1:ce:b2:7a:ed:fd:d7:9d:38:d8:91:06:11:26:
         5e:4e:be:a7:fb:3d:ff:eb:39:56:9e:34:d6:0a:ed:b7:f6:c1:
         6e:e2:2b:43:57:ca:4a:da:f4:9d:98:56:34:e5:03:c9:18:cf:
         80:ac:b5:49:00:f5:6b:e4:75:fc:8f:fe:71:26:74:95:7d:47:
         4d:b4:6d:cb:7e:53:1a:5d:9a:70:9d:3a:b0:de:dc:a2:f5:e9:
         4b:72:38:92:3a:8a:17:d2:70:b0:ea:f2:70:28:ec:66:08:9d:
         80:a4:7c:82:ed:4f:04:36:b0:9a:a3:27:a1:3f:23:64:65:13:
         bd:34:93:5d:e5:6b:2f:e2:84:53:7b:f2:d9:14:03:1d:58:99:
         3a:2f:4c:d8:e8:bf:bd:60:43:e0:35:5b:7e:1a:fb:db:8b:f6:
         64:98:7b:d2:da:dc:f6:31:96:0a:e1:bf:f6:e4:a3:2e:3d:15:
         9b:6f:81:a7:20:5b:79:03:fd:8d:40:e2:6c:7e:a8:6f:ca:84:
         02:23:29:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org