Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131322e302f32322d3232203d3e20323638353736.roa
File:                     34352e3136332e3131322e302f32322d3232203d3e20323638353736.roa (raw, json)
Hash identifier:          2xYSIQTvoxi6WQpaX2ixV8cXAzVcTr7bZqHkItd3bcc=
Subject key identifier:   61:9A:AC:21:BD:7B:FE:08:66:44:E6:C0:F0:3D:E2:94:52:B1:78:37
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       7993B905D735EF10DFB0CD872D5188DA0A4B6F95
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131322e302f32322d3232203d3e20323638353736.roa
Signing time:             Wed 27 Sep 2023 15:00:00 +0000
ROA not before:           Wed 27 Sep 2023 14:55:00 +0000
ROA not after:            Wed 25 Sep 2024 15:00:00 +0000
asID:                     268576
IP address blocks:        45.163.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:93:b9:05:d7:35:ef:10:df:b0:cd:87:2d:51:88:da:0a:4b:6f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Sep 27 14:55:00 2023 GMT
            Not After : Sep 25 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:af:ad:77:9c:8b:5e:a7:29:e7:10:08:c6:
                    e9:a8:92:af:84:66:db:bc:bc:f8:ac:f4:0f:5b:1e:
                    6e:aa:c0:fd:b7:4d:1e:ca:07:d1:98:5d:82:a0:4d:
                    8a:ed:74:23:09:78:49:9f:1a:5a:17:3e:91:63:9a:
                    7e:14:90:3a:7b:e4:92:58:a4:a3:53:bf:2a:21:a5:
                    d2:71:82:5a:78:b3:86:f4:63:ec:23:f3:67:e3:aa:
                    f3:88:42:0c:24:3e:95:7f:c6:9d:92:8e:ed:66:be:
                    e9:3b:9f:b3:93:a6:87:c5:6b:c6:49:f0:8d:20:75:
                    18:5a:6d:d3:fb:ad:fb:f3:55:08:77:f4:e6:0c:57:
                    f0:25:11:33:07:9b:ca:eb:3d:31:39:63:a6:4f:68:
                    c3:b6:29:65:ce:6c:af:b0:48:86:81:40:8d:9a:f4:
                    f2:ed:50:03:e4:a7:a3:a8:05:04:e9:aa:c9:54:18:
                    4e:93:b5:a8:07:ed:1c:05:3a:e1:87:76:bf:78:a2:
                    2b:a4:87:45:1f:ce:04:bb:78:35:0f:6e:ea:3d:e6:
                    2b:9a:ac:51:ef:dd:f1:cf:3e:c5:9a:e0:e6:2d:04:
                    f9:0d:5b:2e:31:ed:a0:9f:bc:21:44:e1:d1:dd:8b:
                    9f:5c:fc:19:b7:13:60:05:6d:53:6e:6d:7b:0a:57:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9A:AC:21:BD:7B:FE:08:66:44:E6:C0:F0:3D:E2:94:52:B1:78:37
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131322e302f32322d3232203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:6f:2b:17:73:8c:90:60:bf:34:c9:0d:49:38:8d:76:bf:1c:
         af:a4:0c:33:07:e1:e3:c8:20:7d:6f:cb:7d:03:f9:3a:f6:86:
         3e:fb:72:8b:49:64:55:56:72:40:22:09:4a:17:f5:b0:6b:71:
         9e:cf:01:a7:e3:18:f8:37:0d:b4:57:8c:88:8b:95:84:35:a6:
         d3:17:6d:9d:e6:77:1b:f6:9e:df:66:af:d8:81:3e:12:d0:4a:
         69:3c:15:d6:84:ac:6c:a4:0a:61:ad:a6:0b:6f:13:58:95:d6:
         82:4e:bc:6c:30:15:0b:fc:32:12:e4:7f:6b:fe:00:68:cd:85:
         ea:78:4d:bc:2f:3e:8b:6d:50:87:e0:fa:77:2b:f2:f3:77:5b:
         48:6a:3b:b0:5e:d3:17:00:02:cd:49:54:4f:4e:9d:d7:5e:87:
         ed:96:e9:35:0c:76:5b:40:d1:6f:7f:32:0b:e4:cb:a8:87:7c:
         82:fc:d0:bd:1f:43:8e:05:12:f2:ba:3d:9b:57:4f:eb:b9:f1:
         ad:54:34:8c:b2:71:55:4e:2a:ca:2e:da:72:37:86:d0:3c:1d:
         4f:3a:70:62:b2:e7:19:38:13:d6:5a:f8:4b:25:17:88:2d:a4:
         4f:7c:95:a4:a0:1a:28:32:dd:f5:27:40:32:6a:9c:47:87:38:
         98:1a:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org