Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131352e302f32342d3234203d3e20323638353736.roa
File:                     34352e3136332e3131352e302f32342d3234203d3e20323638353736.roa (raw, json)
Hash identifier:          RYp6C9gdczyRHBM6MCkSVNMu0MjDHe0nkNE0BybtgpI=
Subject key identifier:   43:EF:A8:7D:D9:40:DC:71:31:00:7A:84:BF:2A:59:A0:BA:ED:25:63
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       21292DCE15E2033D0CE0D311781A40877F153A22
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131352e302f32342d3234203d3e20323638353736.roa
Signing time:             Fri 28 Apr 2023 15:00:01 +0000
ROA not before:           Fri 28 Apr 2023 14:55:01 +0000
ROA not after:            Fri 26 Apr 2024 15:00:01 +0000
asID:                     268576
IP address blocks:        45.163.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:29:2d:ce:15:e2:03:3d:0c:e0:d3:11:78:1a:40:87:7f:15:3a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Apr 28 14:55:01 2023 GMT
            Not After : Apr 26 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:64:70:45:66:0c:b1:d9:d8:c3:aa:23:65:
                    77:f3:96:5d:aa:85:76:39:32:4e:96:a9:6e:c0:06:
                    90:7c:ab:1f:ef:e6:b5:b2:ce:d5:ab:f6:9e:78:7f:
                    ff:34:08:24:24:0f:a4:b2:6d:58:38:62:24:56:63:
                    a0:f7:02:8b:fd:4c:12:13:43:f2:73:7b:5e:6a:f5:
                    7c:c9:f9:8e:54:60:34:ad:d1:79:e1:8f:38:b6:68:
                    a3:89:72:ab:6a:ca:3a:9c:08:a1:00:94:25:83:4f:
                    f0:f8:ac:56:cb:83:a4:d8:58:0d:8c:33:5c:22:e1:
                    11:83:8f:20:91:46:52:9c:25:9e:c3:63:cb:ca:bc:
                    b3:1f:2d:80:c1:58:f5:b7:6c:0b:32:b3:f9:98:ad:
                    59:2e:11:da:5c:ce:14:97:e6:f7:96:44:fb:50:b0:
                    a9:79:a9:7e:65:51:1c:96:8b:d1:82:fe:a4:d1:ec:
                    64:be:3b:57:99:6b:8f:5e:ed:95:55:7b:bc:34:82:
                    89:70:1e:a2:93:2c:5f:e9:6e:24:6f:59:a3:47:63:
                    78:83:86:f8:85:a6:32:24:f5:80:e6:bd:4a:c0:07:
                    62:b5:cb:13:c4:d4:62:de:1a:68:2a:9b:e8:cf:ac:
                    78:a3:98:b8:d8:0a:97:2a:68:55:b7:40:d7:4a:f4:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EF:A8:7D:D9:40:DC:71:31:00:7A:84:BF:2A:59:A0:BA:ED:25:63
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131352e302f32342d3234203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:2e:fe:d5:76:f1:68:b1:95:09:83:b6:55:fb:b6:a4:56:40:
         6f:a3:78:2b:dc:66:b6:57:3b:46:34:56:9b:90:d3:87:86:42:
         ed:4a:7c:5f:6f:02:2b:a9:52:4b:68:1e:93:a4:d9:4a:dd:22:
         8d:54:73:21:dd:03:5f:c1:92:50:fd:2f:be:cc:85:6e:70:b0:
         a8:b7:84:dc:db:6d:49:7d:18:70:a1:96:83:c8:17:d9:a7:0e:
         02:e8:2c:7c:55:50:b6:95:f6:52:18:66:2d:1b:e5:8b:e5:95:
         fb:53:13:cc:45:38:a1:ed:08:3a:b5:f6:b7:a6:a8:84:f0:3f:
         93:5f:ae:dd:17:72:40:e5:73:0a:1a:a0:c3:ee:f6:f0:d5:27:
         02:8e:45:13:2b:28:95:6e:fe:c1:23:1d:bc:3c:2c:fe:10:6a:
         22:5b:8d:87:14:fe:32:76:85:e1:86:84:24:21:f1:a7:e2:6f:
         a0:2b:ce:c2:53:c7:2b:7b:bc:40:ea:84:be:3c:13:b3:2f:e7:
         d1:bb:c8:48:88:d5:e7:d6:f6:c6:82:9b:d3:a9:45:d6:1a:6a:
         b9:1f:9a:54:bd:b6:f4:69:34:c3:85:79:7b:0b:89:41:81:2d:
         e6:d3:39:e0:b4:ff:8d:6c:f7:d9:f7:1c:f9:3d:44:ed:b4:b0:
         78:7f:f9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org