Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/34352e362e3230302e302f32322d3234203d3e20323636323435.roa
File:                     34352e362e3230302e302f32322d3234203d3e20323636323435.roa (raw, json)
Hash identifier:          ATc+e0BE1XnNGvQZsEgT5/RSd9jvSwiguyTQgzGBwNY=
Subject key identifier:   03:EF:C7:40:54:2B:0F:A3:FB:47:CE:8F:89:14:CE:09:88:CA:6A:9C
Certificate issuer:       /CN=6024F3B3D5A07EF3933818E373628ED7AD099271
Certificate serial:       04473832942ED91DF829C242AADCB36088F12FE5
Authority key identifier: 60:24:F3:B3:D5:A0:7E:F3:93:38:18:E3:73:62:8E:D7:AD:09:92:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6024F3B3D5A07EF3933818E373628ED7AD099271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/34352e362e3230302e302f32322d3234203d3e20323636323435.roa
Signing time:             Wed 19 Oct 2022 20:00:00 +0000
ROA not before:           Wed 19 Oct 2022 19:55:00 +0000
ROA not after:            Wed 18 Oct 2023 20:00:00 +0000
asID:                     266245
IP address blocks:        45.6.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:47:38:32:94:2e:d9:1d:f8:29:c2:42:aa:dc:b3:60:88:f1:2f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6024F3B3D5A07EF3933818E373628ED7AD099271
        Validity
            Not Before: Oct 19 19:55:00 2022 GMT
            Not After : Oct 18 20:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:5a:25:75:82:bd:25:33:48:19:a7:da:63:
                    61:d8:4d:a4:d4:2f:bf:e6:bb:18:e8:82:03:10:06:
                    21:3a:76:69:d6:af:96:4f:41:e5:3f:8b:2a:ae:0c:
                    e9:f6:cb:c8:7e:d4:93:ee:bb:08:d9:e0:03:6c:98:
                    8d:23:7c:d3:97:2f:46:f9:8d:05:dd:ce:03:4a:95:
                    e2:5a:5b:81:ae:7a:51:99:32:a9:4e:7f:4e:fc:15:
                    ab:94:f6:f5:d9:b2:86:41:e2:ce:56:5d:73:14:d4:
                    c4:f8:47:f1:1b:24:4d:e6:4e:2f:75:29:bf:3b:89:
                    5b:bf:a7:37:1c:5f:39:4d:57:a3:80:a8:79:fa:ff:
                    8c:91:c6:13:3e:03:3e:69:30:c7:c6:b5:29:05:ba:
                    87:f9:32:12:f6:8c:14:20:b9:9a:78:f4:f4:58:f8:
                    94:98:5b:81:ec:2b:6e:15:d0:b7:f8:56:98:ee:01:
                    f1:1e:fb:7e:f6:4f:bb:4a:6b:4f:cb:55:9d:19:51:
                    a8:ac:4a:74:37:9d:e2:45:21:0d:4e:81:7b:07:9d:
                    f6:74:d6:5e:15:35:ca:58:72:d7:08:2c:15:37:50:
                    81:8d:74:c1:26:2f:2d:f1:40:80:f7:0c:2e:67:64:
                    88:7e:d4:b3:10:e6:d9:e2:7e:ed:42:1a:21:53:60:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EF:C7:40:54:2B:0F:A3:FB:47:CE:8F:89:14:CE:09:88:CA:6A:9C
            X509v3 Authority Key Identifier:
                keyid:60:24:F3:B3:D5:A0:7E:F3:93:38:18:E3:73:62:8E:D7:AD:09:92:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/6024F3B3D5A07EF3933818E373628ED7AD099271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6024F3B3D5A07EF3933818E373628ED7AD099271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/34352e362e3230302e302f32322d3234203d3e20323636323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:5e:64:1a:2e:d1:c9:c0:ff:5e:bf:4f:54:2b:33:4a:e8:25:
         a9:35:be:a7:1d:9f:a6:df:50:88:01:42:65:3a:00:6b:a0:7e:
         e7:d1:38:2b:24:18:c8:e8:78:a4:50:45:f8:bb:a5:a3:95:ca:
         b4:2a:f4:f7:98:3d:75:95:69:c7:5c:f3:7d:30:e2:ae:cc:bc:
         ee:87:ed:b0:9a:c1:56:a7:bb:4a:61:62:70:15:c7:35:c8:53:
         b1:72:d6:99:e9:ab:68:11:a2:02:86:b6:88:37:e3:97:2e:c5:
         85:2f:a2:59:83:12:bb:d6:0e:0b:b7:ea:fd:a8:fa:ab:15:b4:
         a6:17:b0:4f:11:92:18:79:8b:ba:aa:75:8b:36:75:a7:c2:7d:
         64:b1:1c:0f:69:8a:80:ba:1b:3a:55:b4:d1:c3:ff:ed:c0:1e:
         ac:ba:70:e2:b8:87:52:64:0f:ad:cb:30:55:5b:38:cb:58:6b:
         40:b4:af:59:fa:d6:c2:4d:5b:ce:ba:cb:2d:29:6e:5d:de:ac:
         31:c2:4c:c3:c4:7b:d8:f2:a6:3e:cf:b9:db:c3:05:9b:f5:3f:
         69:a8:0f:ca:18:23:94:80:53:d6:7e:d1:a3:c9:95:a3:96:d2:
         78:bb:26:06:3a:e6:7a:60:5d:32:89:05:9a:63:93:ca:9c:66:
         44:2f:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org