Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38342e302f32322d3234203d3e20323637313839.roa
File:                     34352e3233312e38342e302f32322d3234203d3e20323637313839.roa (raw, json)
Hash identifier:          prT0MkXogXVswr7lY3ArgGtTwxnRK8mlJSGUjwO+7Lc=
Subject key identifier:   49:D6:60:06:2B:B8:77:9F:FC:15:77:E3:16:79:F5:30:2E:C5:6B:DF
Certificate issuer:       /CN=6B8F2D7352FA1E714663C1285A46D4C8FD4E7430
Certificate serial:       73CA252A9C2981EFA7C3948815517608A1E5A8C1
Authority key identifier: 6B:8F:2D:73:52:FA:1E:71:46:63:C1:28:5A:46:D4:C8:FD:4E:74:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B8F2D7352FA1E714663C1285A46D4C8FD4E7430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38342e302f32322d3234203d3e20323637313839.roa
Signing time:             Thu 07 Mar 2024 18:39:26 +0000
ROA not before:           Thu 07 Mar 2024 18:34:26 +0000
ROA not after:            Thu 06 Mar 2025 18:39:26 +0000
asID:                     267189
IP address blocks:        45.231.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ca:25:2a:9c:29:81:ef:a7:c3:94:88:15:51:76:08:a1:e5:a8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B8F2D7352FA1E714663C1285A46D4C8FD4E7430
        Validity
            Not Before: Mar  7 18:34:26 2024 GMT
            Not After : Mar  6 18:39:26 2025 GMT
        Subject: CN=49D660062BB8779FFC1577E31679F5302EC56BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:94:50:c9:61:71:c5:60:a7:c0:d2:05:b4:
                    6f:ae:b1:04:d6:8e:bf:bf:ae:f2:5a:9e:73:4f:fb:
                    1b:37:51:12:50:89:8b:de:41:98:35:8a:08:cd:dc:
                    91:32:9d:9f:79:4d:48:7d:3c:96:96:c7:dc:c4:d5:
                    45:e9:31:4e:7a:89:17:76:54:68:85:c3:fe:16:39:
                    8c:b9:b4:71:17:52:84:a0:98:9f:60:63:16:f5:de:
                    5f:c7:10:7a:ef:64:d7:a4:c7:a3:8d:8a:ae:b0:e5:
                    9a:73:d0:6f:22:4b:2a:68:71:8d:e2:c1:21:09:a3:
                    16:ed:33:e7:1d:c6:14:c8:d5:3a:fa:37:2d:38:a0:
                    00:92:f8:49:c6:ef:2d:c9:ff:82:5b:77:8a:a8:5c:
                    15:fa:40:12:ae:8f:18:87:78:fc:32:96:19:c3:23:
                    ea:f1:f8:41:e3:ac:88:c2:b0:23:ba:3e:0f:64:38:
                    96:d1:7d:23:de:38:5c:12:ed:21:8e:df:b4:eb:01:
                    c7:06:a2:61:b6:08:6e:6d:cc:38:e0:5b:85:31:ed:
                    09:cb:92:31:09:29:3e:ef:a3:38:36:35:0f:dc:1f:
                    92:43:58:36:6e:5b:38:8a:10:14:a1:3a:4f:60:24:
                    a7:53:9f:c2:2e:a4:3c:69:aa:0c:e1:26:b9:19:95:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D6:60:06:2B:B8:77:9F:FC:15:77:E3:16:79:F5:30:2E:C5:6B:DF
            X509v3 Authority Key Identifier:
                keyid:6B:8F:2D:73:52:FA:1E:71:46:63:C1:28:5A:46:D4:C8:FD:4E:74:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/6B8F2D7352FA1E714663C1285A46D4C8FD4E7430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B8F2D7352FA1E714663C1285A46D4C8FD4E7430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38342e302f32322d3234203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:96:77:73:20:19:b3:8a:1e:34:0f:d1:ae:dd:b8:4e:c1:24:
         71:6a:69:45:5c:13:9c:c1:bc:c0:a4:15:a0:60:c4:6a:b2:e2:
         bc:dc:f9:3d:f8:df:dd:f6:8f:2d:c2:62:2c:39:9a:48:91:56:
         9d:a5:ce:a1:71:c6:5f:8a:6a:60:be:3d:8b:bb:38:15:a4:0f:
         b3:9c:31:97:1a:04:65:53:7f:9e:6c:51:e9:6e:c7:f7:fa:9d:
         3f:29:40:12:fc:66:8b:d5:32:cf:2b:a1:71:4b:31:53:e3:20:
         98:5e:46:dc:b1:c8:37:fe:3d:00:53:a0:0f:51:1b:36:ab:d9:
         89:b4:95:9a:cb:b5:2a:7e:59:93:be:d9:e3:f3:c2:94:a7:86:
         5e:4c:29:41:dd:f4:6c:3a:ec:23:77:1b:0d:96:22:77:74:1e:
         ff:db:c3:85:33:10:d5:28:56:e3:30:f9:33:2c:15:05:f3:6a:
         5d:7a:ba:40:3b:f1:d9:04:da:89:e3:f4:a9:8f:04:e1:4c:c2:
         55:38:22:04:71:cc:f2:81:96:f0:4c:d1:31:c2:fa:2b:91:fd:
         74:b5:54:62:3a:94:b9:31:88:64:46:96:53:44:7a:82:23:ef:
         6e:25:26:8b:2d:be:68:07:6b:ef:38:3f:e0:63:20:c7:55:d2:
         81:17:17:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org