Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/34352e3233362e3230302e302f32322d3332203d3e20323638323433.roa
File:                     34352e3233362e3230302e302f32322d3332203d3e20323638323433.roa (raw, json)
Hash identifier:          ZdZBfYVoO+vyyGPDCu1KQsYmLraEcs6021HVaYRL5mY=
Subject key identifier:   5F:FD:13:7D:6B:14:D0:8D:12:25:A3:10:31:2D:CB:FD:B0:5A:48:64
Certificate issuer:       /CN=C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B
Certificate serial:       619DC8317DF446305D13A93E561305BE8D2E0297
Authority key identifier: C6:E6:AB:C8:95:82:9B:EE:4E:B5:D8:71:1C:C0:43:8E:4B:1A:58:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/34352e3233362e3230302e302f32322d3332203d3e20323638323433.roa
Signing time:             Tue 23 Jan 2024 02:33:08 +0000
ROA not before:           Tue 23 Jan 2024 02:28:08 +0000
ROA not after:            Tue 21 Jan 2025 02:33:08 +0000
asID:                     268243
IP address blocks:        45.236.200.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9d:c8:31:7d:f4:46:30:5d:13:a9:3e:56:13:05:be:8d:2e:02:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B
        Validity
            Not Before: Jan 23 02:28:08 2024 GMT
            Not After : Jan 21 02:33:08 2025 GMT
        Subject: CN=5FFD137D6B14D08D1225A310312DCBFDB05A4864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:28:04:77:69:4f:3e:b4:4f:84:e5:56:73:
                    4e:73:e0:72:fb:49:ed:7a:f2:23:ea:ac:13:c8:88:
                    dc:8e:a9:c7:7f:16:0e:85:f3:f0:9f:b2:e3:1d:e0:
                    4f:d1:be:35:56:9f:c7:26:99:33:f0:f4:26:92:37:
                    6c:f8:18:7d:5a:83:0e:e9:71:15:b4:cd:a2:15:84:
                    00:91:42:78:41:47:56:5e:fc:4c:e1:20:30:8c:ba:
                    b3:62:fd:ab:24:3e:56:b4:ef:55:43:e9:81:c7:1f:
                    1b:ae:f0:fc:b5:51:e7:ab:e3:54:8d:c0:61:1a:26:
                    f4:a4:82:77:60:b5:8d:75:2c:4c:2b:22:86:c6:5e:
                    a4:03:e5:c0:03:10:f3:9b:6a:60:98:33:48:90:3e:
                    b8:65:5d:fb:b3:86:4a:87:2f:5f:65:15:da:f3:a6:
                    53:bd:af:ed:bc:27:2e:be:ad:20:bc:4e:56:ef:a3:
                    10:c4:f8:e8:38:f2:0e:78:1c:26:18:b3:11:f2:e5:
                    3e:ff:ec:50:9f:a5:53:8d:cd:5d:a3:78:22:58:0c:
                    24:fb:86:8a:9b:47:50:f7:65:50:af:1a:60:fa:dd:
                    f7:1e:49:75:46:51:eb:cf:df:0e:41:be:6c:a0:b6:
                    b0:7c:f1:a4:eb:9d:e1:7a:a8:5b:56:8f:ae:82:84:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FD:13:7D:6B:14:D0:8D:12:25:A3:10:31:2D:CB:FD:B0:5A:48:64
            X509v3 Authority Key Identifier:
                keyid:C6:E6:AB:C8:95:82:9B:EE:4E:B5:D8:71:1C:C0:43:8E:4B:1A:58:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/34352e3233362e3230302e302f32322d3332203d3e20323638323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:67:70:bf:55:2d:e3:a5:65:07:8c:a9:eb:56:43:7c:01:ff:
         2a:c6:cc:19:dd:d8:ed:74:a2:cd:9c:ed:a9:77:f2:e5:0f:b9:
         9c:d9:16:53:8a:52:72:66:42:9c:9e:a6:3c:de:a4:a1:66:02:
         be:63:3d:70:56:49:c6:22:9f:a7:17:62:1e:25:25:3d:8e:23:
         98:79:1e:c9:96:7f:d1:cb:87:d6:2e:09:66:a8:71:cd:83:27:
         6a:e7:cc:ab:d4:11:42:e7:44:9d:3d:bb:c2:ad:19:fe:94:64:
         f4:16:36:c8:d3:e3:80:b8:2d:dd:91:56:4e:5e:bc:f1:a6:6e:
         d5:22:59:52:1e:40:79:5f:93:b6:be:4e:dd:9f:ff:17:73:19:
         20:58:d4:29:19:0e:5b:51:13:80:fd:f3:1b:d0:90:32:1a:c3:
         80:95:51:59:0a:e3:11:e1:a4:fb:55:4e:36:f3:4f:8a:38:b2:
         52:48:75:f0:47:0d:f5:0e:6f:e6:52:76:66:cf:77:0e:5d:72:
         e7:af:11:28:4c:15:42:db:ec:d4:a3:e1:19:9e:da:2e:5f:29:
         86:32:b0:16:0f:4b:34:99:6d:af:a6:10:61:87:f7:17:41:71:
         d1:54:48:6f:98:e2:8c:24:dd:bf:e8:b2:5d:f0:ba:7f:cd:6a:
         66:8e:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org