Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/34352e3233352e35362e302f32342d3234203d3e20323637343131.roa
File:                     34352e3233352e35362e302f32342d3234203d3e20323637343131.roa (raw, json)
Hash identifier:          D1+hBLRjeiF1/uU4Q7M3I60x9EnQOi9nEg50//VvUIk=
Subject key identifier:   29:F8:19:BB:91:32:1A:8C:41:D0:B2:37:21:4B:53:6C:32:04:5B:A1
Certificate issuer:       /CN=BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B
Certificate serial:       365F81D89D84C46E10BF85C2A0896931706E80D2
Authority key identifier: BF:83:DE:84:C9:94:8A:34:1A:FB:F1:28:2E:86:6D:EA:C2:EA:9C:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/34352e3233352e35362e302f32342d3234203d3e20323637343131.roa
Signing time:             Thu 15 Feb 2024 13:42:07 +0000
ROA not before:           Thu 15 Feb 2024 13:37:07 +0000
ROA not after:            Thu 13 Feb 2025 13:42:07 +0000
asID:                     267411
IP address blocks:        45.235.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5f:81:d8:9d:84:c4:6e:10:bf:85:c2:a0:89:69:31:70:6e:80:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B
        Validity
            Not Before: Feb 15 13:37:07 2024 GMT
            Not After : Feb 13 13:42:07 2025 GMT
        Subject: CN=29F819BB91321A8C41D0B237214B536C32045BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:73:d0:e3:58:10:91:be:8c:53:85:71:8f:34:
                    69:19:e5:11:60:24:be:c9:b6:53:7a:4f:f4:ed:a6:
                    c6:98:7b:bf:6f:47:5d:13:d5:92:aa:53:31:6e:f4:
                    79:16:d0:fe:f4:7e:17:57:c2:5f:93:03:f9:9d:cb:
                    db:22:a1:d8:e6:3d:a3:6c:07:8d:51:c0:88:02:53:
                    5f:e0:84:fa:d5:f9:2a:3b:ef:38:e0:b3:2f:6c:84:
                    3c:fc:f7:ea:0e:2f:c0:a6:f6:91:05:ff:10:7c:fc:
                    6e:0d:85:3a:aa:a8:a9:9e:bf:4c:d0:8d:1b:60:65:
                    1a:72:48:83:54:69:8a:c8:d6:07:09:a9:13:2e:d0:
                    46:9a:17:f2:7e:16:33:7f:19:f0:eb:79:93:a5:2a:
                    a0:ea:35:b4:6c:d7:f7:0b:c8:69:d8:7c:5b:c7:8f:
                    27:93:16:b9:33:d8:cf:f0:3f:43:e3:c3:11:ed:fa:
                    04:2f:96:18:b1:5b:77:34:4f:48:6d:bc:73:25:bb:
                    40:4e:37:72:1d:dd:fc:a6:68:d1:2a:7f:81:4b:e7:
                    76:4b:a2:b3:8f:93:8d:17:c6:c2:f7:73:a9:f8:04:
                    43:31:bd:04:0b:ff:8a:0a:04:26:ca:87:03:22:33:
                    e9:06:82:31:f2:d8:bc:42:03:41:45:36:6a:ba:ce:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F8:19:BB:91:32:1A:8C:41:D0:B2:37:21:4B:53:6C:32:04:5B:A1
            X509v3 Authority Key Identifier:
                keyid:BF:83:DE:84:C9:94:8A:34:1A:FB:F1:28:2E:86:6D:EA:C2:EA:9C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/34352e3233352e35362e302f32342d3234203d3e20323637343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:54:eb:fb:83:dd:b0:31:49:e6:49:aa:81:30:a3:ec:1f:e8:
         11:2a:42:4a:c2:f2:b8:10:0e:07:b4:e9:9b:fb:a3:30:4e:35:
         ca:ee:98:10:80:a1:d7:33:df:9d:51:7a:4c:e2:34:11:65:72:
         60:03:0b:a1:42:f9:f6:a2:b0:4d:13:fe:bb:6d:16:4e:b5:8d:
         8e:fb:7e:33:e6:2f:02:e0:13:ac:d9:67:82:20:52:51:f3:7b:
         74:59:52:5b:09:9c:a8:9f:e9:d7:12:94:0c:a5:cd:88:5b:4b:
         a0:8e:9e:ed:ce:23:8b:5b:20:09:44:44:9c:d6:0d:a9:3b:8b:
         1b:30:e8:3d:75:8a:8e:a1:fa:65:7d:e2:77:4b:3b:01:0d:b1:
         17:26:f4:ba:4f:4a:6c:48:f0:ec:ab:7f:f4:0f:36:f7:e3:f8:
         a6:22:28:ff:a3:8b:c6:e7:a0:1c:a8:c2:15:aa:13:0b:90:33:
         a7:a3:65:b3:b7:c5:df:98:2a:fc:aa:68:67:ea:a8:e4:0d:c5:
         d0:cd:82:ee:95:38:ae:0f:fe:af:73:77:f0:c1:40:28:a9:0c:
         58:3f:c0:e0:3f:16:5a:0f:00:f0:a6:c7:38:af:7e:3c:6b:ed:
         ad:63:86:7e:45:86:12:0a:09:7b:c6:27:39:aa:02:90:78:a2:
         47:db:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org