Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/34352e3233352e35392e302f32342d3234203d3e20323637343131.roa
File:                     34352e3233352e35392e302f32342d3234203d3e20323637343131.roa (raw, json)
Hash identifier:          s35yS3wbaTTRM281JPBfiLeEaj1invpc5W6t0tH/73U=
Subject key identifier:   D6:4F:15:C9:C2:F9:AE:1B:8E:4E:1B:49:E5:DC:98:A7:07:02:FC:A8
Certificate issuer:       /CN=BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B
Certificate serial:       6ABDF18D4DE53D5A1BC73D2651F5F69A001D82CE
Authority key identifier: BF:83:DE:84:C9:94:8A:34:1A:FB:F1:28:2E:86:6D:EA:C2:EA:9C:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/34352e3233352e35392e302f32342d3234203d3e20323637343131.roa
Signing time:             Thu 15 Feb 2024 13:42:08 +0000
ROA not before:           Thu 15 Feb 2024 13:37:08 +0000
ROA not after:            Thu 13 Feb 2025 13:42:08 +0000
asID:                     267411
IP address blocks:        45.235.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bd:f1:8d:4d:e5:3d:5a:1b:c7:3d:26:51:f5:f6:9a:00:1d:82:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B
        Validity
            Not Before: Feb 15 13:37:08 2024 GMT
            Not After : Feb 13 13:42:08 2025 GMT
        Subject: CN=D64F15C9C2F9AE1B8E4E1B49E5DC98A70702FCA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:4a:a5:cd:a8:0a:f5:47:0e:6a:fd:0e:60:
                    82:7a:54:21:64:7e:58:23:37:af:32:51:a0:91:ef:
                    44:40:f8:50:3f:35:9d:fe:b7:7e:a9:0b:0b:9b:39:
                    69:60:7e:a1:2c:cf:62:18:2a:03:83:5f:58:df:90:
                    c1:b0:ab:e8:bc:ff:e5:be:0a:70:19:0c:14:82:c4:
                    2f:b0:0e:bd:cb:65:dd:fb:50:c0:c7:b9:d9:3a:3c:
                    79:7a:6e:5c:05:f3:c1:28:25:37:44:1b:94:e6:13:
                    21:e7:5c:a3:1d:04:96:fb:e2:3d:c6:2d:07:c2:5d:
                    5e:60:85:8a:e4:9c:51:df:8b:c3:14:3b:52:85:b5:
                    a1:1b:81:62:6b:d6:36:89:ba:50:e7:fe:98:25:13:
                    5d:16:42:a7:1a:5a:88:a6:1c:68:4b:91:f2:9b:e3:
                    99:32:96:9f:33:8e:43:a1:f2:e1:bc:ac:fc:ef:15:
                    07:4e:a5:a7:73:44:a4:f2:48:d3:d1:c7:c3:8f:96:
                    f6:19:45:c2:f2:7b:ed:56:06:5f:b6:18:73:2c:58:
                    72:9d:eb:12:b9:aa:29:d3:26:18:3d:2a:8b:6f:c5:
                    27:11:57:9d:e8:df:83:7a:f4:f8:38:0d:46:c3:d0:
                    34:c4:a8:e1:5b:88:e1:90:7c:28:64:b3:4c:d7:42:
                    45:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:15:C9:C2:F9:AE:1B:8E:4E:1B:49:E5:DC:98:A7:07:02:FC:A8
            X509v3 Authority Key Identifier:
                keyid:BF:83:DE:84:C9:94:8A:34:1A:FB:F1:28:2E:86:6D:EA:C2:EA:9C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/34352e3233352e35392e302f32342d3234203d3e20323637343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:33:f4:b3:34:b8:24:d0:72:1d:bb:7a:4a:89:66:48:ce:15:
         5d:6c:ff:51:2d:bd:b5:24:6a:bb:98:1a:ab:3b:32:bc:59:b7:
         8e:1f:e4:cd:94:ea:1e:e5:10:5f:38:23:3c:81:56:02:f0:42:
         5b:b5:e7:8b:6e:fb:ef:d5:36:36:c3:de:3e:72:32:ea:6e:f7:
         cf:60:e3:26:ae:29:b6:84:1a:b0:4c:fe:7d:08:d9:8c:ab:ee:
         2f:47:71:d5:1c:ee:f8:87:2d:43:9f:03:74:39:74:32:83:75:
         fb:d5:24:02:42:b0:10:a8:2e:bb:fc:6e:8a:85:f1:c0:b6:bd:
         16:2b:71:e8:b6:3a:f8:0a:df:33:36:3c:e1:01:5c:61:7f:9c:
         ae:54:55:45:0e:0f:11:1c:b8:9f:71:41:e1:79:42:88:e1:76:
         86:d0:0a:ae:c2:94:71:83:e4:b0:e7:db:9a:7e:48:ec:8f:af:
         f5:82:57:2b:5a:9b:cd:6a:c8:84:6e:ce:77:7a:df:eb:a5:da:
         a5:0c:97:32:e7:17:60:97:59:4b:c5:a6:69:62:32:df:a1:1b:
         70:12:1c:2e:c7:c8:f6:99:16:3c:6d:f1:0b:3e:82:05:1a:cb:
         5c:d6:bd:07:11:93:83:c0:39:35:b0:92:ca:97:a4:5d:56:f9:
         72:00:29:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org