Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1/34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa
File:                     34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa (raw, json)
Hash identifier:          VH3lIJgp5QurdcM8bBylwuAySqo6Zzi2ZzwwcFDt1W4=
Subject key identifier:   B1:71:56:FE:6C:CC:EA:14:D9:16:14:24:2C:3F:89:B8:ED:B2:ED:9B
Certificate issuer:       /CN=6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2
Certificate serial:       49B98034652D3A7C55F997B7DE39A0AFBE1B0677
Authority key identifier: 6F:6D:FF:0B:38:F4:FB:59:7A:0F:7E:AF:36:3E:DA:37:4F:9F:6E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1/34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa
Signing time:             Thu 11 Apr 2024 12:19:53 +0000
ROA not before:           Thu 11 Apr 2024 12:14:53 +0000
ROA not after:            Thu 10 Apr 2025 12:19:53 +0000
asID:                     266933
IP address blocks:        45.225.108.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b9:80:34:65:2d:3a:7c:55:f9:97:b7:de:39:a0:af:be:1b:06:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2
        Validity
            Not Before: Apr 11 12:14:53 2024 GMT
            Not After : Apr 10 12:19:53 2025 GMT
        Subject: CN=B17156FE6CCCEA14D91614242C3F89B8EDB2ED9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:ef:50:3d:fd:ef:c3:52:4b:07:6e:a1:5a:
                    26:dc:42:49:41:c9:d4:ea:79:94:ea:48:2f:f0:24:
                    96:bc:49:7e:78:03:dc:a2:ba:24:90:9c:7e:fe:22:
                    a3:04:d1:d6:55:a7:e7:6b:de:6d:3a:ff:3c:a8:f8:
                    6c:1e:7e:9f:76:5f:51:33:dc:51:e5:b3:d3:0d:a3:
                    80:8b:85:a8:84:0e:b4:1b:97:ab:67:7a:6f:b3:e7:
                    bc:ab:05:bb:a6:dd:0b:38:20:7a:9b:ec:ee:2d:29:
                    0e:a7:a3:f2:14:16:35:48:e9:dd:45:c4:6d:a3:dd:
                    1e:09:f7:c5:21:c3:73:db:3e:76:fb:1b:5b:2c:2b:
                    2a:c3:77:8d:21:2d:ba:e7:9e:9d:07:47:e0:11:4c:
                    8a:a3:4d:e3:cd:0f:b3:08:1b:d5:65:b3:47:8e:64:
                    86:40:bd:11:50:22:15:86:da:49:00:08:78:9b:d6:
                    64:61:c2:9b:b2:70:cb:53:fc:e7:d9:8a:81:c9:71:
                    1c:0e:f8:25:a6:f5:73:42:c3:92:85:e5:c8:99:38:
                    ca:a5:21:c3:12:3e:bf:6e:cf:9a:3f:af:e8:87:5c:
                    32:5f:6e:f0:2d:9e:f3:f5:1a:0c:78:c4:a7:6a:df:
                    c4:81:90:db:0e:24:9e:67:f6:69:d1:aa:36:41:f3:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:71:56:FE:6C:CC:EA:14:D9:16:14:24:2C:3F:89:B8:ED:B2:ED:9B
            X509v3 Authority Key Identifier:
                keyid:6F:6D:FF:0B:38:F4:FB:59:7A:0F:7E:AF:36:3E:DA:37:4F:9F:6E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1/6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F6DFF0B38F4FB597A0F7EAF363EDA374F9F6EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/1/34352e3232352e3130382e302f32322d3332203d3e20323636393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:28:d2:dc:0e:24:69:6f:92:bc:e6:34:e4:1a:24:46:5f:96:
         4a:38:00:bd:1d:56:08:78:af:d2:b8:2c:7c:17:79:1e:ba:b7:
         ce:fe:ca:2f:2f:ad:89:73:c3:32:fb:6b:d6:77:3c:a8:ad:05:
         b3:82:d2:ff:65:03:65:dd:cf:60:cc:4f:39:e3:8b:f2:8a:c7:
         df:5c:80:e6:b7:9f:21:f2:f7:ed:6f:e3:54:21:ac:bb:06:3f:
         67:0a:cd:34:9c:3f:5d:70:50:15:fb:06:9b:08:30:9e:ac:27:
         11:a2:dd:18:2e:95:c7:fd:46:8d:c7:a1:e5:44:a9:1d:7a:33:
         59:b8:77:9d:14:c9:73:95:c8:9e:18:c3:31:45:38:a5:a7:bb:
         87:9b:48:7d:0a:b7:3d:c4:1b:d3:86:90:3d:9d:66:d7:73:30:
         40:04:fa:63:b9:e4:74:f7:63:cc:a7:87:8f:b5:69:19:bb:f1:
         cd:8f:8b:6a:5e:c7:e1:c8:78:01:6e:c0:c6:0b:da:a9:6c:c8:
         51:30:1c:db:f8:e7:68:41:93:49:96:0b:6d:a4:2e:8a:09:e5:
         26:32:9f:a8:b1:12:c7:32:63:3d:ee:19:5f:52:c2:41:d5:52:
         d8:2d:59:ec:2d:4c:cf:1b:86:a7:c4:08:fa:22:73:68:6d:6e:
         aa:6b:3e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org