Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32322d3234203d3e20323636393532.roa
File:                     34352e3232352e3235322e302f32322d3234203d3e20323636393532.roa (raw, json)
Hash identifier:          amrpysZeBTwWlYJlI+2R5/zWpp8uH5YM8Emc0wtbJP4=
Subject key identifier:   95:8A:02:C8:07:B3:B7:54:6B:F6:AE:9F:BA:64:14:9C:31:91:4D:DA
Certificate issuer:       /CN=C6A48C022635EB60E68D4E85D562FD00ED1202B6
Certificate serial:       13122F9DE04BC2C98450584E67D89BD4202EED26
Authority key identifier: C6:A4:8C:02:26:35:EB:60:E6:8D:4E:85:D5:62:FD:00:ED:12:02:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A48C022635EB60E68D4E85D562FD00ED1202B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32322d3234203d3e20323636393532.roa
Signing time:             Mon 15 Jan 2024 18:04:48 +0000
ROA not before:           Mon 15 Jan 2024 17:59:48 +0000
ROA not after:            Mon 13 Jan 2025 18:04:48 +0000
asID:                     266952
IP address blocks:        45.225.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:12:2f:9d:e0:4b:c2:c9:84:50:58:4e:67:d8:9b:d4:20:2e:ed:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A48C022635EB60E68D4E85D562FD00ED1202B6
        Validity
            Not Before: Jan 15 17:59:48 2024 GMT
            Not After : Jan 13 18:04:48 2025 GMT
        Subject: CN=958A02C807B3B7546BF6AE9FBA64149C31914DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:b9:dc:62:62:a9:d4:90:94:7b:ee:c4:2d:
                    9d:7e:e8:a2:9b:fe:fa:f6:e8:9d:e7:32:a6:97:66:
                    56:0c:b6:03:a8:28:1b:6c:50:26:ae:46:70:01:4a:
                    27:c7:6e:b9:71:1f:1e:70:28:d5:b3:3f:8e:a0:fd:
                    58:cd:0a:ac:dd:0d:b8:75:83:28:60:47:27:47:39:
                    1b:e3:d3:8b:9d:0c:ec:1d:cf:be:7c:be:34:16:7f:
                    a9:82:ab:55:ec:c9:01:ef:de:eb:13:f5:a8:99:96:
                    b5:bd:24:d2:21:44:81:d3:ba:50:ee:e8:0f:c4:1b:
                    7e:e9:75:33:76:f9:01:91:2e:a5:db:de:bd:7d:15:
                    6b:8b:68:73:7c:2b:19:30:81:f2:ae:cc:7f:d0:83:
                    54:8e:ef:47:88:b8:36:48:ab:83:f2:98:ff:cb:05:
                    62:9b:f4:1c:79:23:a8:25:69:74:4e:fd:48:78:a4:
                    9e:46:83:d3:67:26:b6:d7:66:71:dd:58:1c:33:40:
                    82:1a:40:75:91:a4:d9:06:de:65:3b:ce:39:48:c6:
                    79:00:3d:80:e1:23:c1:3e:33:25:c5:bd:d6:f0:d7:
                    85:06:4c:3b:4f:57:ba:75:25:a4:bc:85:11:a5:e4:
                    51:27:b0:0c:cf:68:c8:8d:40:e0:c9:67:84:14:ab:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8A:02:C8:07:B3:B7:54:6B:F6:AE:9F:BA:64:14:9C:31:91:4D:DA
            X509v3 Authority Key Identifier:
                keyid:C6:A4:8C:02:26:35:EB:60:E6:8D:4E:85:D5:62:FD:00:ED:12:02:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/C6A48C022635EB60E68D4E85D562FD00ED1202B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A48C022635EB60E68D4E85D562FD00ED1202B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32322d3234203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:a1:6d:21:8e:57:6f:bd:5b:7d:9c:d3:34:1c:36:3b:e0:84:
         66:82:1d:9a:1d:ed:5b:ee:31:e8:a7:7b:99:b9:6a:ac:52:7c:
         10:66:79:2f:66:21:29:91:70:08:cd:26:a1:78:1e:dc:7a:1f:
         e9:a6:21:17:69:d8:53:5a:4d:f2:6a:22:d9:f5:73:d3:d3:74:
         44:b6:43:a0:76:66:cc:98:16:b5:30:9c:26:5f:14:40:6c:dd:
         55:78:40:f3:76:09:7b:21:1c:95:84:08:a6:e7:b1:84:5d:87:
         f7:2a:64:de:a0:f9:f0:f5:00:2d:6a:1a:b7:b6:66:a8:4b:8f:
         e9:f3:70:34:8a:95:bc:94:3f:f2:e6:7a:cf:27:bc:fb:80:6c:
         9a:69:5d:07:eb:41:c9:29:c1:02:89:66:c0:28:08:c7:5d:f0:
         5a:1b:87:b6:91:9d:46:52:9c:50:a9:7b:cf:4d:14:a8:71:14:
         ad:ab:5e:53:3d:f1:57:fb:67:e3:14:c5:23:c3:72:bb:9e:b5:
         7b:26:23:e0:ca:4f:53:53:23:85:0c:00:50:63:cc:a1:3a:5c:
         3f:b1:00:65:6f:5c:1e:74:d5:e0:c3:e7:7b:21:c9:91:47:e0:
         a1:62:11:25:71:a9:5b:0b:81:52:75:78:6e:3f:bb:ff:b3:b1:
         0f:9f:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org