Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          Eev3BHADIo2HzIBvWuPS283TlhEbLzn2yH3ScKlSdZM=
Subject key identifier:   08:7B:0F:D4:2D:DB:BF:6F:81:21:51:CC:8B:84:A2:0D:10:09:82:9D
Certificate issuer:       /CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
Certificate serial:       250599E597FE2DFBDAEF388B54687965E1F1D61E
Authority key identifier: 3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa
Signing time:             Thu 28 Mar 2024 22:04:54 +0000
ROA not before:           Thu 28 Mar 2024 21:59:54 +0000
ROA not after:            Thu 27 Mar 2025 22:04:54 +0000
asID:                     271599
IP address blocks:        45.174.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:05:99:e5:97:fe:2d:fb:da:ef:38:8b:54:68:79:65:e1:f1:d6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
        Validity
            Not Before: Mar 28 21:59:54 2024 GMT
            Not After : Mar 27 22:04:54 2025 GMT
        Subject: CN=087B0FD42DDBBF6F812151CC8B84A20D1009829D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:33:06:1a:8e:d2:da:7e:05:48:73:f5:0a:
                    1e:23:03:7f:b0:b4:4e:fb:bf:c1:80:97:9c:4d:a4:
                    69:cb:c0:75:20:a4:a0:9f:af:fe:5c:87:de:00:aa:
                    d1:bd:28:93:94:e2:a6:e9:f1:c9:94:0b:b0:ec:d1:
                    19:10:e7:53:6a:b7:9b:66:9a:c8:6d:e6:48:a7:27:
                    23:96:3f:11:64:90:df:18:36:50:92:1f:67:62:7b:
                    6a:6b:d9:a7:7f:33:a4:c8:ec:cd:a0:fe:d3:93:93:
                    e4:c6:29:05:5d:ca:96:c5:e9:fe:be:03:ec:93:e9:
                    b8:27:e8:4b:6c:a4:a9:f4:58:6f:b5:10:01:f2:43:
                    5d:31:d3:5a:72:46:67:ec:43:b4:3c:19:95:84:2a:
                    6d:c7:86:69:02:60:98:39:79:60:3a:14:8c:40:00:
                    9b:a7:ff:d9:60:57:a4:b1:ca:61:ad:4b:9a:b8:31:
                    e1:1c:cf:50:0c:85:16:d7:c9:a9:38:ee:3f:d4:cc:
                    82:58:86:47:db:17:0a:6b:0e:d9:c3:80:1b:8a:62:
                    e1:88:6a:cc:83:80:4c:40:fe:91:8c:2c:39:43:a8:
                    9b:3f:8f:ea:92:09:71:e4:81:9c:05:9f:a8:2b:c7:
                    d2:3a:db:66:b0:86:cd:dc:07:42:c4:78:e9:84:b8:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7B:0F:D4:2D:DB:BF:6F:81:21:51:CC:8B:84:A2:0D:10:09:82:9D
            X509v3 Authority Key Identifier:
                keyid:3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:c5:31:bf:32:21:d3:03:05:a1:36:b3:ea:5e:3f:95:00:ee:
         c8:74:29:75:39:eb:6b:5f:32:1e:3b:93:0d:6b:19:2a:48:1c:
         d7:25:89:3a:97:58:d7:d2:8f:57:5e:2c:fb:e8:ca:13:b4:59:
         9f:d4:35:62:0f:20:ec:5a:61:6c:ec:a7:b7:33:4f:98:f3:3d:
         75:ca:9f:6a:6b:f8:a1:c5:af:ae:85:9e:23:6d:43:10:b6:2b:
         1d:12:7c:dd:cc:a1:64:f9:22:23:ff:c1:d0:4a:b7:b7:89:66:
         eb:49:6e:2f:fe:e5:b9:db:63:53:1b:d9:a0:08:6b:cf:51:f5:
         24:5d:a0:26:1b:c5:6b:97:db:fb:3c:60:e3:86:0d:a5:c6:80:
         e0:46:2a:c5:4e:37:4c:95:f8:b3:ab:71:a6:df:cd:52:16:9d:
         45:55:ef:08:30:9c:4a:84:47:2f:39:ec:29:db:c7:05:db:c7:
         44:59:9c:cb:ba:43:d2:f2:57:c1:ca:a1:f2:d0:3d:78:fc:2d:
         12:25:e5:5b:56:5d:a4:42:cb:ea:b5:5b:9f:d3:82:00:f6:c1:
         51:89:15:b6:db:85:ca:fc:32:49:06:1a:b9:e8:a3:50:8f:e3:
         30:00:b4:35:39:64:a2:95:a6:f9:df:4e:0c:30:95:6e:ef:d2:
         b9:02:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org