Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32342d3234203d3e20323639303737.roa
File:                     34352e3137392e34342e302f32342d3234203d3e20323639303737.roa (raw, json)
Hash identifier:          iDE+mR4585nHYvvduf8eGLgp5xkH1qRsW3q1/oLFroY=
Subject key identifier:   B1:B0:C0:38:B5:BB:DB:C2:88:F9:E7:39:83:AA:82:2D:EF:A4:0A:16
Certificate issuer:       /CN=E3456EBCA0328BC292A95D7115EAC65C1AE357FE
Certificate serial:       6721CDEEEBE6DD03921790C30251CEF29C859354
Authority key identifier: E3:45:6E:BC:A0:32:8B:C2:92:A9:5D:71:15:EA:C6:5C:1A:E3:57:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32342d3234203d3e20323639303737.roa
Signing time:             Thu 21 Mar 2024 18:12:04 +0000
ROA not before:           Thu 21 Mar 2024 18:07:04 +0000
ROA not after:            Thu 20 Mar 2025 18:12:04 +0000
asID:                     269077
IP address blocks:        45.179.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:21:cd:ee:eb:e6:dd:03:92:17:90:c3:02:51:ce:f2:9c:85:93:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3456EBCA0328BC292A95D7115EAC65C1AE357FE
        Validity
            Not Before: Mar 21 18:07:04 2024 GMT
            Not After : Mar 20 18:12:04 2025 GMT
        Subject: CN=B1B0C038B5BBDBC288F9E73983AA822DEFA40A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:ae:65:8d:2d:d6:20:d3:06:65:ee:2e:ed:
                    4f:a9:c8:5d:9b:f2:10:18:e5:8d:d9:ac:49:28:c9:
                    26:ce:02:de:74:82:56:88:11:f1:63:5d:ff:12:db:
                    f5:10:fc:f8:e9:56:2e:5c:25:72:15:53:45:43:6b:
                    64:d8:21:a5:32:22:7c:c4:b7:72:c2:94:36:08:e5:
                    84:2e:ee:d0:f7:04:1c:e9:30:76:fb:ff:9a:22:ce:
                    4d:5b:27:78:a6:ba:ef:c2:62:d1:5f:f9:fc:0c:94:
                    30:36:6a:e7:35:70:1c:dd:90:7e:40:eb:9e:e4:be:
                    5e:d7:17:5b:70:74:d1:00:34:7d:ad:c9:f5:c5:2d:
                    94:c9:48:4c:20:c5:89:b8:57:e5:0d:c6:4d:4d:b2:
                    ce:0c:01:e5:89:4f:7d:9d:e0:cf:05:ae:22:f6:39:
                    e7:38:a1:93:a0:50:53:b9:ba:51:dd:f1:54:d3:8f:
                    e9:b2:dd:48:9d:a9:8f:b8:35:55:45:b3:f1:fa:af:
                    25:ad:e2:4d:f0:66:59:b4:f4:ab:7d:3b:00:29:cc:
                    0d:49:e7:b0:ad:9f:1f:b2:e0:9c:38:01:e9:15:3b:
                    ea:8e:a4:51:35:31:fd:5d:98:54:e2:a9:37:4a:89:
                    fe:00:66:66:c3:45:5f:44:4a:1e:97:d1:38:55:87:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B0:C0:38:B5:BB:DB:C2:88:F9:E7:39:83:AA:82:2D:EF:A4:0A:16
            X509v3 Authority Key Identifier:
                keyid:E3:45:6E:BC:A0:32:8B:C2:92:A9:5D:71:15:EA:C6:5C:1A:E3:57:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34342e302f32342d3234203d3e20323639303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:87:13:d2:9b:af:67:8e:c6:a1:b7:17:5c:c3:26:1d:7c:af:
         5a:40:94:74:25:95:cb:53:6b:83:2e:2a:00:51:00:a1:83:80:
         27:01:86:f6:a7:58:32:7d:1a:42:3e:fd:43:0a:ec:d1:3b:25:
         b1:3c:36:b0:60:5b:54:04:32:2e:67:7b:c9:02:4f:50:51:18:
         fd:2a:7d:be:a2:a7:04:76:b5:22:1a:e1:4c:5d:89:40:68:16:
         a4:be:e9:3f:6c:30:df:11:ff:e6:e3:4d:b3:db:16:60:1a:84:
         aa:7b:6b:24:0f:87:e8:fd:7d:cc:4a:46:70:c0:55:e3:40:9b:
         90:a7:10:a8:fc:93:3b:a9:fd:ab:08:27:94:8d:59:e8:61:0f:
         fd:3d:7a:72:89:d4:5f:fc:cc:e3:f7:fa:0f:94:27:2d:f0:0b:
         ca:27:87:67:30:1c:3b:4f:0a:62:3c:c4:9c:2e:4c:c5:1c:db:
         88:28:4e:b4:f9:87:ff:ab:c1:2e:47:83:66:bc:d6:9c:07:e4:
         aa:ff:68:6d:21:12:5f:45:96:21:8f:90:a2:de:b6:56:12:01:
         ab:f7:c5:a1:1f:20:a0:f7:8a:61:7c:3f:0c:3d:8e:44:43:82:
         73:39:39:49:9f:71:3f:3b:83:15:84:de:ad:18:a4:93:ae:4d:
         83:29:35:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org