Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34362e302f32332d3233203d3e20323639303737.roa
File:                     34352e3137392e34362e302f32332d3233203d3e20323639303737.roa (raw, json)
Hash identifier:          W3jS6CxsavAsVlZfpkbRw/ncVI84XafatRaHTP4H3Ic=
Subject key identifier:   41:1E:D9:7D:82:E4:07:5C:ED:F0:AF:7C:BB:EE:88:40:0C:24:C5:99
Certificate issuer:       /CN=E3456EBCA0328BC292A95D7115EAC65C1AE357FE
Certificate serial:       297B7B3A1265D713962EDA13A3B4B221BF7E5712
Authority key identifier: E3:45:6E:BC:A0:32:8B:C2:92:A9:5D:71:15:EA:C6:5C:1A:E3:57:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34362e302f32332d3233203d3e20323639303737.roa
Signing time:             Mon 18 Dec 2023 20:21:16 +0000
ROA not before:           Mon 18 Dec 2023 20:16:16 +0000
ROA not after:            Mon 16 Dec 2024 20:21:16 +0000
asID:                     269077
IP address blocks:        45.179.46.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7b:7b:3a:12:65:d7:13:96:2e:da:13:a3:b4:b2:21:bf:7e:57:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3456EBCA0328BC292A95D7115EAC65C1AE357FE
        Validity
            Not Before: Dec 18 20:16:16 2023 GMT
            Not After : Dec 16 20:21:16 2024 GMT
        Subject: CN=411ED97D82E4075CEDF0AF7CBBEE88400C24C599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:67:14:43:85:89:c4:9d:1f:20:2c:bd:9e:b0:
                    e8:0c:d7:91:14:22:e0:3c:c8:c8:55:a1:1d:15:12:
                    e4:3c:e4:7e:92:10:15:1c:80:3e:bc:f4:2b:f1:ea:
                    8a:99:1e:8f:68:7d:b3:4f:2e:7e:8f:ae:c8:2c:1b:
                    aa:1e:12:50:99:53:df:b8:ba:d1:58:50:ca:33:05:
                    d5:ae:ac:c6:52:63:68:62:6f:dc:3b:2b:6f:ef:c2:
                    36:87:69:74:07:7c:f6:cd:a0:bf:e9:90:ec:79:30:
                    d8:2d:91:63:ea:59:8e:bb:99:21:ac:87:c2:3d:e8:
                    51:5b:14:fd:6c:a5:0b:20:41:26:a5:d6:79:81:af:
                    54:c9:0e:ab:be:1e:9e:af:ee:e0:c3:63:0c:cd:bf:
                    91:ed:7c:f8:f8:27:4e:1c:c3:a7:2c:54:fe:ac:d5:
                    5d:d8:c3:b7:bd:fb:9b:98:fd:e9:b3:bf:94:74:a9:
                    9f:f4:e8:75:8c:1f:24:c7:3a:ff:16:4b:b4:3d:f8:
                    3b:2f:8d:2c:20:52:ce:1e:f3:47:63:42:b3:cf:df:
                    bf:b8:76:17:82:10:fc:fd:87:4a:df:c3:f8:81:89:
                    af:b9:bd:26:36:3f:b1:6a:23:d1:4e:f4:58:cb:1f:
                    85:aa:24:3f:4a:42:c2:48:de:5d:7a:24:13:b1:40:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1E:D9:7D:82:E4:07:5C:ED:F0:AF:7C:BB:EE:88:40:0C:24:C5:99
            X509v3 Authority Key Identifier:
                keyid:E3:45:6E:BC:A0:32:8B:C2:92:A9:5D:71:15:EA:C6:5C:1A:E3:57:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34362e302f32332d3233203d3e20323639303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:2a:ad:c7:08:5e:d3:81:4c:f2:4c:07:94:d0:c1:fd:96:03:
         03:7a:cc:c0:45:5e:8b:db:2d:2d:ea:5d:15:6a:af:71:cc:c9:
         88:42:b5:54:78:45:d5:85:80:46:b3:9c:ec:82:2f:37:6b:84:
         ec:d2:a6:ed:73:ad:2c:b8:51:f0:ad:80:cc:ad:aa:6a:f5:66:
         da:f7:12:ca:5e:39:13:f7:b7:0a:3a:1a:7f:8e:99:09:b4:43:
         6c:11:03:a7:65:ba:1f:4e:45:15:49:da:a9:44:f3:b0:6f:00:
         13:7a:0c:bf:be:28:36:88:bb:db:b3:9d:f9:7b:bd:10:e0:13:
         6a:e7:0e:e3:cd:4f:4e:ed:07:84:06:e8:db:ed:4e:ef:54:3b:
         50:e4:8c:9f:5b:85:4c:d7:e2:10:3f:9f:56:f4:57:08:81:b2:
         66:f2:b3:a8:7d:a7:a6:1f:45:fe:dc:c0:9c:d0:4e:a2:74:55:
         87:54:f0:1d:1b:9f:4c:31:cf:e3:21:8b:fd:66:c1:95:de:63:
         a6:93:24:1e:87:73:85:a3:f8:ab:8a:7e:7c:b7:5c:f3:f3:01:
         50:8d:70:33:1b:ef:ac:13:d7:e9:f0:3c:1b:25:0c:b0:ab:50:
         ff:02:68:01:0a:3d:8c:e1:9f:7c:0c:dd:10:ab:83:6b:40:cb:
         41:be:16:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org