Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/34352e342e3134302e302f32332d3233203d3e20323636303732.roa
File:                     34352e342e3134302e302f32332d3233203d3e20323636303732.roa (raw, json)
Hash identifier:          Bbbr7pLLYpnJiKcnM36Tntg7j6Rw862ta7zUhyr5lgw=
Subject key identifier:   1D:20:7D:3F:47:EF:EA:C4:FA:DA:09:37:0A:7A:E6:D9:7D:94:4F:86
Certificate issuer:       /CN=3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4
Certificate serial:       1DC6B5CD154F42C1C651FA6D0C0BA92397D7EF55
Authority key identifier: 3A:5B:DF:C2:76:B5:61:E7:9F:D3:A3:8E:D1:E2:58:3C:DF:3C:5E:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/34352e342e3134302e302f32332d3233203d3e20323636303732.roa
Signing time:             Thu 04 Apr 2024 05:31:53 +0000
ROA not before:           Thu 04 Apr 2024 05:26:53 +0000
ROA not after:            Thu 03 Apr 2025 05:31:53 +0000
asID:                     266072
IP address blocks:        45.4.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c6:b5:cd:15:4f:42:c1:c6:51:fa:6d:0c:0b:a9:23:97:d7:ef:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4
        Validity
            Not Before: Apr  4 05:26:53 2024 GMT
            Not After : Apr  3 05:31:53 2025 GMT
        Subject: CN=1D207D3F47EFEAC4FADA09370A7AE6D97D944F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1a:62:4e:29:fa:ed:06:8f:f4:bf:ca:84:6e:
                    ef:e8:38:93:69:3d:80:a6:d5:c1:12:62:f5:da:08:
                    9d:e3:79:99:6b:ee:56:c9:77:ea:2b:c5:74:2d:a7:
                    ad:c4:c3:9d:03:a0:a4:44:33:6c:18:78:78:16:82:
                    af:50:4c:16:de:db:fc:93:ce:0c:7b:47:ce:e6:98:
                    d9:61:d3:a9:1b:dd:7d:b3:bb:f1:50:82:a2:af:17:
                    55:7c:c5:11:c9:f2:6d:17:5a:cb:2a:64:4b:a1:83:
                    4c:21:34:b6:7b:99:6e:1e:ad:c8:20:ec:93:0e:e3:
                    0a:73:58:89:0f:3e:e3:72:b0:06:d2:b9:80:21:78:
                    71:3a:3d:cd:36:ed:d5:d2:aa:2d:90:5b:f3:37:bc:
                    d4:f1:c4:0e:5b:85:9c:c3:a0:62:76:bf:43:cf:e4:
                    c8:85:f1:7f:25:89:9f:6c:10:8f:4e:8b:80:97:e8:
                    d5:ce:54:9b:58:58:19:fc:5a:62:79:ac:df:ff:c3:
                    7e:0a:22:09:f6:3e:6a:21:38:e2:9e:4b:bd:1f:5c:
                    f6:3a:4f:12:56:aa:52:7f:1d:3b:92:6f:af:37:cd:
                    a9:76:f0:74:9d:9a:4a:fd:e1:92:5e:72:7d:0e:01:
                    0d:b3:84:15:72:55:b4:43:5f:0c:b7:57:0f:50:5d:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:20:7D:3F:47:EF:EA:C4:FA:DA:09:37:0A:7A:E6:D9:7D:94:4F:86
            X509v3 Authority Key Identifier:
                keyid:3A:5B:DF:C2:76:B5:61:E7:9F:D3:A3:8E:D1:E2:58:3C:DF:3C:5E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/34352e342e3134302e302f32332d3233203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:3d:8c:b7:be:91:7b:db:0e:76:c2:84:76:2b:3c:c0:49:fa:
         84:02:10:48:ad:12:7f:08:ec:2b:ff:a5:9e:3e:d0:d2:bb:e6:
         c8:c4:83:39:ed:c0:7e:04:11:ad:28:4f:02:f6:d5:86:7e:61:
         36:44:a1:06:ee:b9:b6:f7:83:a7:73:6a:46:9e:f3:3d:2b:41:
         f0:14:63:04:13:fa:64:3f:2f:42:f9:44:93:80:49:b0:89:a9:
         c3:0c:07:ec:75:92:6e:f5:47:4b:2b:13:3f:2d:7b:ba:d0:d7:
         fa:0e:c8:97:82:09:c6:7a:04:99:84:7c:76:92:48:35:76:52:
         f5:d9:ea:f4:75:91:b7:79:17:43:c6:c1:04:25:89:c7:a2:cf:
         f4:e4:d3:8f:c6:8b:7d:1a:3b:f4:df:f9:ed:32:41:8f:1e:16:
         5c:f7:e6:61:28:c8:c1:bd:4a:de:4b:a4:73:82:ee:90:2a:a8:
         bd:85:5e:96:f9:d4:50:2c:50:49:6a:ef:da:33:d7:ed:17:92:
         68:1e:2a:2c:e4:03:6f:60:cc:1e:92:c2:21:e9:90:ef:8e:6f:
         1e:1f:c8:fa:e0:17:6c:65:3f:3d:6d:63:1e:60:a6:dc:eb:7c:
         63:15:63:8c:70:71:73:08:29:72:21:d2:d2:25:db:f1:c0:86:
         5a:84:d8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org