Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/34352e342e3134322e302f32332d3233203d3e20323636303732.roa
File:                     34352e342e3134322e302f32332d3233203d3e20323636303732.roa (raw, json)
Hash identifier:          StbdBtjUyj4BLqAQvrmeLRSZsIIvWauDmbUaYe/mkso=
Subject key identifier:   3E:08:5C:44:3A:E2:FF:0C:4A:3F:19:C4:3B:38:3F:A7:0C:08:8D:E2
Certificate issuer:       /CN=3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4
Certificate serial:       343997B7DE62F70F02282361690780C4DD9AD60A
Authority key identifier: 3A:5B:DF:C2:76:B5:61:E7:9F:D3:A3:8E:D1:E2:58:3C:DF:3C:5E:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/34352e342e3134322e302f32332d3233203d3e20323636303732.roa
Signing time:             Thu 04 Apr 2024 05:31:54 +0000
ROA not before:           Thu 04 Apr 2024 05:26:54 +0000
ROA not after:            Thu 03 Apr 2025 05:31:54 +0000
asID:                     266072
IP address blocks:        45.4.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:39:97:b7:de:62:f7:0f:02:28:23:61:69:07:80:c4:dd:9a:d6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4
        Validity
            Not Before: Apr  4 05:26:54 2024 GMT
            Not After : Apr  3 05:31:54 2025 GMT
        Subject: CN=3E085C443AE2FF0C4A3F19C43B383FA70C088DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3a:97:68:6f:62:9c:87:8a:0c:7f:41:15:df:
                    fb:19:e9:7b:f4:b6:3e:05:80:79:cd:9a:13:ae:93:
                    77:85:fd:c6:6f:17:1d:26:30:4d:a2:c0:ce:fc:32:
                    c9:96:30:09:14:2b:02:55:8a:38:e3:8e:c9:74:3a:
                    eb:14:fc:97:1d:bc:f9:ab:9b:d3:8a:4e:57:ae:00:
                    01:2c:a4:66:9c:d1:6c:a4:c7:63:d8:f3:e8:ed:79:
                    12:71:42:bf:fd:78:26:f5:15:73:c6:73:78:0d:31:
                    28:17:68:0d:b7:8b:b3:c9:ba:05:21:ac:0f:88:34:
                    f4:dd:4d:dd:f3:38:39:f1:73:cd:12:14:fc:1c:59:
                    46:cb:8f:b1:5a:61:13:51:e1:7b:e1:c0:7b:24:e4:
                    3d:bd:7e:98:67:98:3e:c0:5d:f4:d1:d9:d4:ee:8d:
                    98:00:e7:fa:ac:5e:19:d9:0b:e8:ad:43:82:61:41:
                    3f:bb:50:55:9c:3d:15:f5:4b:84:3d:38:81:d0:32:
                    23:b2:81:38:5a:e7:8a:05:e3:96:74:35:e1:87:98:
                    4c:90:cc:b3:6f:5b:ae:f0:d9:3b:f3:1a:da:2f:0f:
                    fb:9e:ac:11:86:fe:10:bf:a8:64:ba:79:d0:ea:55:
                    3a:ea:7a:b0:45:6d:f2:c2:37:16:32:3a:a2:fc:b7:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:08:5C:44:3A:E2:FF:0C:4A:3F:19:C4:3B:38:3F:A7:0C:08:8D:E2
            X509v3 Authority Key Identifier:
                keyid:3A:5B:DF:C2:76:B5:61:E7:9F:D3:A3:8E:D1:E2:58:3C:DF:3C:5E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/34352e342e3134322e302f32332d3233203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:d3:9f:9c:49:65:8a:fe:0d:2a:24:96:54:21:1e:3f:56:
         43:0c:05:20:67:fe:b6:f3:3e:7d:3e:7e:35:1b:29:3d:c6:7c:
         25:d6:3a:d3:28:75:78:c9:a3:1e:f9:a0:0d:56:4b:a7:81:8f:
         27:81:9b:ef:0c:8b:c1:24:6b:8f:aa:c9:9a:11:d4:c5:41:a5:
         a8:3f:d8:ea:d0:40:09:6f:81:9e:fe:bf:20:7f:d8:d4:a1:35:
         e3:0f:35:69:a5:90:16:e7:10:c5:5b:41:e9:bc:e5:cf:97:f0:
         3e:8a:9c:23:f3:d3:47:72:6c:05:6b:1b:44:1c:ca:3d:45:6d:
         4a:0f:e0:a9:d6:63:dc:67:81:82:e9:a2:1c:13:bf:59:fe:6d:
         90:5d:b2:50:ff:03:14:11:f1:e8:1c:da:f0:ee:19:a6:00:59:
         89:80:ab:a9:2d:3f:c2:fa:66:df:85:a3:c4:fe:c0:94:a3:b5:
         ae:9b:54:e6:9c:22:0f:ab:b2:f5:06:b0:41:b8:ec:12:57:bc:
         25:dd:2d:bf:65:a8:eb:a0:e8:f3:fa:56:41:19:e1:e6:28:00:
         bc:16:2a:e1:34:11:3d:0c:31:86:94:42:75:ca:83:14:5d:8d:
         fe:da:e2:f2:6a:49:06:bd:05:66:94:3a:e2:6a:c5:0b:fa:0b:
         08:11:32:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org