Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139362e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139362e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          K2lU0StDj85KDLI7q2E0h1KX8+TSUYvOXjcJNFu32SU=
Subject key identifier:   69:C0:63:74:15:F1:F0:9C:E7:6B:4A:C0:9C:87:42:9D:2D:6E:3F:BF
Certificate issuer:       /CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
Certificate serial:       2735000B7429AF4293175C8A172B61DBB0BFF5B2
Authority key identifier: 3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139362e302f32342d3234203d3e20323731353939.roa
Signing time:             Thu 28 Mar 2024 22:04:53 +0000
ROA not before:           Thu 28 Mar 2024 21:59:53 +0000
ROA not after:            Thu 27 Mar 2025 22:04:53 +0000
asID:                     271599
IP address blocks:        45.174.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:35:00:0b:74:29:af:42:93:17:5c:8a:17:2b:61:db:b0:bf:f5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
        Validity
            Not Before: Mar 28 21:59:53 2024 GMT
            Not After : Mar 27 22:04:53 2025 GMT
        Subject: CN=69C0637415F1F09CE76B4AC09C87429D2D6E3FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:f3:b2:51:55:c9:c9:f0:15:01:31:d2:a4:
                    93:40:6d:18:5b:4c:13:8c:d0:8d:70:f8:80:51:5b:
                    5c:68:03:27:65:33:cd:0a:30:42:51:7f:f1:16:2d:
                    ee:82:66:7a:fc:01:9c:17:2f:75:d1:9f:c8:11:79:
                    6c:a1:7e:81:6a:f3:40:15:4a:89:52:04:53:5c:a8:
                    5f:f6:42:92:87:ca:75:64:79:ea:b8:96:2e:7d:5f:
                    eb:2b:7e:61:94:4c:e1:62:56:55:bf:8c:10:51:93:
                    5d:bb:ff:72:ad:75:e7:6d:cb:ef:fb:c6:0a:e5:3a:
                    a1:4c:3c:b8:63:fd:55:73:6f:e6:24:8c:1b:ce:55:
                    53:c7:b8:eb:3e:d5:8a:a3:1b:f8:1d:fb:9d:22:dc:
                    86:87:0c:b6:d5:d4:ba:d4:71:33:6d:31:44:8f:29:
                    2f:7d:91:98:a6:74:b8:ac:03:98:b0:02:08:2b:31:
                    f2:79:10:01:d2:6d:aa:7c:9e:25:91:fa:e8:46:66:
                    b2:53:4e:94:99:0a:16:32:67:23:b6:cc:07:8f:d0:
                    06:98:2a:ed:81:d8:4b:4a:8d:2a:40:5d:31:91:82:
                    2a:52:14:1b:e6:1f:b7:9f:e9:75:08:b7:80:95:5c:
                    77:bb:ac:33:e4:a9:d3:5a:b0:e0:98:c9:6f:83:64:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C0:63:74:15:F1:F0:9C:E7:6B:4A:C0:9C:87:42:9D:2D:6E:3F:BF
            X509v3 Authority Key Identifier:
                keyid:3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139362e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:3d:de:94:66:b8:fd:fc:50:0b:27:69:14:b7:7c:5b:94:05:
         9f:4b:84:0d:d3:12:d9:38:45:ed:a3:ab:7b:9e:f3:14:0a:62:
         61:d2:37:74:36:66:36:de:33:ac:8e:87:eb:91:11:43:a8:4e:
         de:a6:05:37:da:89:f4:95:48:12:89:57:55:89:f2:80:ac:49:
         f1:0e:26:fd:b1:d2:50:7a:51:22:9e:ee:0c:42:49:1b:53:ab:
         91:0f:ba:50:c5:3c:2c:bc:de:35:de:16:a1:88:fd:c4:10:f1:
         b9:c8:90:46:03:8b:c0:dd:34:fd:b0:9b:67:6f:e7:17:c8:38:
         60:33:e4:c4:4b:04:34:55:f4:26:33:71:6e:3e:be:f7:bf:2a:
         ee:cf:e5:ed:07:e6:dc:b9:f8:bd:25:e7:54:9c:30:f6:bb:00:
         bd:07:a5:41:08:08:0d:73:5e:01:52:66:a3:80:06:36:03:88:
         21:89:02:08:0e:82:8b:f1:0e:d2:39:2e:b4:de:6f:e2:e7:c8:
         a2:78:7c:8a:5b:99:8f:5e:46:b2:16:35:57:83:58:7c:28:24:
         78:00:8b:68:25:2f:d2:f5:4e:3e:c7:5f:41:20:fe:2e:bb:cb:
         8f:f0:34:9b:e6:69:28:dc:37:fa:b5:e1:5e:09:22:d9:15:4a:
         ea:ba:7d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org