Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          E3HviC0YW6qGiHlNgeoDjBhzLx6JsY0yniLDZbnH+QY=
Subject key identifier:   CB:BF:50:01:62:D1:B6:64:BC:89:69:1D:90:23:FE:B3:74:66:62:A8
Certificate issuer:       /CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
Certificate serial:       26B25792091E60BCB9D464AA2991649D2BD0CCF2
Authority key identifier: 3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa
Signing time:             Thu 28 Mar 2024 22:04:53 +0000
ROA not before:           Thu 28 Mar 2024 21:59:53 +0000
ROA not after:            Thu 27 Mar 2025 22:04:53 +0000
asID:                     271599
IP address blocks:        45.174.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b2:57:92:09:1e:60:bc:b9:d4:64:aa:29:91:64:9d:2b:d0:cc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
        Validity
            Not Before: Mar 28 21:59:53 2024 GMT
            Not After : Mar 27 22:04:53 2025 GMT
        Subject: CN=CBBF500162D1B664BC89691D9023FEB3746662A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ad:1d:3e:79:49:45:93:ea:dd:d5:11:47:a8:
                    24:f7:e5:7b:66:bf:62:17:c6:6c:bc:b7:75:b4:d3:
                    08:81:cf:68:34:b4:c8:d9:a4:4f:04:9f:98:92:95:
                    a5:98:76:c4:bd:3c:af:3c:11:64:30:86:95:f9:aa:
                    e8:ad:5c:bf:4a:a4:97:64:96:87:5c:9c:79:97:8e:
                    e5:4d:c7:33:89:9c:01:99:ab:b1:22:55:92:fb:fe:
                    4f:56:6b:cf:d7:75:36:0f:b3:07:65:55:5d:cf:da:
                    46:91:01:dd:54:7e:11:60:24:74:75:d4:e4:5d:c5:
                    3d:00:8e:02:25:4a:44:94:5b:2c:64:20:0e:e1:c1:
                    24:99:b1:63:62:4b:29:4c:9a:6e:71:ac:02:f4:2d:
                    bb:de:7b:ed:83:7e:2e:b7:17:96:57:93:27:9a:86:
                    7a:cc:bd:75:b4:7d:b0:3a:07:83:be:18:78:b0:6d:
                    4b:b2:9e:57:64:34:cf:bb:5d:e4:82:5f:4d:9b:6e:
                    f1:44:61:af:85:dc:2e:5e:2d:60:d2:e0:93:48:39:
                    60:b5:eb:d9:d6:76:64:66:52:09:19:e2:5d:c0:7f:
                    fe:26:22:b5:3e:68:13:ca:f2:20:a6:66:3b:61:2d:
                    34:7a:fb:73:6a:6f:ac:46:f6:4c:c9:c4:8f:7c:38:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BF:50:01:62:D1:B6:64:BC:89:69:1D:90:23:FE:B3:74:66:62:A8
            X509v3 Authority Key Identifier:
                keyid:3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d2:06:37:72:0f:85:03:40:9a:11:01:11:15:67:ff:1a:b8:
         2b:43:66:21:e6:e2:f8:6e:8b:c8:92:20:52:f4:96:19:04:c5:
         e7:6d:df:a8:06:5d:b1:d3:d9:b0:0f:a1:cd:73:18:31:19:27:
         9b:8b:0e:26:a8:3a:57:2f:27:80:52:72:49:2c:e1:06:ad:79:
         de:8b:5a:40:9f:53:89:7d:8a:1b:39:1d:ce:fe:2b:8f:fa:ac:
         71:b9:c1:74:e9:46:3a:45:c3:09:61:46:d2:b2:c3:28:46:90:
         a9:53:ea:de:d4:46:d8:5e:82:de:e9:5e:c2:67:2d:67:48:74:
         bf:8a:db:9d:ee:e4:63:8d:93:50:8f:7a:b5:cd:fb:9a:2b:1e:
         04:29:0f:13:c7:34:a5:c6:70:15:2a:f3:c6:ce:0b:27:10:f4:
         a8:9e:99:f1:3a:cc:76:00:a6:0c:42:8d:42:f1:6a:31:d3:fa:
         3b:11:12:42:f7:7d:6d:0e:78:de:20:c0:e7:19:11:43:68:75:
         33:50:06:a9:1f:47:40:0b:43:5a:e2:b3:e3:33:f3:8e:a0:aa:
         5f:09:2e:c0:ba:00:8f:f2:f8:f6:9a:bc:0b:07:70:b3:66:07:
         73:4d:48:c1:4d:89:db:58:82:f6:56:72:07:ca:a4:38:3a:8e:
         82:d0:da:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:09 2024 by rpki-client on console-ams.rpki-client.org