Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/34352e3137342e3139362e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139362e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          cd2mUJuVJtWUmoHTKiiVkA7H4P13U174ovTrl2eozV8=
Subject key identifier:   E2:0D:AD:E3:BF:BA:E4:D9:DB:03:C8:B9:81:DF:03:16:9A:8D:9D:71
Certificate issuer:       /CN=41D79545AAAF88602FBF313AED62F3EF005B9C93
Certificate serial:       0522952AAF1DED8A56D71E374E664213B775FDC1
Authority key identifier: 41:D7:95:45:AA:AF:88:60:2F:BF:31:3A:ED:62:F3:EF:00:5B:9C:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D79545AAAF88602FBF313AED62F3EF005B9C93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/34352e3137342e3139362e302f32342d3234203d3e20323731353939.roa
Signing time:             Thu 25 Jan 2024 03:52:20 +0000
ROA not before:           Thu 25 Jan 2024 03:47:20 +0000
ROA not after:            Thu 23 Jan 2025 03:52:20 +0000
asID:                     271599
IP address blocks:        45.174.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:22:95:2a:af:1d:ed:8a:56:d7:1e:37:4e:66:42:13:b7:75:fd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41D79545AAAF88602FBF313AED62F3EF005B9C93
        Validity
            Not Before: Jan 25 03:47:20 2024 GMT
            Not After : Jan 23 03:52:20 2025 GMT
        Subject: CN=E20DADE3BFBAE4D9DB03C8B981DF03169A8D9D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0b:08:a9:a0:31:fa:a3:6b:87:fd:55:e0:c8:
                    ed:28:63:b2:f4:aa:4e:17:32:41:49:33:90:f3:3f:
                    9e:ad:3e:ef:dc:20:1c:89:00:5b:08:49:39:b6:fa:
                    f4:42:96:7b:fd:d9:d3:4c:0f:e3:99:a0:b8:7b:3a:
                    b4:0f:a9:0a:31:cd:f4:ac:bc:dc:e5:37:63:9e:dc:
                    2d:15:68:e4:cc:65:a5:b0:d3:78:89:d9:e1:2c:2f:
                    1e:d9:eb:fd:35:20:5f:a8:5b:bb:18:3a:27:6e:56:
                    e1:40:20:e3:6d:63:2c:06:b3:54:58:01:5f:cf:97:
                    df:9b:c9:dc:9f:ed:3f:b4:32:a4:57:98:1f:6c:ed:
                    7c:55:e1:59:7b:82:f0:4d:fd:ff:81:da:91:56:74:
                    14:35:f5:96:db:d6:45:a6:cc:78:52:61:82:d0:4c:
                    10:4c:d4:cf:81:c9:24:d3:58:09:57:a8:e0:f7:68:
                    58:78:c4:47:2e:8e:d5:e5:bc:3c:66:ff:37:54:66:
                    24:3b:1b:f3:b3:4e:67:a7:b9:dd:a1:ab:36:41:42:
                    c3:e9:c6:ac:60:47:b3:18:33:a0:09:0e:17:0f:e3:
                    8e:ca:14:8d:9d:59:a2:a4:55:77:fe:1a:e9:5a:5f:
                    a1:6c:25:40:05:e3:74:8e:4f:64:49:74:c2:27:41:
                    d7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0D:AD:E3:BF:BA:E4:D9:DB:03:C8:B9:81:DF:03:16:9A:8D:9D:71
            X509v3 Authority Key Identifier:
                keyid:41:D7:95:45:AA:AF:88:60:2F:BF:31:3A:ED:62:F3:EF:00:5B:9C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/41D79545AAAF88602FBF313AED62F3EF005B9C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D79545AAAF88602FBF313AED62F3EF005B9C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/34352e3137342e3139362e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:24:df:46:b0:ca:ce:1b:d0:67:38:a6:87:9a:84:aa:7c:7b:
         b4:e5:ec:bc:10:47:d5:ff:d0:8e:71:8d:5b:61:e4:b8:14:7e:
         3d:39:fb:ef:e8:b4:c7:3d:2f:4a:11:1f:ad:28:1f:e0:05:f7:
         c1:d7:ac:32:5c:97:a8:ba:25:3b:71:b3:bf:2b:e1:92:62:b5:
         dc:10:8a:f9:d2:32:cb:d9:71:5b:f4:e4:22:90:44:5c:d0:31:
         90:2d:b7:ea:16:eb:1d:57:9a:68:ce:31:dd:d2:2f:4b:8c:1d:
         78:fd:63:c6:e6:ec:ae:18:ac:2d:ac:d1:f3:0a:99:cc:f4:76:
         a3:dd:92:07:16:ce:e3:5a:46:c1:10:fa:5c:dd:fe:66:ea:6c:
         f8:f2:6e:45:04:13:2d:4e:3a:67:f7:2c:fb:10:1e:64:23:aa:
         47:c1:de:7e:e7:f0:f9:8d:9a:64:ea:21:f7:8b:9a:af:e6:d3:
         55:41:38:86:00:ad:ad:ff:f3:39:74:d1:99:1e:e4:5f:a0:cd:
         b5:05:20:cd:0b:88:dd:4f:fc:27:44:1b:bb:db:01:94:62:33:
         91:4f:06:58:ea:31:08:db:0f:2c:0a:ab:ed:d9:c1:d1:0f:df:
         fe:03:1b:5f:c2:29:6d:be:f6:d2:80:0f:d1:da:ba:83:e4:ec:
         8d:41:c7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:09 2024 by rpki-client on console-ams.rpki-client.org