Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          5hi1z3aX6ofX8guMizkMkebvTkvKysxtQ6aVb9mIG7E=
Subject key identifier:   1D:25:BB:FC:86:D0:F3:45:29:54:A7:24:11:7F:F9:DE:41:BC:48:54
Certificate issuer:       /CN=41D79545AAAF88602FBF313AED62F3EF005B9C93
Certificate serial:       5FF651C3F5CB25863FBD7BA58A31ACE874F2C4FE
Authority key identifier: 41:D7:95:45:AA:AF:88:60:2F:BF:31:3A:ED:62:F3:EF:00:5B:9C:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D79545AAAF88602FBF313AED62F3EF005B9C93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa
Signing time:             Thu 25 Jan 2024 03:52:19 +0000
ROA not before:           Thu 25 Jan 2024 03:47:19 +0000
ROA not after:            Thu 23 Jan 2025 03:52:19 +0000
asID:                     271599
IP address blocks:        45.174.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f6:51:c3:f5:cb:25:86:3f:bd:7b:a5:8a:31:ac:e8:74:f2:c4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41D79545AAAF88602FBF313AED62F3EF005B9C93
        Validity
            Not Before: Jan 25 03:47:19 2024 GMT
            Not After : Jan 23 03:52:19 2025 GMT
        Subject: CN=1D25BBFC86D0F3452954A724117FF9DE41BC4854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:de:95:b8:89:07:52:3a:77:f5:81:7f:90:
                    b0:b6:e1:0b:bf:94:aa:6e:eb:09:3d:ff:dc:e7:43:
                    a0:76:50:42:2f:d5:bb:3d:01:24:dc:30:a8:23:94:
                    cc:be:6f:3a:1b:55:ca:30:fd:43:7b:de:9b:f4:99:
                    66:a2:83:b5:34:22:e2:31:5b:e3:4a:91:03:8a:c9:
                    d0:50:9f:94:5f:74:0c:51:ec:b7:8e:0f:e5:63:a1:
                    6c:dd:e4:83:6d:78:11:1f:31:f3:27:bf:13:93:82:
                    4b:a3:44:1a:ea:5c:77:a2:b8:03:e5:79:9f:ee:79:
                    0e:ab:6e:85:37:7e:4a:e1:f8:ea:9e:de:e6:df:25:
                    42:ee:82:ff:a5:da:b9:0c:73:fc:75:7c:06:c7:f0:
                    47:82:e3:96:a0:57:4e:34:90:e4:6e:7c:26:30:24:
                    cd:3d:6f:4c:00:02:f1:2e:e4:19:e1:f4:01:32:41:
                    f8:ea:2f:fa:67:68:24:4c:7f:59:6b:e6:c6:35:87:
                    1b:c4:94:39:a9:a1:4c:ba:0e:35:c7:9a:74:09:32:
                    33:94:dd:9a:7e:0c:34:32:c3:5b:a1:22:a3:0a:42:
                    31:06:b0:d0:e2:9d:b2:9d:d1:7b:42:50:90:12:0d:
                    01:d0:ae:9b:3d:ba:f4:8b:41:3c:6c:3b:91:11:7a:
                    c7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:25:BB:FC:86:D0:F3:45:29:54:A7:24:11:7F:F9:DE:41:BC:48:54
            X509v3 Authority Key Identifier:
                keyid:41:D7:95:45:AA:AF:88:60:2F:BF:31:3A:ED:62:F3:EF:00:5B:9C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/41D79545AAAF88602FBF313AED62F3EF005B9C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D79545AAAF88602FBF313AED62F3EF005B9C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:5d:5f:51:97:d0:34:cf:7f:26:23:e3:3b:85:4e:7b:19:
         67:7f:49:91:b6:0f:38:a0:90:1b:90:33:3c:ed:35:8e:3d:7c:
         9d:94:70:35:77:96:43:1b:a8:69:5b:b8:2c:0d:f3:f0:f5:d0:
         b6:47:54:78:7d:45:3a:a8:bb:31:77:1a:ab:89:8d:3e:20:ca:
         a1:94:19:59:bb:88:9c:f5:9b:dc:7c:2b:bf:94:85:85:17:d5:
         dc:7f:42:f3:a3:23:99:6d:e2:73:b4:84:f2:4a:d0:f0:5a:ad:
         b9:75:61:33:04:66:e2:da:03:2f:81:45:81:b8:8f:2d:0d:be:
         2f:af:b9:02:c2:f0:b5:ba:e8:84:55:0e:e0:8b:a0:ed:87:ab:
         07:3c:25:9f:9d:31:d2:cc:c8:cc:37:b2:30:36:a6:21:ad:d6:
         69:6e:dd:12:96:d1:15:5d:e3:57:66:91:ae:9e:bb:f0:89:3b:
         97:97:36:a3:6b:8a:de:b4:cf:8a:42:fc:82:17:e0:5f:d3:33:
         7a:96:a1:ea:60:92:b3:10:3d:1e:81:3b:40:20:db:b2:10:b3:
         01:00:f4:c0:f1:20:66:de:5b:61:df:5b:ab:7e:8b:86:27:5f:
         41:d0:28:4c:7c:d4:a0:e1:79:f0:c7:fc:8e:f7:a5:e8:a0:76:
         2d:a6:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:09 2024 by rpki-client on console-ams.rpki-client.org