Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa
File:                     34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa (raw, json)
Hash identifier:          Ag6Z6m+KXFDy5r9xFJZ0L8hEWdGn2NPKNYTk+Ei3RhA=
Subject key identifier:   5C:8F:EA:59:2E:2A:1B:39:1F:48:CD:46:E6:D7:B9:56:1D:FC:7D:86
Certificate issuer:       /CN=41D79545AAAF88602FBF313AED62F3EF005B9C93
Certificate serial:       4188974A03DADA637F2B7C13A85D275925463635
Authority key identifier: 41:D7:95:45:AA:AF:88:60:2F:BF:31:3A:ED:62:F3:EF:00:5B:9C:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D79545AAAF88602FBF313AED62F3EF005B9C93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa
Signing time:             Thu 25 Jan 2024 03:52:20 +0000
ROA not before:           Thu 25 Jan 2024 03:47:20 +0000
ROA not after:            Thu 23 Jan 2025 03:52:20 +0000
asID:                     271599
IP address blocks:        45.174.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:88:97:4a:03:da:da:63:7f:2b:7c:13:a8:5d:27:59:25:46:36:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41D79545AAAF88602FBF313AED62F3EF005B9C93
        Validity
            Not Before: Jan 25 03:47:20 2024 GMT
            Not After : Jan 23 03:52:20 2025 GMT
        Subject: CN=5C8FEA592E2A1B391F48CD46E6D7B9561DFC7D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:94:25:b2:fb:5f:7c:24:93:14:16:c6:ab:d7:
                    17:de:54:90:02:1d:b1:55:f8:20:a0:26:41:cb:8a:
                    1d:3d:de:d2:b3:6a:b8:34:ff:6f:d9:7a:0c:a6:cb:
                    b4:47:d7:9b:92:a1:8f:65:a2:d1:25:6b:10:d1:f5:
                    e9:29:79:50:f5:07:28:a2:13:55:e0:4c:c2:b5:c6:
                    75:29:e3:61:4c:83:46:53:8e:19:c8:d0:21:bc:c9:
                    61:e8:12:46:f1:a7:98:7b:e5:ad:22:35:17:aa:4d:
                    22:dc:ec:fd:a5:49:1b:7b:82:94:d6:01:31:93:05:
                    d0:9b:cf:70:7c:73:af:c8:0e:e0:01:52:1e:8a:99:
                    c8:28:4c:10:fc:d5:8f:8a:21:4d:11:1e:7d:f9:0d:
                    f8:c5:09:86:07:56:5a:f1:a8:c6:c4:a4:1f:56:db:
                    7b:5a:fa:12:78:1d:09:bd:9a:47:2d:a8:e6:ae:56:
                    6f:28:90:a5:43:0d:38:f0:a1:15:90:77:26:27:7b:
                    c2:a1:25:de:ef:45:79:af:49:0f:05:68:ff:07:a9:
                    d2:7d:b9:3e:4a:50:27:67:96:3e:78:68:cd:20:0f:
                    aa:21:15:1e:0a:39:27:f8:cc:b1:98:71:6f:7b:7e:
                    0b:2a:0b:c1:4e:0d:d1:43:34:5c:e3:55:60:f9:1f:
                    83:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8F:EA:59:2E:2A:1B:39:1F:48:CD:46:E6:D7:B9:56:1D:FC:7D:86
            X509v3 Authority Key Identifier:
                keyid:41:D7:95:45:AA:AF:88:60:2F:BF:31:3A:ED:62:F3:EF:00:5B:9C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/41D79545AAAF88602FBF313AED62F3EF005B9C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D79545AAAF88602FBF313AED62F3EF005B9C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/1/34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:a2:df:81:4e:9f:b2:55:7a:81:04:13:5c:2b:93:06:82:
         73:a3:c3:8a:f8:2b:c6:20:71:8c:86:c0:5c:d9:64:7a:44:c0:
         73:90:c3:8f:9d:73:0b:0a:e6:bf:a9:46:25:2d:c3:3f:dd:54:
         bd:6b:0a:64:e5:32:8f:e4:13:d9:66:cb:62:5c:b1:aa:71:68:
         46:8d:88:d2:33:3c:2a:e5:e6:b2:0d:94:bc:7f:98:5e:06:4a:
         9c:16:2e:52:fe:9d:51:63:e6:18:db:c7:ec:48:06:65:dc:fd:
         3f:93:73:d6:e7:d6:73:4b:f1:c2:79:d6:79:88:71:2a:fb:1b:
         04:71:6c:39:3c:48:7e:9c:3d:9e:db:a0:80:3f:3f:27:29:70:
         bf:43:78:06:f6:e7:b9:1a:dd:12:be:8e:e1:20:0c:4c:7c:fd:
         b5:27:f7:84:bd:4f:a7:87:f7:15:f3:8e:99:a7:49:a6:b6:22:
         83:14:23:68:a8:11:f1:1a:36:2a:82:c5:b6:63:1b:7c:0f:a1:
         cc:a0:57:63:31:5c:6d:13:30:1c:a1:1b:12:12:a2:a3:ca:54:
         27:1b:e3:6f:1c:6c:a7:f0:61:96:7a:0b:8c:c4:96:72:c0:1d:
         37:18:1b:2e:71:3e:f3:de:82:02:66:34:9f:ac:6c:05:e0:c6:
         90:e5:8e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org