Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/0/34352e3233372e3139362e302f32322d3234203d3e20323638323934.roa
File:                     34352e3233372e3139362e302f32322d3234203d3e20323638323934.roa (raw, json)
Hash identifier:          X38AEDcRhYwd/SuysuQsLBs3iQK4BHclnWBijjQu/Gw=
Subject key identifier:   37:71:D4:23:12:10:F6:78:CD:69:4A:5C:F1:5B:DE:57:39:8F:1F:ED
Certificate issuer:       /CN=59DBC4ED219906FF7A8F7314F19AAE0AEE499977
Certificate serial:       78F4946A3906A946BCCDE3B21C428ED996D3026F
Authority key identifier: 59:DB:C4:ED:21:99:06:FF:7A:8F:73:14:F1:9A:AE:0A:EE:49:99:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59DBC4ED219906FF7A8F7314F19AAE0AEE499977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/0/34352e3233372e3139362e302f32322d3234203d3e20323638323934.roa
Signing time:             Tue 15 Aug 2023 20:00:26 +0000
ROA not before:           Tue 15 Aug 2023 19:55:26 +0000
ROA not after:            Tue 13 Aug 2024 20:00:26 +0000
asID:                     268294
IP address blocks:        45.237.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f4:94:6a:39:06:a9:46:bc:cd:e3:b2:1c:42:8e:d9:96:d3:02:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DBC4ED219906FF7A8F7314F19AAE0AEE499977
        Validity
            Not Before: Aug 15 19:55:26 2023 GMT
            Not After : Aug 13 20:00:26 2024 GMT
        Subject: CN=3771D4231210F678CD694A5CF15BDE57398F1FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:14:19:8f:9e:98:29:03:13:ee:66:13:f9:
                    93:6d:e0:6a:15:38:3e:2f:98:d4:85:19:35:a7:16:
                    e9:b0:df:90:d3:09:e3:7b:54:41:2b:65:2d:e9:5e:
                    fa:fc:d0:08:a1:88:0a:25:0e:fc:45:c4:72:c7:ce:
                    a8:74:a1:cd:cb:b5:00:d1:65:0a:57:8c:56:1b:d5:
                    a9:be:2b:f9:08:4b:a7:44:c0:af:25:f1:27:fd:f5:
                    08:28:45:04:4f:85:3f:e1:fc:c8:af:61:be:1f:1f:
                    a4:16:61:63:27:83:90:b4:25:38:3b:31:6b:9a:8d:
                    c8:b7:ee:e4:c6:17:73:6a:b0:f4:76:7a:99:c3:49:
                    62:04:f7:47:28:01:fe:fd:9c:1e:89:fa:93:35:1f:
                    cf:07:06:3d:3b:e0:a4:8f:ac:d9:c9:49:e1:c9:0a:
                    14:0d:00:6d:4d:16:98:8b:3f:6c:a4:e2:b0:2d:6b:
                    df:8e:27:c8:c9:18:fa:73:a1:98:77:2e:c2:b2:91:
                    15:f3:64:dc:31:eb:4f:98:69:b0:3c:8c:5f:a2:87:
                    ea:46:ff:39:04:2e:d0:7b:00:99:e4:a1:14:c8:b8:
                    d2:db:cb:d4:2b:b5:aa:96:81:19:b5:b2:1d:c6:5d:
                    72:ac:39:9e:ef:46:f8:09:3a:31:1d:23:94:29:ae:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:71:D4:23:12:10:F6:78:CD:69:4A:5C:F1:5B:DE:57:39:8F:1F:ED
            X509v3 Authority Key Identifier:
                keyid:59:DB:C4:ED:21:99:06:FF:7A:8F:73:14:F1:9A:AE:0A:EE:49:99:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/0/59DBC4ED219906FF7A8F7314F19AAE0AEE499977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59DBC4ED219906FF7A8F7314F19AAE0AEE499977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/0/34352e3233372e3139362e302f32322d3234203d3e20323638323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:b4:6d:94:82:94:4c:44:48:8a:63:57:c1:64:90:73:22:
         63:bb:1d:bb:68:8d:a0:5a:40:92:41:2b:32:46:42:67:fb:fb:
         02:13:f7:09:c8:55:64:d7:06:f7:d7:7b:d5:0d:af:c4:d3:e6:
         4c:2f:a9:b8:94:24:45:1a:17:51:64:38:95:05:b4:5a:7e:49:
         71:a6:4c:88:f3:e6:ff:48:08:ac:0f:0e:03:33:80:6f:f5:84:
         c9:0f:a5:07:61:6a:a5:7c:f0:d5:55:11:7f:bf:6a:d4:22:8f:
         ab:c6:29:0e:fa:c1:52:8d:5c:3d:b0:92:27:4d:64:ab:d7:37:
         03:32:c4:57:f8:75:58:42:c4:af:ca:89:93:91:4a:1f:73:70:
         fd:6c:29:fd:ab:f3:34:80:17:82:c8:7c:90:92:5c:78:af:e6:
         ae:77:a9:9d:20:05:6b:aa:c6:ab:c4:8b:9f:c9:d9:b3:36:1b:
         2e:ca:3b:71:a7:05:6f:97:5b:ef:53:29:1a:da:fd:7c:12:be:
         fa:c7:59:e1:42:4f:f6:17:a3:40:9f:24:5a:da:fc:6e:d1:a4:
         d1:91:ac:ec:90:9a:f5:f1:47:74:36:72:a1:06:6d:97:db:eb:
         d2:95:77:fe:1c:38:62:2c:cd:0e:02:1a:eb:10:f6:e3:49:6c:
         65:ab:31:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org