Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/34352e3138372e3133362e302f32322d3332203d3e20323639343739.roa
File:                     34352e3138372e3133362e302f32322d3332203d3e20323639343739.roa (raw, json)
Hash identifier:          DZvt/BwkUlj5WWW1sZbjpPOK4qHfWmBg5BzoVlgUKD4=
Subject key identifier:   2F:1F:65:09:77:06:34:D9:6C:2F:EA:57:0A:73:71:35:0A:5F:85:81
Certificate issuer:       /CN=3F8788D11DDD58B2DA59187B48D648DCFC2612BC
Certificate serial:       3E6558CF97F3AE534A9EA09C19E23FBD8E63B548
Authority key identifier: 3F:87:88:D1:1D:DD:58:B2:DA:59:18:7B:48:D6:48:DC:FC:26:12:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/34352e3138372e3133362e302f32322d3332203d3e20323639343739.roa
Signing time:             Thu 14 Dec 2023 20:57:20 +0000
ROA not before:           Thu 14 Dec 2023 20:52:20 +0000
ROA not after:            Thu 12 Dec 2024 20:57:20 +0000
asID:                     269479
IP address blocks:        45.187.136.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:65:58:cf:97:f3:ae:53:4a:9e:a0:9c:19:e2:3f:bd:8e:63:b5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F8788D11DDD58B2DA59187B48D648DCFC2612BC
        Validity
            Not Before: Dec 14 20:52:20 2023 GMT
            Not After : Dec 12 20:57:20 2024 GMT
        Subject: CN=2F1F6509770634D96C2FEA570A7371350A5F8581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:83:71:05:d0:09:54:42:f1:4b:03:64:01:
                    fc:45:df:58:c2:d8:19:8f:4e:eb:36:93:d9:24:ba:
                    08:93:11:84:93:52:51:15:9d:e3:db:10:42:98:1b:
                    0b:85:45:cd:3e:29:14:57:8c:83:e9:25:23:20:ec:
                    b2:da:04:5d:e4:27:03:e1:31:2f:5b:c5:85:bd:0a:
                    f7:d2:ff:c0:c5:c5:c3:08:1b:dd:e2:d0:f4:80:ce:
                    e4:92:c6:c5:82:99:10:6e:e3:fd:3e:86:f6:ab:ad:
                    7d:79:15:3e:74:33:58:cd:ca:da:21:09:a2:c7:c5:
                    db:b6:ce:0f:a0:8f:6d:e4:4e:10:95:a1:53:eb:55:
                    7c:fb:8f:cd:c5:9e:1f:da:14:06:7b:b2:1a:ea:da:
                    f4:07:d2:78:f4:78:ff:d9:95:ce:4b:f7:c2:dc:e6:
                    3e:39:3a:d6:94:fc:76:5a:29:d5:34:74:dc:a5:73:
                    eb:a8:f1:63:d6:7b:37:64:28:ae:e1:ad:83:9f:d7:
                    af:60:89:81:3f:c0:f5:54:1d:f8:78:ad:4b:2c:2f:
                    88:32:bd:7b:f1:b5:66:4d:8c:ad:18:98:a4:01:b8:
                    ec:f3:11:bb:0b:b4:39:25:24:1f:b4:a1:f5:62:36:
                    4a:e3:64:5c:72:e0:c5:bd:28:cd:ca:e0:ce:3d:7b:
                    f7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1F:65:09:77:06:34:D9:6C:2F:EA:57:0A:73:71:35:0A:5F:85:81
            X509v3 Authority Key Identifier:
                keyid:3F:87:88:D1:1D:DD:58:B2:DA:59:18:7B:48:D6:48:DC:FC:26:12:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/34352e3138372e3133362e302f32322d3332203d3e20323639343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:36:28:25:73:d7:5e:fb:e1:6e:2b:4f:0a:80:86:21:85:ea:
         9d:91:77:c2:90:43:c4:71:24:58:83:5c:7a:0f:0e:94:be:45:
         cd:7f:9e:12:7d:fa:1d:a9:bb:78:22:0b:b0:4c:84:ad:9e:d1:
         db:16:34:7a:bf:2e:a8:84:2e:6a:10:e8:60:1a:38:21:62:ea:
         ad:c8:56:68:fa:06:98:1d:29:1f:d6:ea:44:8d:ab:39:a3:30:
         af:bc:45:3a:5c:0c:ea:cb:74:d8:ea:44:ac:90:31:c4:df:d1:
         d8:58:d3:6c:38:f6:40:bc:49:81:f1:e8:0c:ce:47:82:d3:fd:
         7e:8d:16:fb:88:b0:84:68:4d:89:8d:ca:1a:2f:59:ac:7d:53:
         ac:bf:c7:73:82:29:7d:97:a3:f0:52:9f:81:93:2e:35:d0:e8:
         58:35:82:28:61:6e:e3:e7:e8:18:d7:6d:6c:d3:93:5f:34:e2:
         fd:70:75:06:83:d2:df:c9:42:04:cb:cf:47:8b:ad:28:b3:cc:
         b2:11:3f:ff:6e:ec:a3:91:f4:41:57:1d:46:75:c4:54:59:55:
         40:72:6e:25:ea:78:db:b4:52:e2:7b:d4:75:d7:59:4e:c1:e6:
         9b:85:9c:3c:43:d1:d9:3b:26:59:78:f4:47:68:6a:eb:0c:06:
         2f:00:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org