Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37322e302f32342d3234203d3e203631353931.roa
File:                     34352e3233372e37322e302f32342d3234203d3e203631353931.roa (raw, json)
Hash identifier:          QteRgKC7tO/oFSG4/c9bQtvVey3XXfUutYoogRdO8mw=
Subject key identifier:   ED:A4:94:A5:47:1F:ED:01:EA:F2:19:DA:76:7A:CC:36:43:F2:C2:03
Certificate issuer:       /CN=177534573015FFF667FEFF6833F132D1839610DB
Certificate serial:       2C33890FF293467EB87744BFAE3AC367C6156C2A
Authority key identifier: 17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37322e302f32342d3234203d3e203631353931.roa
Signing time:             Wed 15 Nov 2023 13:00:00 +0000
ROA not before:           Wed 15 Nov 2023 12:55:00 +0000
ROA not after:            Wed 13 Nov 2024 13:00:00 +0000
asID:                     61591
IP address blocks:        45.237.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:33:89:0f:f2:93:46:7e:b8:77:44:bf:ae:3a:c3:67:c6:15:6c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177534573015FFF667FEFF6833F132D1839610DB
        Validity
            Not Before: Nov 15 12:55:00 2023 GMT
            Not After : Nov 13 13:00:00 2024 GMT
        Subject: CN=3082010A0282010100E6BCC89BD553F5B36C3E0174A1CB61024218D80F4521BC010EF1393531350C1AA9758C25DC7839BDCBFBF270E4990854622476A2516FE4A2C80A3188F91DCA217346ADC5F05A908907C28B3D4AC4D5B746BBF49D8A25F318134CE93DAED52560B87D6777208AC7A9BA99D4CD1D5835142277E4328AE7C8F77E03C1D195B066A33695D6709C6DED787CAC3A5A40E9EAFB12203875CC376E4DF4D9BF516295251BFF69FF607177C9FE56ABFFCC34144560F0FF7F143B86DFE2908253A5E26C721480706DA612A34198F7B68F61FA858B8CFDAF210EA8BF830B4BF3D6925ABBBC68B941668A6F4029D1BD943AE0259060F3B82DDF73D3C3F362C5677819E99CA2DD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bc:c8:9b:d5:53:f5:b3:6c:3e:01:74:a1:cb:
                    61:02:42:18:d8:0f:45:21:bc:01:0e:f1:39:35:31:
                    35:0c:1a:a9:75:8c:25:dc:78:39:bd:cb:fb:f2:70:
                    e4:99:08:54:62:24:76:a2:51:6f:e4:a2:c8:0a:31:
                    88:f9:1d:ca:21:73:46:ad:c5:f0:5a:90:89:07:c2:
                    8b:3d:4a:c4:d5:b7:46:bb:f4:9d:8a:25:f3:18:13:
                    4c:e9:3d:ae:d5:25:60:b8:7d:67:77:20:8a:c7:a9:
                    ba:99:d4:cd:1d:58:35:14:22:77:e4:32:8a:e7:c8:
                    f7:7e:03:c1:d1:95:b0:66:a3:36:95:d6:70:9c:6d:
                    ed:78:7c:ac:3a:5a:40:e9:ea:fb:12:20:38:75:cc:
                    37:6e:4d:f4:d9:bf:51:62:95:25:1b:ff:69:ff:60:
                    71:77:c9:fe:56:ab:ff:cc:34:14:45:60:f0:ff:7f:
                    14:3b:86:df:e2:90:82:53:a5:e2:6c:72:14:80:70:
                    6d:a6:12:a3:41:98:f7:b6:8f:61:fa:85:8b:8c:fd:
                    af:21:0e:a8:bf:83:0b:4b:f3:d6:92:5a:bb:bc:68:
                    b9:41:66:8a:6f:40:29:d1:bd:94:3a:e0:25:90:60:
                    f3:b8:2d:df:73:d3:c3:f3:62:c5:67:78:19:e9:9c:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:94:A5:47:1F:ED:01:EA:F2:19:DA:76:7A:CC:36:43:F2:C2:03
            X509v3 Authority Key Identifier:
                keyid:17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/177534573015FFF667FEFF6833F132D1839610DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37322e302f32342d3234203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:b3:5a:e7:e6:5e:54:5f:c4:07:c1:93:eb:3a:1b:ec:6c:0a:
         f5:d4:68:81:7b:d9:43:fe:ee:66:75:8e:d1:91:85:d9:41:ce:
         ac:53:82:0e:ea:06:1d:2e:85:84:d0:a4:fe:58:4a:0f:60:2f:
         5a:3c:ea:2e:fd:10:88:df:6c:5f:96:ef:e0:47:51:88:f8:15:
         47:14:84:9e:f7:88:1d:1b:3f:a1:b9:b1:03:92:f5:df:23:38:
         35:6e:e3:12:7c:58:60:7f:cb:cf:f5:8d:6a:7b:77:7a:de:94:
         fc:a1:e1:cd:b2:cd:10:cb:49:c8:3e:d3:a2:f4:84:cf:57:72:
         07:58:6b:a0:f3:82:60:74:a5:db:59:27:4a:6d:23:42:66:75:
         52:5a:ed:fc:c9:ed:3b:5a:cf:e9:26:9d:b6:e6:56:09:db:87:
         a2:39:26:f8:33:ff:27:65:7e:16:e2:e6:db:04:71:d6:48:66:
         86:b6:68:dc:47:92:9c:d5:59:70:89:19:ca:39:e3:4c:35:89:
         3d:cb:f4:89:2d:88:a9:c2:d5:2a:9d:4e:1f:f4:5e:69:e7:e2:
         87:9f:d6:e5:5d:c6:e7:b8:d1:99:69:1f:dc:9b:31:72:a0:66:
         3e:9d:2d:e2:c4:97:c8:f3:a4:fe:86:60:97:9c:08:59:34:25:
         4d:07:81:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org