Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa
File:                     34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa (raw, json)
Hash identifier:          gBs4CtRVEWd63OtmmhJQgNc/Uo5KFyHVrkZPenv4Lwg=
Subject key identifier:   EE:A4:FD:EB:E6:C3:91:AE:0F:BD:A6:0C:A1:B8:F6:76:47:5B:6F:25
Certificate issuer:       /CN=E391D45BA9D3292DBFB22F4152439B03F59996F3
Certificate serial:       42B89C48145E0FE5742B065214F9EB23165DB063
Authority key identifier: E3:91:D4:5B:A9:D3:29:2D:BF:B2:2F:41:52:43:9B:03:F5:99:96:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa
Signing time:             Mon 25 Mar 2024 20:25:17 +0000
ROA not before:           Mon 25 Mar 2024 20:20:17 +0000
ROA not after:            Mon 24 Mar 2025 20:25:17 +0000
asID:                     269529
IP address blocks:        45.188.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b8:9c:48:14:5e:0f:e5:74:2b:06:52:14:f9:eb:23:16:5d:b0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E391D45BA9D3292DBFB22F4152439B03F59996F3
        Validity
            Not Before: Mar 25 20:20:17 2024 GMT
            Not After : Mar 24 20:25:17 2025 GMT
        Subject: CN=EEA4FDEBE6C391AE0FBDA60CA1B8F676475B6F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:f6:2b:2f:7d:92:7c:15:73:f1:18:94:93:
                    81:bf:42:ed:73:2d:a8:76:7f:95:23:2e:be:8d:74:
                    1e:d2:64:7c:69:06:7d:93:96:b8:b6:a7:27:d3:ea:
                    16:f5:82:d3:83:fa:05:75:d6:58:1a:36:5a:22:12:
                    1f:97:06:62:d6:5d:e7:8b:63:32:83:d1:e9:3e:6f:
                    68:e2:79:be:9b:be:48:6b:69:61:97:72:2a:2d:04:
                    93:3f:a4:be:a4:da:cc:92:e3:83:4c:c6:d5:98:79:
                    4f:c0:15:31:9c:08:61:c7:54:2e:6d:79:0b:1a:95:
                    50:a8:92:26:69:9b:54:a7:d6:5e:34:f1:29:b9:8a:
                    e2:97:59:2e:19:a1:ce:0a:ee:c0:6b:c0:b7:92:d1:
                    95:a9:3e:48:0c:53:f2:4f:a5:91:29:3a:27:f0:20:
                    6f:e6:b6:91:4c:b5:df:a7:5b:31:d3:72:d0:91:8f:
                    21:97:d6:89:8b:4b:b5:6f:27:29:24:00:54:db:29:
                    8f:f6:bf:88:1d:3d:3c:1a:a7:6f:6f:f1:62:ba:fe:
                    40:b9:64:1b:53:fa:d4:38:e4:9b:2a:ba:c9:c1:32:
                    56:c3:20:bc:27:39:be:9d:0a:8c:2b:f0:e7:0e:0e:
                    c1:cc:2f:e3:72:63:54:23:ef:2e:48:20:ff:0a:f0:
                    05:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A4:FD:EB:E6:C3:91:AE:0F:BD:A6:0C:A1:B8:F6:76:47:5B:6F:25
            X509v3 Authority Key Identifier:
                keyid:E3:91:D4:5B:A9:D3:29:2D:BF:B2:2F:41:52:43:9B:03:F5:99:96:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:53:81:b3:a7:5c:c8:3b:40:d9:78:c6:b4:47:12:65:fb:c5:
         b1:af:9b:fa:fc:6b:21:d8:15:20:b6:f9:88:ad:9e:b7:27:d3:
         00:87:1b:6a:9b:f0:92:f6:c2:89:0a:79:9c:cc:f8:64:b5:5b:
         bd:b2:3a:79:22:a3:0f:8a:ad:05:f6:db:b1:fa:5a:c3:09:78:
         f5:45:da:34:a4:dc:25:ac:e3:68:a3:49:66:31:73:03:2d:aa:
         81:78:16:79:eb:5b:fc:b5:a1:23:22:1b:87:1c:f1:b6:b3:65:
         82:2c:7b:9b:e5:53:27:ab:4a:49:85:14:d1:3f:36:29:93:48:
         cb:b1:7b:51:e8:25:aa:88:13:de:a1:1d:07:b8:65:7c:01:2a:
         2d:b0:60:53:bb:e4:42:26:71:ed:24:45:eb:7e:c0:a5:7a:aa:
         01:22:96:34:54:53:ee:40:48:89:d8:51:12:e5:3f:9c:ad:0e:
         91:d0:9a:7d:d2:1d:6b:91:b5:a4:6a:75:3b:50:4b:fe:d6:48:
         bd:01:e3:44:f7:61:8e:07:17:07:42:b9:e6:7a:b9:1d:3e:9a:
         03:38:6e:f0:a4:34:b2:73:7f:01:84:51:4e:18:6a:d7:1d:db:
         74:0c:5a:c0:b6:d0:e8:fa:07:4a:1a:9f:bb:36:f0:9e:43:47:
         11:4c:bc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org