Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa
File:                     34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa (raw, json)
Hash identifier:          HArqa735v5egULXrz0NUCtnnubx/ENPVisbvuIJHugI=
Subject key identifier:   42:61:19:6F:34:4A:24:8E:B9:5E:AA:8A:67:7B:15:66:24:1D:4E:BD
Certificate issuer:       /CN=392ADD410C0A0859567B01AB47F99C7A6B0FA27E
Certificate serial:       275AF7F1290FAD45919CC5BCF43DC2441499695F
Authority key identifier: 39:2A:DD:41:0C:0A:08:59:56:7B:01:AB:47:F9:9C:7A:6B:0F:A2:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa
Signing time:             Thu 04 Apr 2024 11:13:05 +0000
ROA not before:           Thu 04 Apr 2024 11:08:05 +0000
ROA not after:            Thu 03 Apr 2025 11:13:05 +0000
asID:                     269529
IP address blocks:        45.188.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5a:f7:f1:29:0f:ad:45:91:9c:c5:bc:f4:3d:c2:44:14:99:69:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392ADD410C0A0859567B01AB47F99C7A6B0FA27E
        Validity
            Not Before: Apr  4 11:08:05 2024 GMT
            Not After : Apr  3 11:13:05 2025 GMT
        Subject: CN=4261196F344A248EB95EAA8A677B1566241D4EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ff:4f:00:5f:35:26:ba:2c:e5:1a:98:73:da:
                    a8:cd:ff:5c:03:44:47:91:2e:98:eb:4a:6e:dc:42:
                    aa:9d:f1:8e:9f:8e:ef:a0:85:65:4d:70:3c:a7:c4:
                    ab:31:e2:44:2e:65:08:eb:36:34:f5:54:dc:5f:fd:
                    cd:c4:70:3d:b1:0f:3c:8d:dc:22:44:46:a8:bd:c0:
                    89:3c:21:d1:69:75:f3:5f:2f:0d:b7:b9:f1:9e:cb:
                    59:e2:5f:38:67:9f:e2:b5:3f:85:b3:0e:7c:15:ae:
                    1b:1a:9e:81:35:ad:b2:71:3b:d6:80:70:51:3a:f5:
                    6b:ab:d9:e1:ef:f2:a1:58:04:eb:8d:8f:7a:db:e0:
                    09:4a:ce:09:e1:cd:e3:30:86:49:97:c5:2a:2d:6a:
                    32:43:ec:43:e9:3a:50:a4:89:56:55:a4:13:d8:a5:
                    ee:c2:8b:41:87:73:00:1e:3a:e5:bf:0e:a1:ce:f7:
                    09:e8:2a:be:7b:bc:c1:0e:17:cc:61:f7:82:2a:81:
                    d9:a2:7b:88:d4:70:6e:45:9d:b5:60:1f:d2:27:69:
                    35:49:97:f6:75:a5:3a:8b:6b:b8:ee:89:78:44:c7:
                    fa:2f:37:0e:04:64:ca:2c:53:7b:35:98:57:39:1c:
                    36:df:5d:64:cb:2e:41:3c:83:ca:76:38:05:2f:92:
                    77:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:61:19:6F:34:4A:24:8E:B9:5E:AA:8A:67:7B:15:66:24:1D:4E:BD
            X509v3 Authority Key Identifier:
                keyid:39:2A:DD:41:0C:0A:08:59:56:7B:01:AB:47:F9:9C:7A:6B:0F:A2:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392ADD410C0A0859567B01AB47F99C7A6B0FA27E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/1/34352e3138382e3138302e302f32342d3234203d3e20323639353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:b4:92:0d:a2:5a:c2:bc:e5:68:81:ec:d1:0d:bb:20:7d:30:
         34:9c:3d:a7:f7:06:3d:43:9d:c4:f9:7e:cb:80:dd:80:a9:f3:
         ca:73:47:a5:f2:ef:fa:c7:f2:24:9f:08:cd:56:8b:1d:46:3d:
         86:3e:5f:4a:2e:a9:5b:2d:fa:9a:95:74:f9:df:42:3c:c5:f8:
         0a:7c:f0:91:3e:c3:93:f6:77:0c:22:8c:7a:96:c9:8b:92:2b:
         b4:ab:1a:bd:63:ea:bd:1d:d5:c4:43:76:a9:75:7d:25:60:53:
         79:65:b1:bb:27:44:54:ab:f5:cb:28:c6:00:84:23:2f:53:d3:
         6e:9b:2f:d6:87:8b:17:4e:b1:92:0b:d5:68:41:b5:10:7e:a7:
         70:28:08:78:9a:be:70:dd:47:aa:5b:9a:d7:ef:df:2c:84:94:
         d7:26:39:d6:7a:05:a2:79:45:5f:ec:2f:79:23:cc:d9:3d:b6:
         f3:ee:ba:87:0f:c1:d7:b6:a4:4f:e9:e5:f2:fa:f3:79:6e:96:
         e5:db:cb:cf:b1:44:ec:c1:48:7a:39:24:8d:1e:d8:23:44:1d:
         16:97:90:35:0c:da:5d:11:df:a3:c4:9f:36:13:0e:f1:20:d5:
         8f:13:a5:77:e2:26:11:43:2a:76:da:78:ce:2d:9a:c4:d4:69:
         01:89:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org