Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/34352e3137372e31322e302f32322d3234203d3e20323638393738.roa
File:                     34352e3137372e31322e302f32322d3234203d3e20323638393738.roa (raw, json)
Hash identifier:          MkUGBKHmk1+hAREoDPyS9FaBgez6xIj6Obd4KPgZW3s=
Subject key identifier:   4F:E4:07:51:1D:64:C7:D8:0D:03:F6:BA:FE:6A:C4:2F:BE:07:6F:E4
Certificate issuer:       /CN=3069BE596AE6FD99F15867B76663D73952007F4C
Certificate serial:       622E0EC3F599D228D16E0CCE75990FACC6E2C844
Authority key identifier: 30:69:BE:59:6A:E6:FD:99:F1:58:67:B7:66:63:D7:39:52:00:7F:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3069BE596AE6FD99F15867B76663D73952007F4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/34352e3137372e31322e302f32322d3234203d3e20323638393738.roa
Signing time:             Thu 22 Feb 2024 11:26:39 +0000
ROA not before:           Thu 22 Feb 2024 11:21:39 +0000
ROA not after:            Thu 20 Feb 2025 11:26:39 +0000
asID:                     268978
IP address blocks:        45.177.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2e:0e:c3:f5:99:d2:28:d1:6e:0c:ce:75:99:0f:ac:c6:e2:c8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3069BE596AE6FD99F15867B76663D73952007F4C
        Validity
            Not Before: Feb 22 11:21:39 2024 GMT
            Not After : Feb 20 11:26:39 2025 GMT
        Subject: CN=4FE407511D64C7D80D03F6BAFE6AC42FBE076FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:6f:73:eb:30:1a:3f:9c:d4:7b:41:26:6b:
                    e6:4c:ee:ad:12:0b:a2:b1:81:b0:2b:e4:00:dd:d8:
                    2a:a8:a6:62:f8:49:73:6a:9d:df:b4:87:b4:df:c6:
                    eb:a3:c0:a5:0b:72:78:84:94:66:1b:26:39:04:4c:
                    cc:9b:60:9a:6b:c4:8e:ad:a7:40:ae:0a:f0:cc:e8:
                    bf:d8:c2:07:8c:33:ef:ef:d5:61:bc:b5:a9:49:5a:
                    47:fa:eb:8d:ea:a9:42:fd:a8:a4:e4:81:56:47:4a:
                    c3:ea:16:05:d6:8d:c7:5e:2b:24:52:bc:0d:46:b9:
                    bd:9e:9f:b0:2c:5c:ca:98:c0:59:46:db:be:31:b9:
                    51:ca:7e:4b:28:6b:a7:29:41:27:9a:87:2b:bf:18:
                    a3:29:f2:75:ad:85:04:14:00:e6:e0:ed:79:3b:24:
                    b2:49:24:6c:de:b7:f8:fd:26:b1:47:37:9d:cd:1a:
                    f5:01:1b:0c:1c:c6:45:1f:80:ef:a6:4a:9d:2a:6c:
                    93:2e:ef:0b:05:c9:a8:df:dd:7b:d2:2e:ea:09:fc:
                    f0:c5:0b:a4:cb:1e:e6:2f:d3:0f:6e:1a:0e:1b:cc:
                    e2:1d:e8:04:79:29:f1:f3:e3:27:7e:c1:24:48:00:
                    f2:59:c1:db:e3:de:54:e5:8a:35:59:f4:f8:1c:76:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E4:07:51:1D:64:C7:D8:0D:03:F6:BA:FE:6A:C4:2F:BE:07:6F:E4
            X509v3 Authority Key Identifier:
                keyid:30:69:BE:59:6A:E6:FD:99:F1:58:67:B7:66:63:D7:39:52:00:7F:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/3069BE596AE6FD99F15867B76663D73952007F4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3069BE596AE6FD99F15867B76663D73952007F4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/34352e3137372e31322e302f32322d3234203d3e20323638393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:30:6b:a6:01:87:bb:c4:da:3f:6c:98:66:ea:18:65:e2:a5:
         ff:f6:8d:ed:d5:06:8d:60:db:ef:e4:64:a3:86:93:83:63:13:
         9a:05:3c:87:69:72:db:9f:a6:f0:da:c7:6c:b3:47:cf:1d:7f:
         b1:e3:d1:83:f1:6e:3e:cf:ac:08:9b:de:9e:d0:2a:cb:98:1f:
         a5:d5:32:92:25:a5:eb:e8:4f:87:c6:89:2b:d1:da:07:b8:7c:
         38:2d:38:9b:b6:11:68:28:e7:1f:9c:6e:31:fb:d6:46:61:b3:
         bb:34:fc:ee:71:e8:59:66:59:71:ab:74:97:74:e9:b2:1a:26:
         23:45:47:18:53:30:39:ca:7b:40:9d:e4:f4:87:21:71:7f:95:
         29:02:db:34:53:a2:e5:18:91:09:6a:0f:09:af:3a:11:4b:36:
         00:f6:51:f9:bf:02:70:1b:6d:19:bf:46:ef:70:c2:ce:f8:38:
         01:a8:8c:56:f0:c1:31:be:9e:69:4c:fb:04:92:f7:9b:d3:f3:
         19:a7:d0:d8:72:fd:b9:bb:42:aa:c4:70:96:1b:22:d0:5a:82:
         8b:24:0a:4d:92:cf:96:da:c1:09:4a:23:9b:3b:73:92:d6:07:
         0d:78:30:1c:f5:6a:45:73:6f:20:54:32:37:e2:9e:01:02:83:
         f7:60:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org