Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa
File:                     34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa (raw, json)
Hash identifier:          b70gIh/pZEq9ve2PDLeox8eT7xCNpNgAvmkkVnUY2Fk=
Subject key identifier:   5F:B3:25:FD:C1:8B:62:78:E1:0D:B5:78:0B:1F:F1:56:BD:F2:70:8E
Certificate issuer:       /CN=C112670391E07D2B7C7BCD2FFBE4E165A6953E7C
Certificate serial:       3B5866C08D21A6E967FB85A9327FA9CB1CF4DBD4
Authority key identifier: C1:12:67:03:91:E0:7D:2B:7C:7B:CD:2F:FB:E4:E1:65:A6:95:3E:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C112670391E07D2B7C7BCD2FFBE4E165A6953E7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa
Signing time:             Thu 14 Mar 2024 18:59:26 +0000
ROA not before:           Thu 14 Mar 2024 18:54:26 +0000
ROA not after:            Thu 13 Mar 2025 18:59:26 +0000
asID:                     269092
IP address blocks:        45.179.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:58:66:c0:8d:21:a6:e9:67:fb:85:a9:32:7f:a9:cb:1c:f4:db:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C112670391E07D2B7C7BCD2FFBE4E165A6953E7C
        Validity
            Not Before: Mar 14 18:54:26 2024 GMT
            Not After : Mar 13 18:59:26 2025 GMT
        Subject: CN=5FB325FDC18B6278E10DB5780B1FF156BDF2708E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:ae:ae:88:4b:77:db:08:fc:25:79:17:5e:
                    5e:e9:66:f2:f4:56:b7:0c:1d:45:4a:0b:f9:69:d2:
                    ce:c9:8e:c6:5e:52:4b:6f:1a:7c:8d:da:2a:5f:82:
                    ae:59:05:01:63:dc:88:c7:1e:3e:e9:76:4b:89:71:
                    b8:42:40:f4:27:32:fc:35:06:a7:28:f8:54:b9:9b:
                    ed:22:56:6c:13:b5:19:ae:a0:e6:3b:de:12:03:ee:
                    b6:dc:68:d5:01:ba:f6:cf:6e:45:36:a0:31:4c:c2:
                    91:0d:3c:45:a1:e7:de:52:11:8b:55:0d:38:a5:95:
                    f4:e5:76:96:3f:42:8a:6c:be:13:c0:b1:dc:81:a5:
                    9d:79:26:03:f7:9c:22:50:50:95:3d:49:6f:f0:82:
                    b3:37:fc:5b:6b:22:ea:f2:e0:77:42:7b:8c:8f:96:
                    43:38:06:3f:97:69:c8:10:63:6b:6f:bd:d1:a4:bf:
                    90:22:c1:c3:43:f3:95:86:f5:4f:11:7a:67:dc:26:
                    67:4c:20:08:03:d4:a9:a9:25:ea:3f:42:f6:d5:fb:
                    86:be:b4:c9:c7:75:0c:6a:34:84:60:c7:dc:49:2c:
                    a0:73:c9:83:ba:20:c6:57:f0:6a:4d:0b:cc:a0:16:
                    33:c6:eb:66:c0:c3:e0:1a:23:38:b8:ed:47:d3:d5:
                    78:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B3:25:FD:C1:8B:62:78:E1:0D:B5:78:0B:1F:F1:56:BD:F2:70:8E
            X509v3 Authority Key Identifier:
                keyid:C1:12:67:03:91:E0:7D:2B:7C:7B:CD:2F:FB:E4:E1:65:A6:95:3E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/C112670391E07D2B7C7BCD2FFBE4E165A6953E7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C112670391E07D2B7C7BCD2FFBE4E165A6953E7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/34352e3137392e3136382e302f32322d3234203d3e20323639303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:bf:c7:a9:d0:5a:c9:32:ea:e8:9d:66:d5:7d:1c:be:da:d1:
         46:af:54:98:fc:14:56:bf:6d:ae:ce:79:da:f1:07:71:f3:a9:
         83:68:7a:30:86:fb:4e:f9:09:05:12:32:8a:0c:e6:b0:53:60:
         af:e9:d5:95:23:89:fc:b5:8a:36:20:6a:a8:e5:e4:ea:ea:9c:
         5e:1e:f3:7d:2b:72:2f:86:c1:c5:a5:5a:fa:1f:6e:d8:d9:51:
         37:f4:cf:6a:21:bd:07:f7:81:c3:d8:60:6e:62:51:74:41:09:
         95:6e:58:32:80:ba:20:18:97:ee:90:85:ea:19:75:aa:86:f2:
         0f:ba:cf:75:79:58:5f:72:fc:ca:51:44:32:da:00:5d:a5:bb:
         b3:21:25:47:bd:ed:e4:78:e1:2a:5c:24:e0:d6:46:ea:80:ba:
         d9:20:c0:d0:7d:9a:cd:e0:ac:33:7b:b2:33:ed:02:3f:8e:57:
         50:ce:4a:5f:11:ba:26:01:8a:9b:ae:8b:16:b8:05:c1:38:32:
         36:91:1d:5f:28:a7:76:c2:e9:93:0f:de:d9:3a:16:58:8b:39:
         0a:cf:03:31:ef:0f:73:b1:73:4a:08:42:c5:f2:ce:4a:74:2c:
         37:54:40:d4:f2:74:ba:e3:fb:d9:3c:96:fe:a2:ea:42:2c:59:
         72:c2:4d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org