Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136322e302f32342d3234203d3e20323639353339.roa
File:                     34352e3138372e3136322e302f32342d3234203d3e20323639353339.roa (raw, json)
Hash identifier:          AAcHvfcMYqwL5iVga9nki78y3IDKm+DHM/LdBwQjG4E=
Subject key identifier:   EB:45:A3:95:7F:03:0C:D2:27:E4:06:66:85:60:AF:62:19:E7:0B:66
Certificate issuer:       /CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
Certificate serial:       2446DF11D592E87B0385A7AF8E7A3F7222260DFB
Authority key identifier: C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136322e302f32342d3234203d3e20323639353339.roa
Signing time:             Fri 16 Jun 2023 15:03:39 +0000
ROA not before:           Fri 16 Jun 2023 14:58:39 +0000
ROA not after:            Fri 14 Jun 2024 15:03:39 +0000
asID:                     269539
IP address blocks:        45.187.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:46:df:11:d5:92:e8:7b:03:85:a7:af:8e:7a:3f:72:22:26:0d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
        Validity
            Not Before: Jun 16 14:58:39 2023 GMT
            Not After : Jun 14 15:03:39 2024 GMT
        Subject: CN=EB45A3957F030CD227E406668560AF6219E70B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:80:40:22:10:6d:e5:3e:8f:b4:b1:76:fe:
                    13:b0:5e:b2:79:9d:26:18:d6:6f:3f:a2:b8:ec:1d:
                    08:46:14:4d:c1:a0:a3:85:91:7b:40:92:ba:9c:a5:
                    d4:8a:28:4e:54:10:46:e7:5a:e4:75:f7:9d:93:f2:
                    1d:45:dc:17:95:07:03:8d:04:43:e1:a5:00:7d:02:
                    d2:c1:ab:22:24:61:bd:d1:e2:7b:11:32:d4:e3:87:
                    40:73:d7:ff:c4:ab:dc:8d:61:dc:08:52:a1:af:c8:
                    c1:03:ba:2d:25:5b:78:9f:be:23:f9:6e:55:83:53:
                    53:67:cb:ea:60:fa:a9:56:3c:65:1c:f4:4d:24:3d:
                    ef:99:13:7c:51:a9:23:6c:3d:25:1f:69:19:2d:81:
                    71:57:1b:f8:fb:a1:54:1a:d3:62:35:84:80:f4:14:
                    e0:8f:88:7a:91:dd:de:8c:ce:81:e3:01:36:2c:84:
                    53:d4:23:13:5c:04:1a:cc:2c:3a:26:13:c0:69:ab:
                    bd:f7:1f:92:5f:ed:bf:9b:41:86:a2:55:87:b9:1c:
                    02:0d:88:22:69:ab:b4:90:64:23:1c:e8:e3:10:7b:
                    f8:3e:a1:ba:a9:30:f1:7d:94:ed:c5:ac:9f:2d:92:
                    c5:a7:ac:ce:63:cb:55:63:8d:92:6a:a2:66:b4:f4:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:A3:95:7F:03:0C:D2:27:E4:06:66:85:60:AF:62:19:E7:0B:66
            X509v3 Authority Key Identifier:
                keyid:C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136322e302f32342d3234203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:02:dc:a0:40:81:c8:b9:46:d5:05:57:31:0f:a5:7e:6f:d4:
         b0:c5:a2:56:a4:69:22:fa:48:2f:d1:bc:47:eb:32:0a:8c:2b:
         ec:ab:b6:9e:34:aa:03:6c:86:67:a2:97:fc:d2:72:f6:01:cb:
         40:98:18:e6:10:23:ff:59:ff:1b:6c:2e:8c:ad:c6:36:8b:d9:
         a8:fe:f4:9d:b0:7a:a4:cc:db:47:13:c9:81:9a:27:40:66:ad:
         32:9d:ba:b2:28:53:82:da:f4:27:20:b0:76:49:05:f0:72:30:
         76:c5:d6:e0:3e:b8:a9:2c:c6:3f:5e:16:c0:30:8e:8e:85:09:
         66:fd:6c:12:cf:59:09:e2:84:65:6b:d6:ad:0f:0d:b6:1e:6e:
         e5:72:bf:78:a4:73:b2:1c:a3:3a:83:ec:b2:ff:e6:b4:80:17:
         14:3a:8c:45:52:49:f3:f3:9d:8b:3f:6c:1a:d0:7e:e8:6c:ef:
         99:76:65:95:db:69:e2:46:f9:8b:2e:94:78:64:96:ea:44:ec:
         08:9e:6d:9c:6f:7e:11:b1:3a:53:57:86:a5:0f:95:fb:ef:68:
         b8:85:c4:fa:ac:f4:e6:ac:79:12:01:37:1e:e5:eb:c1:a5:45:
         86:83:9f:4a:64:8e:aa:ba:cd:8a:f9:20:d6:d3:e8:cd:8e:00:
         68:cb:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org