Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa
File:                     3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          DwbmatnEpPhDECG7wq7cXWjuVdHgK+696YI49P6J7IU=
Subject key identifier:   E3:9A:D5:7D:30:6F:27:F5:78:6C:95:59:34:9E:9C:9E:A7:E4:B7:5D
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       650D4E811A27735CD5CD617B581116B6CAE1C3D3
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa
Signing time:             Fri 05 Apr 2024 00:55:44 +0000
ROA not before:           Fri 05 Apr 2024 00:50:44 +0000
ROA not after:            Fri 04 Apr 2025 00:55:44 +0000
asID:                     264022
IP address blocks:        170.245.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0d:4e:81:1a:27:73:5c:d5:cd:61:7b:58:11:16:b6:ca:e1:c3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr  5 00:50:44 2024 GMT
            Not After : Apr  4 00:55:44 2025 GMT
        Subject: CN=E39AD57D306F27F5786C9559349E9C9EA7E4B75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:30:58:8c:07:93:93:f0:db:eb:d2:08:7e:
                    50:21:6b:75:a7:75:15:9d:b6:8d:47:2f:0b:87:13:
                    01:8a:bf:24:7b:4f:8c:4f:ce:71:38:47:62:8c:be:
                    4b:ec:99:39:fe:6f:32:68:26:08:8d:f8:ff:2f:03:
                    1f:c1:58:3f:43:d2:5f:15:cd:b3:c7:0d:06:2c:76:
                    08:65:fe:18:24:0b:bf:04:96:f7:9c:2f:90:29:da:
                    04:8a:17:89:18:13:ec:50:12:ec:3d:77:4b:16:f8:
                    0e:b3:22:92:85:33:bc:41:11:f3:b8:b7:ca:fc:e6:
                    69:72:c5:7f:20:63:15:80:93:40:d1:4e:bb:bd:40:
                    65:d2:4a:b7:41:f6:33:14:fc:24:a2:3d:33:6c:43:
                    89:c2:32:75:fa:f2:6c:b4:63:5e:bd:d6:f9:ca:e4:
                    f7:d4:d9:cb:9f:9f:46:c1:c9:62:01:45:9a:8d:6c:
                    40:e8:22:1b:bb:cb:16:6a:de:82:4f:d5:2b:ad:e1:
                    30:71:d1:69:59:71:91:32:da:89:39:4d:27:12:00:
                    53:36:98:77:72:f1:37:8e:a0:76:00:3b:49:f1:c6:
                    c9:db:eb:c2:2b:27:28:c0:87:b5:4b:ea:42:c5:a9:
                    5e:ff:8d:db:b2:8c:65:d8:39:dc:ab:83:11:ac:94:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9A:D5:7D:30:6F:27:F5:78:6C:95:59:34:9E:9C:9E:A7:E4:B7:5D
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:99:0d:25:65:ac:43:eb:d7:0d:50:ca:d7:a4:25:73:57:f9:
         6a:cd:26:23:64:3c:36:e1:76:c6:78:9e:b7:9d:aa:8e:b6:8c:
         ec:a3:6d:f4:bb:72:cd:e0:43:22:9b:cd:5f:e1:f5:fc:10:bb:
         5a:9e:57:58:08:87:67:22:0c:9e:2b:b9:6b:9f:ad:5f:97:d0:
         7e:58:32:7e:a8:fa:c7:c8:e6:73:48:cc:7b:80:91:2c:d9:f7:
         59:b0:0d:fb:19:66:2b:95:98:8e:b6:92:e1:e5:02:65:c0:79:
         16:13:66:af:2b:b8:c3:98:a3:f2:1e:32:21:94:60:35:7a:07:
         0d:7f:51:0a:cf:45:ac:dd:1f:5d:bb:dc:c0:35:5b:ad:03:6d:
         12:be:0a:74:10:14:db:63:15:b3:25:0c:18:f6:7f:2e:63:68:
         e7:03:2d:96:c4:14:9f:a1:af:23:6e:98:a1:49:c9:11:0f:2d:
         a7:25:67:ba:79:26:02:62:da:58:7c:d0:1b:3b:e0:6c:de:68:
         5a:1c:84:55:10:2a:b1:5f:64:b7:84:a5:90:99:57:d2:bf:a0:
         40:67:94:51:ec:44:a0:6d:0f:00:21:41:d8:e8:4f:be:6f:82:
         42:81:74:a7:43:62:a3:3d:e5:61:a3:4e:c6:ea:da:1f:c5:32:
         f8:c5:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org