Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa
File:                     3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          dwmRIUHQagnruKspAEAvcPFOMi/M+rGCP62zL06mz8o=
Subject key identifier:   FA:26:52:EB:69:E3:CA:8D:29:3F:84:7B:0C:8F:08:9B:3B:C7:6A:DA
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       3789DFAE9B7FEF8596EFC75187CE96960C25A79C
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa
Signing time:             Fri 05 Apr 2024 00:55:43 +0000
ROA not before:           Fri 05 Apr 2024 00:50:43 +0000
ROA not after:            Fri 04 Apr 2025 00:55:43 +0000
asID:                     264022
IP address blocks:        170.245.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:89:df:ae:9b:7f:ef:85:96:ef:c7:51:87:ce:96:96:0c:25:a7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr  5 00:50:43 2024 GMT
            Not After : Apr  4 00:55:43 2025 GMT
        Subject: CN=FA2652EB69E3CA8D293F847B0C8F089B3BC76ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:1a:69:1b:ae:72:cf:e2:2e:e7:df:ca:a3:
                    29:34:eb:a5:46:83:eb:8d:72:b8:e9:73:45:26:57:
                    83:cc:1e:ea:a0:d8:fb:eb:6e:1e:73:56:0d:0d:d0:
                    89:6a:da:c9:ab:a4:d8:5b:27:a4:b7:2b:c4:d3:61:
                    c2:9f:d9:ce:80:b3:ea:57:8d:75:69:ce:2b:46:4e:
                    d2:93:76:1c:70:36:e3:d5:f7:ab:1e:d3:ce:d1:5b:
                    27:58:d9:6a:49:e5:e1:ba:86:2d:0a:bb:ba:00:0c:
                    b6:51:a6:97:37:3e:c3:03:23:eb:19:1c:a8:99:6b:
                    c7:57:fd:85:e9:63:bd:7f:03:a5:98:54:e1:a5:53:
                    ba:0d:b2:45:a1:eb:95:a3:10:7a:ac:e7:75:45:77:
                    27:6f:b7:22:ab:c8:5f:64:57:2f:72:e7:5b:b2:f3:
                    94:1c:e9:b0:41:b8:76:cd:0f:ec:9c:4a:e9:18:bd:
                    e8:71:ae:58:07:1f:39:c5:0b:88:1f:79:88:bd:a7:
                    eb:53:33:f7:72:e9:f0:18:74:5e:88:45:be:b8:98:
                    39:7d:44:dc:cb:4c:82:2e:27:16:1c:f5:f6:82:f1:
                    6c:2b:c8:3a:fe:44:99:10:c6:30:8d:0b:50:44:8b:
                    4e:4a:70:dc:d3:c2:55:43:45:d7:1a:23:f4:ae:de:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:26:52:EB:69:E3:CA:8D:29:3F:84:7B:0C:8F:08:9B:3B:C7:6A:DA
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3137302e3234352e3137332e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:d4:69:c6:2d:87:63:75:f5:6e:46:a3:25:46:47:0f:66:53:
         d0:d1:74:c8:96:9a:f8:df:11:69:39:5d:7a:97:9c:1d:be:46:
         e0:f8:55:38:22:cc:5c:9f:30:87:c6:be:fd:25:ea:3a:05:49:
         e0:66:0d:9f:3a:9f:23:33:cd:96:5a:5c:54:0b:ea:11:81:7a:
         22:1d:d4:7e:ba:03:df:7f:24:06:c3:2b:2c:f9:6b:96:72:7a:
         17:32:e0:04:2b:de:44:88:75:8d:8a:1c:02:39:a9:d0:7f:ef:
         a3:4b:c5:a7:ec:e8:9d:3f:38:70:a6:7c:dc:af:f7:44:d3:c6:
         75:6b:48:87:f7:3c:a7:f5:f4:f8:5c:76:1a:49:ee:34:eb:83:
         73:e2:ac:8d:d4:c4:ec:11:7b:03:86:65:1e:f0:67:40:d6:d8:
         f8:4a:f9:90:7b:65:ba:0d:d2:e8:c5:35:68:57:f6:6c:37:28:
         59:93:9e:26:9b:b9:6d:64:77:92:70:79:c1:79:4e:af:95:12:
         70:f4:85:86:1d:ed:33:a8:db:15:5d:93:dc:a1:62:74:6d:ed:
         bf:46:c0:05:58:f7:1f:c7:32:f5:97:9d:64:86:45:75:bd:fa:
         8d:83:24:0e:69:11:c9:2d:e7:7f:8f:bb:d4:ae:a6:f6:6a:9d:
         d4:34:d5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org