Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137322e302f32342d3234203d3e20323639343734.roa
File:                     34352e3138372e3137322e302f32342d3234203d3e20323639343734.roa (raw, json)
Hash identifier:          CzFNE28ky5Dpwr6hZKR3cpYUg6HcvLtQICaoBzUpdR8=
Subject key identifier:   D1:70:F4:7B:AC:46:84:B3:25:0B:50:4B:C2:93:B5:12:43:95:33:86
Certificate issuer:       /CN=3C6301395210E20E88B4ED2A0D9B997121B8FB1B
Certificate serial:       78C3B068560E081FCEBD4D2A5FA1341FBB258B15
Authority key identifier: 3C:63:01:39:52:10:E2:0E:88:B4:ED:2A:0D:9B:99:71:21:B8:FB:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C6301395210E20E88B4ED2A0D9B997121B8FB1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137322e302f32342d3234203d3e20323639343734.roa
Signing time:             Thu 20 Oct 2022 13:16:44 +0000
ROA not before:           Thu 20 Oct 2022 13:11:44 +0000
ROA not after:            Thu 19 Oct 2023 13:16:44 +0000
asID:                     269474
IP address blocks:        45.187.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c3:b0:68:56:0e:08:1f:ce:bd:4d:2a:5f:a1:34:1f:bb:25:8b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C6301395210E20E88B4ED2A0D9B997121B8FB1B
        Validity
            Not Before: Oct 20 13:11:44 2022 GMT
            Not After : Oct 19 13:16:44 2023 GMT
        Subject: CN=D170F47BAC4684B3250B504BC293B51243953386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:f3:35:fc:aa:46:d7:65:c6:0f:db:bf:18:
                    35:36:04:72:9c:e5:46:dc:bc:43:0d:91:f2:00:d8:
                    63:f4:9a:d5:62:dd:ed:46:42:6a:ef:bc:80:db:af:
                    bf:c4:d1:02:4c:d7:13:e3:f9:f9:58:50:e9:49:31:
                    39:0a:81:49:3c:6c:ca:ab:b7:df:d0:72:0f:22:80:
                    3e:68:fc:5d:70:d9:dd:49:22:a3:0a:39:1d:11:68:
                    7a:ad:67:48:66:1e:60:ea:0e:6b:f5:9d:75:85:1d:
                    a4:43:d1:c1:fe:c9:8f:8d:31:49:ae:65:4b:19:19:
                    50:11:8d:03:bc:ad:cf:05:d3:b8:ae:a3:be:96:99:
                    66:05:09:1a:43:2f:b2:bd:65:b0:ab:c0:d8:14:11:
                    11:6d:ab:ce:6e:d2:43:e8:eb:39:06:43:1a:07:72:
                    0b:98:8c:fa:ed:7e:87:07:c9:57:a7:2c:66:a6:23:
                    a8:ea:f5:2b:80:d0:c3:93:bf:e0:c4:8f:66:8a:81:
                    53:22:e0:0e:a8:98:5f:0c:92:34:39:d5:d0:69:15:
                    03:32:36:de:a3:af:93:c7:63:f7:2e:bf:ab:71:5f:
                    70:85:f1:91:15:35:f6:42:5a:4a:13:cb:88:6d:83:
                    21:d3:9b:c0:9b:a9:06:41:15:de:9b:24:63:8a:0a:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:70:F4:7B:AC:46:84:B3:25:0B:50:4B:C2:93:B5:12:43:95:33:86
            X509v3 Authority Key Identifier:
                keyid:3C:63:01:39:52:10:E2:0E:88:B4:ED:2A:0D:9B:99:71:21:B8:FB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/3C6301395210E20E88B4ED2A0D9B997121B8FB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C6301395210E20E88B4ED2A0D9B997121B8FB1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137322e302f32342d3234203d3e20323639343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:00:6f:14:4d:5d:df:64:5d:b4:a3:2a:42:5a:f5:db:91:28:
         2b:2b:cb:84:70:3b:ff:a6:68:ab:b6:8a:82:02:30:15:4e:bb:
         9c:b9:24:34:3a:04:ad:4f:3c:49:c8:ac:e6:ef:28:83:0f:9b:
         03:5b:42:2c:64:57:bd:0b:a8:9a:09:55:e8:da:9f:80:dc:b0:
         fe:97:a4:5e:72:41:fd:51:03:d6:99:73:dc:fa:22:c3:d4:d0:
         15:1f:b5:cb:c9:51:91:d1:8d:4f:ea:52:57:75:42:c1:4a:5d:
         88:ea:05:ac:64:6b:6b:6e:ba:d9:5d:ce:e7:8e:ec:eb:ad:0b:
         8f:1c:ca:07:d8:1d:ad:16:1f:a6:f8:63:15:02:52:ea:51:c7:
         c7:88:79:4a:9d:10:15:b8:b9:ef:24:53:74:a9:b0:c2:62:46:
         ec:26:12:ae:3d:72:84:a3:ba:db:24:10:81:93:7f:8b:0e:08:
         56:b5:7a:2e:36:b8:ef:18:35:7f:b9:e4:3d:00:d6:b5:5c:7b:
         c8:a4:dd:9d:5a:59:ba:1c:97:91:06:28:e9:3a:23:80:f9:9f:
         8a:c7:ba:37:65:ac:23:37:9d:f2:4f:7f:25:36:a2:c8:8e:a1:
         39:dc:4f:48:5a:01:7a:04:07:f3:c4:7d:a7:00:1f:7b:b9:29:
         eb:92:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org