Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa
File:                     34352e3138322e32342e302f32322d3332203d3e20323639323133.roa (raw, json)
Hash identifier:          gqPlmwgVE9Azpn724W5X72lqGpUP3CvsXY3Yep1fz4E=
Subject key identifier:   F4:28:D4:C2:1D:4D:67:03:5D:E3:6F:8A:7A:0C:BB:5C:8B:6D:29:84
Certificate issuer:       /CN=3DDCE25111940B746EFDCBF0F3DC3E23EF917239
Certificate serial:       6BF1F5B9262310457DB7B79EA12158ED7952E67F
Authority key identifier: 3D:DC:E2:51:11:94:0B:74:6E:FD:CB:F0:F3:DC:3E:23:EF:91:72:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa
Signing time:             Tue 02 Apr 2024 19:38:21 +0000
ROA not before:           Tue 02 Apr 2024 19:33:21 +0000
ROA not after:            Tue 01 Apr 2025 19:38:21 +0000
asID:                     269213
IP address blocks:        45.182.24.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f1:f5:b9:26:23:10:45:7d:b7:b7:9e:a1:21:58:ed:79:52:e6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDCE25111940B746EFDCBF0F3DC3E23EF917239
        Validity
            Not Before: Apr  2 19:33:21 2024 GMT
            Not After : Apr  1 19:38:21 2025 GMT
        Subject: CN=F428D4C21D4D67035DE36F8A7A0CBB5C8B6D2984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:e1:43:fc:55:9c:a5:ed:49:c2:10:10:94:
                    d6:08:a6:c6:0b:cf:43:1f:f6:64:ea:6b:43:46:5c:
                    14:ce:ce:10:0d:4d:57:71:ba:38:d6:66:92:7d:f1:
                    eb:ae:02:e7:b7:4e:ce:f0:ea:52:47:dc:d1:84:bf:
                    ee:9a:27:d7:44:b9:18:3e:02:b3:1c:9b:89:88:87:
                    7f:5f:cf:f5:48:7a:16:aa:54:ec:c9:bf:f7:fa:60:
                    b1:de:11:ed:a5:a8:1c:1d:98:5f:f3:c7:9c:a0:a9:
                    7c:50:d3:0e:60:4f:f1:eb:ed:06:cc:f3:df:5d:86:
                    86:72:25:2d:3c:0a:fe:96:ed:7e:d0:83:32:e2:ce:
                    e2:a9:56:48:2b:fe:da:21:c0:cd:a3:ee:b5:2b:65:
                    40:b4:fb:25:24:24:8f:53:10:a4:64:f8:8c:07:0d:
                    ee:8e:11:0d:9d:a6:43:0e:59:f8:22:dd:4b:56:a4:
                    5f:16:8f:bb:40:8c:cf:72:ca:7e:06:6d:ca:76:c4:
                    1e:4e:bf:ea:85:04:95:2e:f1:ce:a6:89:98:f7:f7:
                    d8:d8:3e:47:73:82:c0:1d:ea:30:90:fe:82:02:4d:
                    52:f1:bb:c9:33:e0:57:5b:11:dd:d3:54:45:d0:09:
                    b0:5a:5b:04:86:50:f6:60:b8:ba:24:ed:4a:22:4e:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:28:D4:C2:1D:4D:67:03:5D:E3:6F:8A:7A:0C:BB:5C:8B:6D:29:84
            X509v3 Authority Key Identifier:
                keyid:3D:DC:E2:51:11:94:0B:74:6E:FD:CB:F0:F3:DC:3E:23:EF:91:72:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:fa:9e:dd:05:80:9b:bf:87:8a:06:08:65:31:70:4f:f6:1a:
         e4:99:ad:e7:a8:11:2e:62:2d:00:01:36:f9:ef:35:67:a9:3e:
         a0:e5:fb:cb:a8:99:f9:ae:e0:5a:55:5b:98:da:bf:fe:2e:a8:
         99:74:d7:86:8b:72:74:21:0e:45:48:2a:01:d9:ea:a6:e1:71:
         5f:29:92:a3:ee:ef:79:d5:6c:8d:28:89:80:bf:11:05:36:c8:
         2b:17:a5:3f:fc:78:cf:d2:cc:30:8e:af:f5:d9:1e:19:5b:8d:
         47:52:5c:73:b4:60:c9:e6:db:e1:5b:98:3d:ea:fb:0d:c5:6e:
         2f:d4:a6:22:83:c6:cc:1e:88:01:63:77:1c:cd:38:f3:54:19:
         4c:03:2d:b2:14:1c:40:f5:aa:c3:a1:55:85:cd:f2:12:3b:b6:
         3f:6d:da:70:4e:ae:21:80:7f:df:bb:e7:02:a7:74:e6:bf:8a:
         34:cb:9b:88:7b:68:64:ab:4a:9e:a9:50:22:2f:8f:7f:c8:75:
         eb:0b:cc:55:c7:9c:e0:82:a5:d9:f1:cc:bc:e4:f5:62:50:9e:
         93:0b:07:a2:cd:74:2b:d3:19:dd:8e:c9:44:5e:b3:45:5e:47:
         fa:f7:3d:25:ba:e5:cf:aa:2d:0f:cf:a0:54:5b:cf:5f:ea:bb:
         98:48:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org