Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34352e302f32342d3234203d3e20323639303737.roa
File:                     34352e3137392e34352e302f32342d3234203d3e20323639303737.roa (raw, json)
Hash identifier:          vJilGYh7UjhRD1A+2yNczKu4e1TFwTNvDpA8OUPStv4=
Subject key identifier:   30:6A:B5:5E:0D:18:3E:77:DA:4C:68:F7:06:B8:59:C7:AE:D2:E8:92
Certificate issuer:       /CN=E3456EBCA0328BC292A95D7115EAC65C1AE357FE
Certificate serial:       2F52E3FBC42CD8AC20795E1C54713EF671453BAF
Authority key identifier: E3:45:6E:BC:A0:32:8B:C2:92:A9:5D:71:15:EA:C6:5C:1A:E3:57:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34352e302f32342d3234203d3e20323639303737.roa
Signing time:             Thu 21 Mar 2024 18:12:33 +0000
ROA not before:           Thu 21 Mar 2024 18:07:33 +0000
ROA not after:            Thu 20 Mar 2025 18:12:33 +0000
asID:                     269077
IP address blocks:        45.179.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:52:e3:fb:c4:2c:d8:ac:20:79:5e:1c:54:71:3e:f6:71:45:3b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3456EBCA0328BC292A95D7115EAC65C1AE357FE
        Validity
            Not Before: Mar 21 18:07:33 2024 GMT
            Not After : Mar 20 18:12:33 2025 GMT
        Subject: CN=306AB55E0D183E77DA4C68F706B859C7AED2E892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:27:ec:eb:c8:05:b1:0f:56:61:65:dd:51:17:
                    55:2f:74:5b:15:7e:f5:04:90:c9:df:47:d0:f2:b8:
                    e3:98:7a:b6:ad:8a:b2:2e:60:49:b8:d9:8c:d6:37:
                    49:bb:6b:85:15:a8:1f:7e:e6:bc:2e:0e:da:ce:da:
                    6c:59:cd:07:82:cd:38:ca:e6:ad:c9:bf:13:78:01:
                    e3:ab:9b:cc:58:90:df:36:bc:2c:f0:a6:b9:b6:dc:
                    91:66:1f:4c:fa:69:7a:15:de:82:c8:44:27:f5:11:
                    49:fc:9b:27:97:92:fd:a3:7e:86:19:5b:96:df:5d:
                    3d:fe:79:87:dd:cc:e0:bf:34:b0:c7:da:26:72:00:
                    0f:82:ca:6f:54:77:f2:f1:6f:d0:51:1c:55:2a:7b:
                    39:d9:23:a3:17:cf:aa:87:2c:38:f8:a4:bc:b5:73:
                    b7:5a:58:12:a1:3d:0c:e8:73:34:ac:5e:a8:c9:0a:
                    de:8e:e4:34:b9:75:4f:5d:8b:74:14:16:a3:dc:e1:
                    9d:b7:02:6d:90:56:0e:22:03:1d:2c:65:e9:da:43:
                    8d:b1:b9:c9:55:da:2c:9c:01:bb:6f:35:a3:e3:c3:
                    5e:f6:87:e0:0d:90:a6:0b:dc:f6:98:94:25:c0:93:
                    2d:e3:84:c2:1f:af:a9:1e:10:74:c7:2e:e1:7d:a3:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6A:B5:5E:0D:18:3E:77:DA:4C:68:F7:06:B8:59:C7:AE:D2:E8:92
            X509v3 Authority Key Identifier:
                keyid:E3:45:6E:BC:A0:32:8B:C2:92:A9:5D:71:15:EA:C6:5C:1A:E3:57:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3456EBCA0328BC292A95D7115EAC65C1AE357FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/34352e3137392e34352e302f32342d3234203d3e20323639303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:44:ea:d1:1b:c2:23:1b:0d:01:9f:85:29:16:ac:31:01:6c:
         0b:21:d0:aa:9c:5a:80:99:59:a8:76:79:dd:77:00:95:41:dd:
         ce:ed:f4:fd:54:af:6f:5d:7f:2d:e8:4c:d6:c9:8d:c5:9c:e2:
         37:64:c5:8e:57:88:99:d8:e9:d5:5f:2e:3d:0a:78:3b:f5:24:
         32:5c:d0:d5:50:66:1c:6f:97:d2:3b:e9:4a:c8:91:48:15:bf:
         3f:0d:2e:67:9a:e1:78:ed:e4:02:35:fe:c6:12:6a:15:73:e7:
         db:fd:e9:9a:25:e9:60:4f:7b:2e:31:07:ed:be:49:d9:68:4a:
         c8:ae:48:8a:2a:43:d5:cc:ce:65:98:8e:ed:90:84:a4:aa:37:
         b0:ec:66:49:7a:77:c8:e1:33:ea:9d:f4:4b:0b:7c:86:92:91:
         2a:ce:f0:27:92:16:b9:ed:31:ee:20:51:50:bc:23:1a:b7:f6:
         b9:94:21:04:84:e7:2c:21:11:ac:79:42:47:6d:bc:03:f8:65:
         a5:38:1c:07:38:76:bc:b2:c7:c8:f9:86:0e:ad:d1:55:d4:74:
         14:92:b2:04:b2:82:21:5c:d8:c3:03:9b:9b:64:ff:27:7e:eb:
         f7:69:d1:37:b3:d0:c7:18:64:72:c1:69:53:ce:1f:39:a1:60:
         dd:2c:91:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL1Lj+8Qs2KwgeV4cVHE+9nFFO68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM0NTZFQkNBMDMyOEJDMjkyQTk1RDcxMTVFQUM2NUMx
QUUzNTdGRTAeFw0yNDAzMjExODA3MzNaFw0yNTAzMjAxODEyMzNaMDMxMTAvBgNV
BAMTKDMwNkFCNTVFMEQxODNFNzdEQTRDNjhGNzA2Qjg1OUM3QUVEMkU4OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUJ+zryAWxD1ZhZd1RF1UvdFsV
fvUEkMnfR9DyuOOYeratirIuYEm42YzWN0m7a4UVqB9+5rwuDtrO2mxZzQeCzTjK
5q3JvxN4AeOrm8xYkN82vCzwprm23JFmH0z6aXoV3oLIRCf1EUn8myeXkv2jfoYZ
W5bfXT3+eYfdzOC/NLDH2iZyAA+Cym9Ud/Lxb9BRHFUqeznZI6MXz6qHLDj4pLy1
c7daWBKhPQzoczSsXqjJCt6O5DS5dU9di3QUFqPc4Z23Am2QVg4iAx0sZenaQ42x
uclV2iycAbtvNaPjw172h+ANkKYL3PaYlCXAky3jhMIfr6keEHTHLuF9o9EhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMGq1Xg0YPnfaTGj3BrhZx67S6JIwHwYDVR0j
BBgwFoAU40VuvKAyi8KSqV1xFerGXBrjV/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmZualhaZUJNUHJXdWhRU2llOVFVTm03cDZ0TWlQWFJ6UEs3bUhGcjV4
Y2IvMC9FMzQ1NkVCQ0EwMzI4QkMyOTJBOTVENzExNUVBQzY1QzFBRTM1N0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UzNDU2RUJDQTAzMjhCQzI5
MkE5NUQ3MTE1RUFDNjVDMUFFMzU3RkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZmbmpYWmVCTVByV3VoUVNpZTlRVU5tN3A2dE1pUFhSelBLN21IRnI1eGNiLzAv
MzQzNTJlMzEzNzM5MmUzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbMtMA0GCSqGSIb3DQEBCwUAA4IBAQAfROrRG8Ij
Gw0Bn4UpFqwxAWwLIdCqnFqAmVmodnnddwCVQd3O7fT9VK9vXX8t6EzWyY3FnOI3
ZMWOV4iZ2OnVXy49Cng79SQyXNDVUGYcb5fSO+lKyJFIFb8/DS5nmuF47eQCNf7G
EmoVc+fb/emaJelgT3suMQftvknZaErIrkiKKkPVzM5lmI7tkISkqjew7GZJenfI
4TPqnfRLC3yGkpEqzvAnkha57THuIFFQvCMat/a5lCEEhOcsIRGseUJHbbwD+GWl
OBwHOHa8ssfI+YYOrdFV1HQUkrIEsoIhXNjDA5ubZP8nfuv3adE3s9DHGGRywWlT
zh85oWDdLJGm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org