Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233362e302f32332d3233203d3e20323639353134.roa
File:                     34352e3138362e3233362e302f32332d3233203d3e20323639353134.roa (raw, json)
Hash identifier:          WmjJLNPGnJxTOW9UVnHMlS9ORU9XevBQqZc5MvnrbNw=
Subject key identifier:   3B:7F:8F:DC:FB:33:42:F4:84:F6:DF:C3:53:12:EB:F7:29:0C:10:D4
Certificate issuer:       /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial:       444894061C6979472D5CDB864BEF2E215CF53999
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233362e302f32332d3233203d3e20323639353134.roa
Signing time:             Sun 07 Apr 2024 03:21:56 +0000
ROA not before:           Sun 07 Apr 2024 03:16:56 +0000
ROA not after:            Sun 06 Apr 2025 03:21:56 +0000
asID:                     269514
IP address blocks:        45.186.236.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:48:94:06:1c:69:79:47:2d:5c:db:86:4b:ef:2e:21:5c:f5:39:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
        Validity
            Not Before: Apr  7 03:16:56 2024 GMT
            Not After : Apr  6 03:21:56 2025 GMT
        Subject: CN=3B7F8FDCFB3342F484F6DFC35312EBF7290C10D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:6b:0b:ed:ee:42:72:c6:ac:fc:8b:bb:c5:
                    93:42:a1:8f:45:51:b7:fd:f7:15:ce:1a:de:68:12:
                    a7:9a:88:14:0b:a1:1e:9e:94:82:2f:41:73:dc:99:
                    ee:e6:4c:5f:74:44:01:af:24:84:b5:a4:e8:53:a5:
                    50:ab:a2:72:79:be:74:72:11:26:bb:2e:e9:92:ad:
                    ad:19:d6:40:2b:eb:93:8b:e0:24:21:06:78:e5:d3:
                    75:ed:91:5e:9f:4c:32:62:b0:02:03:15:a8:d6:52:
                    0c:22:d6:61:65:cb:73:a6:b5:3e:05:83:f6:a0:cb:
                    78:25:76:6e:86:b3:92:7f:90:bc:e5:9b:66:fb:c8:
                    3c:e2:6d:cc:b9:0e:ee:e1:d0:9d:2f:91:b3:b7:72:
                    6f:5b:e7:67:33:b5:e0:98:da:5c:9d:0d:e5:75:96:
                    66:c5:95:31:6c:14:5c:18:e3:f9:a4:94:15:cc:de:
                    45:37:4c:a0:dd:66:45:0d:6e:fb:d3:3a:18:b6:28:
                    48:e8:20:6a:81:57:4f:9c:18:ff:cc:87:e7:34:fe:
                    25:de:66:d0:55:ab:35:c1:00:18:90:8a:10:a6:8f:
                    12:cb:51:81:94:9a:57:72:e8:7a:3d:d4:28:f0:d9:
                    94:fc:23:73:aa:85:aa:a4:5f:9e:ae:cc:f8:97:bc:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7F:8F:DC:FB:33:42:F4:84:F6:DF:C3:53:12:EB:F7:29:0C:10:D4
            X509v3 Authority Key Identifier:
                keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233362e302f32332d3233203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:8a:84:ca:3b:ca:eb:09:b4:00:84:4d:c2:40:52:67:64:83:
         83:2d:23:92:7d:3a:7d:14:a8:44:69:e4:f0:a6:30:4d:67:5d:
         49:1c:9e:54:f5:79:37:72:66:63:fb:d1:9c:77:4e:08:57:c1:
         f1:5d:e2:8d:f4:9e:7b:24:b4:15:fd:dd:94:14:08:78:32:44:
         d6:66:fa:0b:71:9c:57:ed:9e:57:ac:d1:d2:f1:ba:77:8a:a4:
         87:a7:0f:a0:01:c4:ad:4d:e4:5a:8a:cb:46:14:55:44:15:c6:
         f1:85:da:3c:10:0b:3b:7b:2b:b2:19:c6:3b:58:dd:b8:7f:c0:
         49:67:ab:d4:42:c5:0c:69:88:c4:38:c5:c2:44:c0:e8:75:12:
         74:5d:00:4b:bf:93:94:af:3f:bb:2b:09:15:97:b8:0b:8f:35:
         84:e7:14:89:21:5f:0d:41:cf:84:e1:22:52:01:ee:fc:7c:85:
         3a:72:55:41:4d:71:d5:4b:1b:75:e3:78:1f:7a:52:ce:6e:ad:
         8b:9f:eb:c8:29:c8:4b:36:22:33:42:3f:1e:16:7c:9a:57:74:
         0d:36:b4:92:82:ea:62:9c:35:8a:ed:95:35:9b:be:36:18:be:
         cd:f7:ce:2d:a0:21:b8:fb:5d:f7:a5:54:9b:12:7d:0b:b2:36:
         de:70:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org