Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233392e302f32342d3234203d3e20323639353134.roa
File:                     34352e3138362e3233392e302f32342d3234203d3e20323639353134.roa (raw, json)
Hash identifier:          61SdSSmSuF+p2PMebvaAQhEytoWHtPIyp1tCxMjGcqM=
Subject key identifier:   EE:28:3C:62:CA:03:B2:1F:5E:A3:50:1A:FC:6D:0C:38:4B:58:D1:CE
Certificate issuer:       /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial:       13339083545C89319C02F908454C32CFFF14EF2B
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233392e302f32342d3234203d3e20323639353134.roa
Signing time:             Sun 07 Apr 2024 03:21:56 +0000
ROA not before:           Sun 07 Apr 2024 03:16:56 +0000
ROA not after:            Sun 06 Apr 2025 03:21:56 +0000
asID:                     269514
IP address blocks:        45.186.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:33:90:83:54:5c:89:31:9c:02:f9:08:45:4c:32:cf:ff:14:ef:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
        Validity
            Not Before: Apr  7 03:16:56 2024 GMT
            Not After : Apr  6 03:21:56 2025 GMT
        Subject: CN=EE283C62CA03B21F5EA3501AFC6D0C384B58D1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:fe:30:f4:e6:80:43:89:4a:33:81:c4:5b:
                    58:a9:6e:86:5f:cf:92:93:3d:9a:f4:df:b1:79:bc:
                    be:73:36:e2:84:a6:3e:6c:c0:66:fb:e1:7f:db:eb:
                    27:6c:75:38:47:60:fa:22:1b:69:05:b0:1d:fe:8a:
                    1b:47:b0:4a:b0:57:49:d8:ee:c2:3d:7d:0c:ad:8f:
                    00:0b:49:44:f5:88:de:10:e7:f2:49:ee:0d:73:43:
                    de:27:50:3e:84:06:a0:7c:71:52:8b:bb:14:3b:67:
                    ee:37:4e:b7:78:df:c9:97:5b:d3:0b:00:99:02:95:
                    38:61:fb:67:bf:f8:7a:17:0c:72:e1:b1:5b:42:5b:
                    0d:6c:b9:18:ef:2a:ce:7e:7f:83:5d:0a:b1:cb:da:
                    39:56:fe:25:54:fa:3e:fd:54:7d:29:ea:2e:1d:59:
                    13:ad:4f:a1:d7:c3:dd:aa:61:0e:bb:10:62:5b:11:
                    94:92:99:3e:24:67:f3:34:97:84:90:2e:d8:ea:c9:
                    8e:09:76:77:1d:53:b7:35:8d:3a:07:70:2f:ec:4d:
                    29:7c:e6:20:7c:8e:3a:f0:33:9f:0c:01:7d:9e:51:
                    d0:fd:cd:9d:38:e5:35:38:89:1d:9b:88:49:a5:d9:
                    12:d7:1c:49:a4:e6:24:6c:c7:db:be:b9:68:9b:aa:
                    9f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:28:3C:62:CA:03:B2:1F:5E:A3:50:1A:FC:6D:0C:38:4B:58:D1:CE
            X509v3 Authority Key Identifier:
                keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233392e302f32342d3234203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:71:c4:63:da:5c:14:34:22:78:ea:ca:de:2b:2b:32:9d:7d:
         7d:a4:77:05:c9:e9:91:e3:58:11:d5:29:86:6e:ea:a9:55:65:
         4f:fc:a6:9c:ad:4b:03:0f:b9:4f:6c:e8:cf:15:ce:9b:0f:de:
         2d:9f:45:e9:60:51:d8:f1:c6:ea:c2:43:71:15:4a:d6:35:7c:
         31:ca:03:62:21:92:75:83:1b:8a:80:a9:a8:b3:87:95:08:66:
         98:df:46:9b:e7:78:c4:18:75:f9:88:56:79:3a:d6:59:53:59:
         29:a9:6e:ae:cb:fe:86:e3:ba:f1:29:a3:2d:87:95:08:71:d3:
         73:f6:c6:62:1b:34:b2:91:22:46:d6:a3:46:34:1a:06:d7:33:
         a8:d1:46:22:d5:4a:09:bd:1c:a1:e6:8e:64:f1:46:40:0c:31:
         2b:38:cb:c8:60:3d:b8:18:02:34:27:85:0e:b6:a7:8a:6f:e0:
         a9:22:0b:64:78:38:f7:28:c4:62:5b:04:7b:0b:a7:c4:4d:1c:
         36:b9:ca:87:c0:36:bd:50:3f:b7:10:5d:ff:0f:a7:a0:10:ac:
         34:54:ce:be:78:d2:10:52:4a:27:c9:ca:02:51:bb:a7:cb:41:
         31:b2:c8:f0:7f:96:f4:a1:8c:60:2d:7c:a5:aa:92:5f:2f:9a:
         c1:8a:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org