Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e312e302f32342d3234203d3e20323639353032.roa
File:                     34352e3138362e312e302f32342d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          Oz6Z6+a8zqH1k4Ks7p2OaLhlAOtRe10L4UviiUIGd/U=
Subject key identifier:   32:3E:F7:6A:36:DB:91:65:8B:97:A2:EC:0B:A1:7E:C4:68:5F:2D:BD
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       7AE75703A44C999007CE265838608B3A0ECC1F5F
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e312e302f32342d3234203d3e20323639353032.roa
Signing time:             Thu 28 Mar 2024 17:00:00 +0000
ROA not before:           Thu 28 Mar 2024 16:55:00 +0000
ROA not after:            Thu 27 Mar 2025 17:00:00 +0000
asID:                     269502
IP address blocks:        45.186.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e7:57:03:a4:4c:99:90:07:ce:26:58:38:60:8b:3a:0e:cc:1f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Mar 28 16:55:00 2024 GMT
            Not After : Mar 27 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:cb:9f:a2:73:e6:16:4d:61:cc:c0:64:51:
                    61:4c:dd:5a:47:42:32:f1:ce:ad:f8:0e:65:2a:cb:
                    b1:7d:de:e5:fb:ac:32:19:a4:95:d8:43:dd:a7:e8:
                    21:ad:12:db:1b:77:1c:ca:e8:8c:40:bc:36:0a:4d:
                    e1:ae:51:5b:69:2c:c4:a4:59:eb:c6:61:38:77:99:
                    6d:b8:1e:19:2f:47:3b:27:b3:1a:43:b8:7d:06:89:
                    e3:6d:3e:d5:20:6b:be:bd:9f:82:bf:be:bc:49:48:
                    76:2d:73:63:22:85:7d:93:6b:91:f5:73:19:e7:bd:
                    b2:fc:ac:c9:d3:6a:29:88:94:39:0f:5b:d6:0e:7f:
                    85:63:b7:a2:0f:3d:f3:61:d8:7b:04:8d:8a:1a:81:
                    33:fe:40:9a:2d:d4:fb:b4:fe:92:74:60:00:d6:3f:
                    5d:b5:32:84:3f:5c:88:1e:cb:b9:58:e8:29:3e:23:
                    22:7b:1b:52:b4:d4:e3:5c:88:f4:aa:e7:75:e1:7a:
                    d5:f6:b8:e3:ce:15:dc:4f:06:3f:9e:5b:1c:5c:ca:
                    14:eb:02:86:fa:63:b3:7f:01:3a:50:85:c0:79:13:
                    dd:3b:d2:04:44:cc:28:5d:63:b1:95:83:0a:41:f0:
                    7b:f1:57:68:8b:ac:6d:ec:2c:b0:24:7e:df:fc:f1:
                    0e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3E:F7:6A:36:DB:91:65:8B:97:A2:EC:0B:A1:7E:C4:68:5F:2D:BD
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e312e302f32342d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:a1:e1:85:ea:39:a6:a5:c7:3f:0d:f4:86:c5:c4:41:ad:
         cf:02:14:e4:66:30:9b:dd:ea:d4:6b:95:0d:59:a6:fb:b5:da:
         a8:6f:03:30:b9:44:a8:27:74:3b:5b:2d:67:78:fc:66:cb:74:
         f6:4a:e4:8d:6a:bb:c6:36:48:68:ce:d2:2d:aa:b3:bd:11:22:
         2a:3e:c3:e4:48:1e:81:72:47:06:5b:1a:51:ea:65:b5:36:a7:
         69:6a:85:73:d5:3f:20:05:7b:bf:88:0f:c6:e8:4f:38:b6:57:
         03:68:d5:28:24:66:b4:dc:9f:08:79:8d:ef:7f:4b:cb:21:00:
         fe:06:1d:c0:73:ad:a9:fc:b4:d6:63:d1:5a:d8:82:7e:d3:b3:
         fb:50:6e:ba:24:a4:79:8f:8a:ca:6b:6b:60:0c:2f:11:a4:07:
         57:43:ac:94:e2:58:32:1c:03:54:59:5d:e4:64:df:a5:3f:17:
         71:19:8b:85:70:f9:3e:85:de:e2:12:f3:0f:7a:f7:7a:5d:03:
         5a:9f:7e:38:29:f0:c3:cc:79:40:e3:0c:40:15:fc:d7:d6:03:
         77:6a:cd:03:15:eb:7b:c6:f7:3b:92:12:5a:e7:07:0b:8e:33:
         79:34:64:aa:70:27:75:c3:d1:09:14:d7:cf:79:1b:ed:99:14:
         cf:d0:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org