Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e332e302f32342d3234203d3e20323639353032.roa
File:                     34352e3138362e332e302f32342d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          QCvLrAu3N/1uHOlRHcEE+qhsfyoH81EPFhhfJYo9hxA=
Subject key identifier:   3E:6D:FA:82:CE:DE:D1:88:C1:CC:2A:1C:3A:AA:53:4E:AF:5D:8D:5D
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       59484E1DA74DC5B4C0676109385F824545695720
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e332e302f32342d3234203d3e20323639353032.roa
Signing time:             Fri 08 Mar 2024 16:00:00 +0000
ROA not before:           Fri 08 Mar 2024 15:55:00 +0000
ROA not after:            Fri 07 Mar 2025 16:00:00 +0000
asID:                     269502
IP address blocks:        45.186.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:48:4e:1d:a7:4d:c5:b4:c0:67:61:09:38:5f:82:45:45:69:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Mar  8 15:55:00 2024 GMT
            Not After : Mar  7 16:00:00 2025 GMT
        Subject: CN=3082010A0282010100C162A3DFA5AE15D8C23C9194EC941C3BCF58E37D0416D155D34E64B669743A5D9FC95332030E5405F1072D118ABBC760FD3332071D2E6E46728F2DFCF5E3BC89B356279B203D4F8CCCF4A824BA54410F36E6CF32A8A291DE4B020B456B5F2A8DEBF528E026E167D20C304AF6415374256692F1BBD5FBE70E8A6B8B9D9FE7A4268412503616BB3B245DC0835F0CB7EAB3D2B0226843C0C937B913B3D3CCD4A1E2F72BC0040D236F6239BCC51BD53FCB9FF8182EF07EACACEBC73F2C2BC9D511811E406BADFA12111FB4E645956D109618431FE1CA59A96A4CF9C1DCF51D3B2F6997373F00F332566B97FDA1E0B5F833F21801579F46E31536091CB6A46C210DD90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:a3:df:a5:ae:15:d8:c2:3c:91:94:ec:94:
                    1c:3b:cf:58:e3:7d:04:16:d1:55:d3:4e:64:b6:69:
                    74:3a:5d:9f:c9:53:32:03:0e:54:05:f1:07:2d:11:
                    8a:bb:c7:60:fd:33:32:07:1d:2e:6e:46:72:8f:2d:
                    fc:f5:e3:bc:89:b3:56:27:9b:20:3d:4f:8c:cc:f4:
                    a8:24:ba:54:41:0f:36:e6:cf:32:a8:a2:91:de:4b:
                    02:0b:45:6b:5f:2a:8d:eb:f5:28:e0:26:e1:67:d2:
                    0c:30:4a:f6:41:53:74:25:66:92:f1:bb:d5:fb:e7:
                    0e:8a:6b:8b:9d:9f:e7:a4:26:84:12:50:36:16:bb:
                    3b:24:5d:c0:83:5f:0c:b7:ea:b3:d2:b0:22:68:43:
                    c0:c9:37:b9:13:b3:d3:cc:d4:a1:e2:f7:2b:c0:04:
                    0d:23:6f:62:39:bc:c5:1b:d5:3f:cb:9f:f8:18:2e:
                    f0:7e:ac:ac:eb:c7:3f:2c:2b:c9:d5:11:81:1e:40:
                    6b:ad:fa:12:11:1f:b4:e6:45:95:6d:10:96:18:43:
                    1f:e1:ca:59:a9:6a:4c:f9:c1:dc:f5:1d:3b:2f:69:
                    97:37:3f:00:f3:32:56:6b:97:fd:a1:e0:b5:f8:33:
                    f2:18:01:57:9f:46:e3:15:36:09:1c:b6:a4:6c:21:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6D:FA:82:CE:DE:D1:88:C1:CC:2A:1C:3A:AA:53:4E:AF:5D:8D:5D
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e332e302f32342d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:b2:69:55:97:73:16:1d:24:d9:e1:d5:a4:4d:5d:3e:42:aa:
         47:e2:81:72:1b:5a:d1:7f:fe:71:66:6b:d9:f9:29:cd:c2:c0:
         32:5e:c2:e9:7a:5f:ca:51:05:74:97:60:26:48:7b:29:0a:84:
         c5:19:bf:cd:1e:12:60:30:f2:9a:d9:c7:5f:df:cf:f4:bd:44:
         47:5c:61:ff:46:dc:3f:67:97:68:92:ec:82:d7:ee:87:f1:40:
         8c:94:39:b6:cc:b6:c1:45:76:ef:13:1a:0f:e4:75:6e:55:34:
         91:5e:47:65:59:c6:12:d1:1c:f1:06:82:82:a2:98:88:d5:03:
         72:f5:e2:e0:f5:dd:a0:5e:60:64:37:69:36:2f:6c:ab:bc:e5:
         30:5a:c5:fa:f0:da:2c:f1:11:ec:34:4d:9f:6e:18:f8:d4:6e:
         f0:6f:c8:14:1e:2e:9f:f7:ef:f1:f6:e7:1b:80:5b:de:3b:66:
         90:aa:fa:1c:a1:5a:d3:42:d6:28:b9:e5:d1:60:e3:72:94:93:
         f8:e8:43:f7:b1:55:c9:0c:62:cd:51:70:d9:1c:14:a7:90:50:
         ff:9e:9c:40:47:c1:0e:d2:f6:1a:e4:b5:b7:4b:58:81:c0:8a:
         da:8d:ee:cd:87:aa:8c:79:65:7f:40:79:43:37:48:89:5e:53:
         ad:67:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:21 2025 by rpki-client