Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/34352e3138362e3130312e302f32342d3234203d3e20323639343232.roa
File:                     34352e3138362e3130312e302f32342d3234203d3e20323639343232.roa (raw, json)
Hash identifier:          VFWrWRlxRG1XN62oDTpWo87o087aRbRSs7QFePMFUFM=
Subject key identifier:   3C:FA:99:93:C4:34:B1:D3:A8:2B:CC:90:65:83:92:D2:1C:57:9C:0A
Certificate issuer:       /CN=61A2F9E6EA177219BBB9A02CC8D3BE17B7642640
Certificate serial:       4C87A8258F2291C0C58349BA86368F7BDCBB8E17
Authority key identifier: 61:A2:F9:E6:EA:17:72:19:BB:B9:A0:2C:C8:D3:BE:17:B7:64:26:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61A2F9E6EA177219BBB9A02CC8D3BE17B7642640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/34352e3138362e3130312e302f32342d3234203d3e20323639343232.roa
Signing time:             Tue 07 Nov 2023 13:19:05 +0000
ROA not before:           Tue 07 Nov 2023 13:14:05 +0000
ROA not after:            Tue 05 Nov 2024 13:19:05 +0000
asID:                     269422
IP address blocks:        45.186.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:87:a8:25:8f:22:91:c0:c5:83:49:ba:86:36:8f:7b:dc:bb:8e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61A2F9E6EA177219BBB9A02CC8D3BE17B7642640
        Validity
            Not Before: Nov  7 13:14:05 2023 GMT
            Not After : Nov  5 13:19:05 2024 GMT
        Subject: CN=3CFA9993C434B1D3A82BCC90658392D21C579C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:f4:9f:a6:e9:7b:08:a9:14:1c:51:0b:37:
                    16:cb:e4:af:38:32:37:4b:bf:72:6a:78:be:38:6d:
                    fb:89:6f:f7:6f:10:c9:41:f0:8b:ee:d8:0e:9b:64:
                    05:7e:0a:a1:51:38:b8:63:ca:52:fa:93:31:e5:b9:
                    68:c0:25:5d:52:8a:ff:7a:5f:1c:0d:b1:89:98:27:
                    a7:84:e0:a5:9a:63:58:da:65:eb:0b:3e:89:6d:0b:
                    05:0e:ae:d4:bf:c4:8f:55:c7:25:c0:78:91:26:a1:
                    1d:64:7c:3e:9a:ff:b6:75:41:49:c5:48:7a:41:a4:
                    5f:64:bf:c2:a4:77:fd:4a:1c:8c:bf:f9:e8:e7:ba:
                    45:18:2e:1e:96:63:ab:af:e8:46:3a:76:f3:8d:b9:
                    ed:80:f8:54:cc:a1:a4:bf:5d:0c:a5:d2:31:7a:ea:
                    08:e7:6d:bb:56:9b:e7:35:f2:bb:38:78:64:d8:52:
                    cd:cb:71:74:9f:54:ba:a4:1d:2a:ab:b7:41:a0:b9:
                    1f:98:6d:2b:c9:7c:77:d1:75:48:0f:f2:3a:53:cd:
                    7a:cb:a7:8d:2d:e2:29:bc:81:2c:9e:68:7e:a0:ba:
                    fe:eb:74:6e:0c:4c:2c:63:8b:f2:66:41:bc:6c:5b:
                    39:6b:4d:39:32:6a:da:56:31:8f:02:94:24:f8:cb:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FA:99:93:C4:34:B1:D3:A8:2B:CC:90:65:83:92:D2:1C:57:9C:0A
            X509v3 Authority Key Identifier:
                keyid:61:A2:F9:E6:EA:17:72:19:BB:B9:A0:2C:C8:D3:BE:17:B7:64:26:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/61A2F9E6EA177219BBB9A02CC8D3BE17B7642640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61A2F9E6EA177219BBB9A02CC8D3BE17B7642640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3eQiFvyfTYAJhqRJXisk9bTH7FNnYAkKooQyv8SPSq1/0/34352e3138362e3130312e302f32342d3234203d3e20323639343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d1:bc:5c:28:42:15:92:e1:e1:bd:dc:4a:0c:11:49:7b:f2:
         8a:45:8d:d3:7c:4f:fe:f3:ec:f3:13:95:78:df:ba:0d:04:55:
         d5:c6:8e:56:a5:ee:6c:a3:76:8d:73:30:83:12:4f:96:12:21:
         89:c4:a4:fd:78:aa:91:1f:8e:14:65:0e:ca:ee:69:b2:01:c7:
         c3:f2:54:56:58:62:35:3e:06:ba:0a:02:be:fe:6e:51:d0:7c:
         5a:73:f2:a9:24:75:29:35:00:07:bc:83:42:a9:a3:46:7a:6d:
         38:43:d3:a7:7d:4a:ea:41:16:71:1f:42:60:4f:58:e3:09:7d:
         e4:12:5b:68:48:e5:a4:4d:a9:55:9e:3b:0f:69:9b:45:65:cb:
         0a:ac:f5:db:77:17:13:b1:ed:a2:ec:f5:64:1d:4a:e2:6a:ea:
         37:3c:fe:e9:a0:bc:6f:e3:95:1b:53:a9:e6:8e:e9:e8:92:4d:
         98:17:89:f6:59:47:61:a8:21:79:e0:18:d2:e1:35:c9:f3:2f:
         b5:14:15:fd:e4:c4:90:92:78:ee:1d:4a:63:bd:67:e1:eb:95:
         26:77:b9:07:9b:c9:62:fa:98:0c:19:e2:1d:e8:fc:53:f4:38:
         ea:f2:06:08:fc:e2:a9:9c:f7:de:80:49:84:0c:8d:72:d3:0a:
         07:f0:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org