Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32342d3234203d3e20323638383538.roa
File:                     34352e3137342e3136302e302f32342d3234203d3e20323638383538.roa (raw, json)
Hash identifier:          snDUi9yUWBNX4UqzbG9j4NsFfaWUjqbaHuTNLOgCOxg=
Subject key identifier:   3B:AA:D3:BD:70:60:C7:20:03:F3:DD:F0:EC:3D:36:06:9C:94:0C:5A
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       3ABBB9734C14177FDD2065BEAA7DD1F40DAD4617
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32342d3234203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:30 +0000
ROA not before:           Tue 05 Mar 2024 20:05:30 +0000
ROA not after:            Tue 04 Mar 2025 20:10:30 +0000
asID:                     268858
IP address blocks:        45.174.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bb:b9:73:4c:14:17:7f:dd:20:65:be:aa:7d:d1:f4:0d:ad:46:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:30 2024 GMT
            Not After : Mar  4 20:10:30 2025 GMT
        Subject: CN=3BAAD3BD7060C72003F3DDF0EC3D36069C940C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:0e:43:ba:b4:87:d8:09:ef:17:8f:1a:c1:
                    e2:3e:40:21:b9:7f:62:61:a1:49:83:c6:42:22:1d:
                    59:2f:3f:32:31:a6:e2:ca:f6:c4:2e:d1:c0:8e:7a:
                    0d:cb:72:78:ca:e0:96:51:ac:77:a9:66:35:06:03:
                    72:0e:4e:98:6d:23:b7:be:db:6b:99:43:65:16:5a:
                    8b:76:a0:e6:a1:5c:1f:ec:44:e2:fa:ee:57:a2:45:
                    7a:b2:9a:a2:c5:d2:16:cf:fe:f6:6a:3f:13:1d:63:
                    6a:85:79:22:e5:73:30:f8:e1:aa:52:f1:98:53:8f:
                    4e:36:a8:21:21:da:7f:f4:ec:ec:f7:ca:59:e9:b6:
                    b5:31:dc:1d:c8:f1:d7:c5:07:48:d9:32:94:3e:09:
                    e4:c7:5f:9b:40:49:13:a3:ba:88:e8:f1:b6:2a:33:
                    ab:a6:27:03:9f:91:7d:0c:62:96:24:22:c7:cc:c9:
                    9a:ba:08:3f:f9:40:ef:53:f7:81:0a:65:ad:66:2c:
                    84:99:b3:1f:61:77:db:e5:70:ff:0b:33:69:c2:28:
                    b3:7a:96:a9:c0:97:28:10:bf:4a:db:6e:41:1a:73:
                    7b:e6:69:97:51:20:a3:af:14:29:b8:9d:cb:1b:5d:
                    57:8b:c8:75:27:d1:80:07:29:b1:77:5f:2a:75:2b:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AA:D3:BD:70:60:C7:20:03:F3:DD:F0:EC:3D:36:06:9C:94:0C:5A
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136302e302f32342d3234203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:fe:0b:ea:7a:68:71:2d:bc:87:30:2f:b1:7f:f7:b4:16:5f:
         a2:75:ad:a4:64:ba:7f:0d:da:41:80:30:1b:d2:65:c0:21:57:
         a1:3c:11:07:54:d7:38:be:51:24:ce:3c:de:18:53:6b:82:43:
         d7:84:e5:9b:c5:89:0d:e9:37:0c:f9:6e:42:8a:40:da:b4:af:
         6f:db:45:39:5d:e7:15:04:35:68:70:d6:44:0d:96:22:4f:a4:
         0c:6a:ec:89:95:77:61:1f:64:95:10:66:f3:73:01:4e:6b:33:
         87:17:a7:eb:e8:e0:14:8b:5d:11:ee:ee:bf:64:a5:88:99:b3:
         4f:b0:ff:6b:9a:bc:cb:4c:8f:27:35:7a:57:60:95:e6:73:68:
         c4:c5:85:0a:2d:05:6c:d0:23:53:49:b2:20:a6:b2:78:20:cf:
         6a:a3:3e:ee:ab:bf:97:e8:c0:74:c1:2f:9a:18:82:4d:82:71:
         9d:79:97:12:f0:16:62:98:fd:2d:1f:de:25:a3:7c:db:41:c2:
         77:b7:08:21:48:13:05:ba:ca:94:f0:8b:ec:c8:51:1e:fc:ba:
         32:1e:ac:ca:df:c6:4f:cf:8b:21:ce:fe:d0:93:e8:b8:8f:07:
         a2:c1:92:3f:1b:7b:73:1e:bb:e7:9e:f3:6c:f3:37:6c:90:b7:
         9e:4a:e3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org