Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231382e302f32342d3234203d3e203532353830.roa
File:                     34352e3137382e3231382e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          yQkJ3QsMfxazNArUoWk4ZxTLqmfdz0lzP85ypBwLolM=
Subject key identifier:   61:30:AB:62:55:B2:91:22:E5:19:BB:D8:A7:21:7C:A3:5E:D1:2B:CB
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       3FDE6CACB1E16606232F8022E98922B1E0767138
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231382e302f32342d3234203d3e203532353830.roa
Signing time:             Mon 23 Oct 2023 20:05:39 +0000
ROA not before:           Mon 23 Oct 2023 20:00:39 +0000
ROA not after:            Mon 21 Oct 2024 20:05:39 +0000
asID:                     52580
IP address blocks:        45.178.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:de:6c:ac:b1:e1:66:06:23:2f:80:22:e9:89:22:b1:e0:76:71:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Oct 23 20:00:39 2023 GMT
            Not After : Oct 21 20:05:39 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ca:fd:85:81:cc:47:38:25:9c:eb:94:b4:9e:
                    d0:8a:83:2c:59:56:91:fa:f1:a8:a7:2b:2c:d5:ac:
                    64:84:48:1a:ba:de:0e:5e:c7:8e:ff:74:9f:52:2b:
                    94:54:0d:0f:c5:a1:bb:f7:f8:3e:27:d5:3c:55:de:
                    ad:5b:5c:1b:c4:41:fc:de:29:cb:ee:e4:8c:37:ec:
                    99:ec:b7:e9:44:5d:b4:9d:38:86:8d:2d:62:c6:5e:
                    71:9b:ae:ee:02:36:a5:69:55:a1:bc:ea:9a:1a:a0:
                    b2:91:cb:48:e2:c8:f5:e7:ed:99:38:a4:2f:60:a8:
                    0c:1f:c3:19:03:23:cc:a6:6b:86:3a:2e:7e:02:7e:
                    9d:06:fe:64:84:73:38:92:e9:0a:59:46:c7:8b:2d:
                    d2:7b:b7:94:b1:b5:7c:51:ba:37:61:b4:c7:a7:20:
                    56:88:a8:46:82:09:0a:a7:a0:35:8e:c3:f4:34:b1:
                    93:67:c5:1c:9f:70:5b:f7:a7:08:c7:2a:0a:04:f9:
                    44:09:9e:62:10:32:4d:0f:91:79:a7:03:27:6a:4d:
                    4e:be:d6:aa:0a:a1:d5:a0:8a:4d:66:01:ec:e5:2f:
                    3f:57:f2:8a:ed:6f:2d:ca:01:04:9d:38:17:2e:49:
                    bf:39:f1:59:8b:e8:10:5c:ed:be:02:ae:63:17:2e:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:30:AB:62:55:B2:91:22:E5:19:BB:D8:A7:21:7C:A3:5E:D1:2B:CB
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231382e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:8e:e0:94:47:69:8c:7b:3f:90:32:44:65:97:32:b6:ad:0e:
         b7:87:ff:71:89:91:9e:1b:6f:79:d6:5c:05:53:54:de:22:f1:
         d8:a5:c4:69:c3:36:6b:cd:75:0b:49:a0:2e:ff:1b:22:15:8e:
         49:1d:fd:24:b8:91:f6:ab:23:75:0b:1f:bb:64:b2:9b:b6:12:
         e0:e2:ca:a4:4a:6b:4c:1a:51:ad:e3:fe:9e:c0:1e:a9:d2:e4:
         d4:da:1b:b0:0f:44:ab:06:9a:55:33:82:4f:f8:56:c6:c6:df:
         92:58:0e:27:c9:e0:f1:e1:75:fa:df:48:13:8a:ab:ca:9c:63:
         a0:d1:fe:cb:9d:3f:ef:72:b6:83:c0:ad:2e:3d:d9:3d:23:01:
         30:8a:c4:7c:3a:1b:09:01:65:69:88:0c:a1:fe:cb:f0:84:e7:
         93:7f:0e:b2:1c:12:7c:fc:4f:68:f4:0e:4e:a9:3e:c3:7e:b2:
         84:ef:9f:db:af:cb:52:5e:19:8e:76:f9:f8:a9:c3:42:56:d0:
         12:54:86:a0:2c:62:e2:22:67:89:a7:d9:95:73:bd:49:7a:4e:
         4e:61:27:61:68:e8:4f:aa:90:b5:13:fc:30:a7:d7:cd:89:3b:
         f2:92:a4:c4:c1:cf:73:64:eb:bf:c0:e4:61:1e:77:e5:07:4a:
         cc:cc:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org