Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231392e302f32342d3234203d3e203532353830.roa
File:                     34352e3137382e3231392e302f32342d3234203d3e203532353830.roa (raw, json)
Hash identifier:          C+DY9luEdojCpaxBMUIhTjz7+ITNCLP3jAvJT4fAkvk=
Subject key identifier:   17:42:12:1E:8A:F5:BC:3D:DC:17:2D:1B:35:68:1E:AE:8D:89:19:46
Certificate issuer:       /CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
Certificate serial:       5D99032BA0D8D67478DD8E5A69C073CE94267D42
Authority key identifier: E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231392e302f32342d3234203d3e203532353830.roa
Signing time:             Mon 23 Oct 2023 20:05:48 +0000
ROA not before:           Mon 23 Oct 2023 20:00:48 +0000
ROA not after:            Mon 21 Oct 2024 20:05:48 +0000
asID:                     52580
IP address blocks:        45.178.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:99:03:2b:a0:d8:d6:74:78:dd:8e:5a:69:c0:73:ce:94:26:7d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FC1135527AF9645A73C9AE0282AE77ADC9E25C
        Validity
            Not Before: Oct 23 20:00:48 2023 GMT
            Not After : Oct 21 20:05:48 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:23:bc:51:14:3f:4f:07:95:9f:3b:d6:fa:
                    86:67:56:3f:3a:dc:f9:26:d7:89:f6:c2:cc:3a:d9:
                    0d:a3:a1:9c:41:28:38:34:2c:82:40:6f:9e:b2:ed:
                    4a:f9:10:c4:8c:f2:94:d9:d4:90:96:c2:eb:45:82:
                    b3:8d:e3:13:75:95:eb:a1:87:e0:fb:e0:e7:f2:31:
                    09:3a:d7:eb:a5:61:e1:7e:6e:70:ba:fd:ce:32:48:
                    4d:da:db:05:91:b3:9b:dc:c7:be:5f:74:a6:4d:0a:
                    b8:52:dc:e8:64:cb:34:de:cd:4b:a1:f7:0c:b5:e2:
                    b1:e6:a6:f4:b3:f2:a1:38:88:b3:bf:b4:9e:8d:42:
                    27:6d:3f:60:83:20:ef:0f:a7:08:de:3a:74:19:b8:
                    f4:61:d9:0d:ca:24:01:65:dd:f6:38:b2:59:36:f3:
                    c1:5e:97:ec:81:f8:91:11:d4:6d:c7:3b:15:74:4b:
                    4f:ee:74:48:c9:af:d0:0b:17:01:14:66:d5:77:09:
                    30:ed:54:e9:af:3e:cd:5f:1d:2f:97:7f:29:4d:14:
                    c5:02:6d:9a:13:34:41:69:22:7b:ce:77:b5:18:47:
                    e1:0b:cf:bc:90:30:1d:4d:b1:e3:e5:a3:e6:35:91:
                    ba:d9:5b:83:83:ba:90:c1:9c:4e:f0:7a:e5:25:5e:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:42:12:1E:8A:F5:BC:3D:DC:17:2D:1B:35:68:1E:AE:8D:89:19:46
            X509v3 Authority Key Identifier:
                keyid:E2:FC:11:35:52:7A:F9:64:5A:73:C9:AE:02:82:AE:77:AD:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FC1135527AF9645A73C9AE0282AE77ADC9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231392e302f32342d3234203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:46:5d:b9:21:d6:15:cd:03:92:8e:f7:71:9d:ac:fc:9e:
         0f:fe:d9:f9:f2:ef:6d:c8:25:08:3d:da:30:a6:68:7d:8f:70:
         06:29:8b:08:c2:d7:ef:9b:31:d7:ee:80:f7:a1:15:c8:12:c6:
         bf:91:91:98:77:da:40:08:21:64:7e:0e:e2:3b:70:9d:6d:f1:
         90:ce:e7:fe:20:d1:62:37:9c:8a:62:ca:3f:b8:6a:9c:b4:f8:
         c1:f4:a8:cc:df:39:fd:6e:74:3a:25:06:a7:21:2b:30:31:fe:
         88:3a:35:1c:7c:87:a8:33:b5:25:53:e8:8e:fb:a1:a0:bd:ab:
         88:f7:b3:65:76:7e:df:d5:e2:0f:f3:e8:ff:32:97:7d:1d:97:
         47:8d:5e:e7:2d:7b:8d:f3:38:fc:0c:5c:c6:3b:43:ac:05:3c:
         bb:61:ec:a4:71:a6:0d:41:4a:99:32:a1:2f:4a:13:59:46:07:
         d3:4c:14:40:78:0e:60:4b:a7:18:08:ad:0f:42:a7:a5:62:9f:
         56:96:81:a9:8f:62:d0:b6:9e:4e:fd:f0:5e:b1:cc:33:19:c1:
         3b:7a:a8:41:c1:6d:47:f4:24:66:d5:02:15:3c:5e:30:1b:30:
         56:02:5c:3b:56:ed:07:b9:f3:79:9b:e5:8a:bd:67:61:59:3e:
         00:71:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org