Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/34352e3138352e3230332e302f32342d3234203d3e20323639343032.roa
File:                     34352e3138352e3230332e302f32342d3234203d3e20323639343032.roa (raw, json)
Hash identifier:          2v7gI7qMG4AF+cWDjzgywGkoy3lh2LoQGaVnDqxYo4E=
Subject key identifier:   47:17:60:FB:82:C9:F5:02:D0:66:05:75:C8:A1:BB:9C:CA:53:28:DB
Certificate issuer:       /CN=03BAAC6EB82828A886F8CBC6692CCD42BF3D6127
Certificate serial:       6DDD671820F69930A4C4F30A1CD867D85F50DB9C
Authority key identifier: 03:BA:AC:6E:B8:28:28:A8:86:F8:CB:C6:69:2C:CD:42:BF:3D:61:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BAAC6EB82828A886F8CBC6692CCD42BF3D6127.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/34352e3138352e3230332e302f32342d3234203d3e20323639343032.roa
Signing time:             Fri 24 Dec 2021 18:00:21 +0000
ROA not before:           Fri 24 Dec 2021 17:55:21 +0000
ROA not after:            Fri 23 Dec 2022 18:00:21 +0000
asID:                     269402
IP address blocks:        45.185.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:dd:67:18:20:f6:99:30:a4:c4:f3:0a:1c:d8:67:d8:5f:50:db:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03BAAC6EB82828A886F8CBC6692CCD42BF3D6127
        Validity
            Not Before: Dec 24 17:55:21 2021 GMT
            Not After : Dec 23 18:00:21 2022 GMT
        Subject: CN=471760FB82C9F502D0660575C8A1BB9CCA5328DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ad:3b:dc:de:da:77:0e:84:ad:f8:33:ea:1c:
                    e1:65:1c:92:96:71:a7:07:ef:2a:48:ab:97:18:ce:
                    21:f3:7f:24:bd:f8:e4:70:a7:8f:78:cd:91:6f:6e:
                    aa:e5:a4:50:bb:59:69:ac:d0:44:e5:e2:37:21:1c:
                    84:6f:af:e1:62:d8:96:d2:ba:be:67:52:6d:35:d5:
                    01:45:2d:eb:77:6e:57:01:15:46:29:e7:eb:a6:4f:
                    25:80:0b:3c:45:46:be:8a:fc:66:5b:3c:69:17:be:
                    33:7f:08:59:b7:01:ee:7b:6f:a4:91:98:64:43:80:
                    94:6e:1b:22:8e:8c:be:9d:34:25:00:88:7a:a1:8b:
                    75:2b:83:e1:15:d8:fa:8d:88:50:ac:ea:74:d6:4a:
                    5e:d1:8e:a3:23:e1:a3:5b:d4:41:e2:d3:46:98:aa:
                    a8:9b:2a:57:e2:45:33:04:49:d3:f0:8a:97:c2:b1:
                    0b:78:7a:63:e1:22:38:9e:14:e2:dd:83:91:b9:a6:
                    7a:d4:b7:44:ec:8c:67:76:a2:bb:83:7a:cf:c8:6b:
                    55:c1:6c:d6:06:62:97:35:91:a3:e7:31:b1:fb:cf:
                    6c:d1:51:ec:e5:1c:a4:4d:a9:ba:e6:b6:90:82:f4:
                    07:65:87:af:94:2a:2b:c5:b7:d1:b7:65:67:0d:49:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:17:60:FB:82:C9:F5:02:D0:66:05:75:C8:A1:BB:9C:CA:53:28:DB
            X509v3 Authority Key Identifier:
                keyid:03:BA:AC:6E:B8:28:28:A8:86:F8:CB:C6:69:2C:CD:42:BF:3D:61:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/03BAAC6EB82828A886F8CBC6692CCD42BF3D6127.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03BAAC6EB82828A886F8CBC6692CCD42BF3D6127.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/34352e3138352e3230332e302f32342d3234203d3e20323639343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:a2:5c:65:b2:89:f3:f6:20:3d:bd:c5:d8:46:e4:35:0a:
         c5:8d:8d:72:24:3c:48:8b:51:13:7a:44:19:12:9e:f4:da:40:
         af:34:53:3d:49:6a:9e:8f:fc:17:43:55:aa:1e:e3:93:f7:5a:
         b0:ab:c4:e0:c4:f1:de:ff:c6:5f:dc:81:02:5a:da:b2:49:5a:
         ee:c6:e3:bd:08:4f:b9:ab:92:e7:7c:88:c4:39:25:a8:ed:b3:
         92:58:c5:70:79:3f:fe:18:c4:86:99:36:9a:47:aa:e1:00:ab:
         02:5b:c0:cc:e5:0c:91:d0:d3:75:5e:29:4c:ff:26:2a:c3:1b:
         56:e3:a5:63:87:72:21:95:e9:81:c2:a9:78:d2:a7:cf:69:a9:
         fc:4a:a3:e1:b6:e9:24:55:9c:99:ff:fb:fe:da:d5:a3:e5:5b:
         2e:b4:15:e2:08:60:05:f9:e0:b3:99:81:28:dc:e0:44:1a:eb:
         27:1b:2c:bd:3b:65:ae:39:73:42:1a:78:a7:94:1f:ce:c4:d1:
         88:73:59:1c:3a:52:44:7d:23:59:7c:55:9c:b0:5b:25:42:80:
         31:ac:a6:f8:7d:36:a2:4d:72:2a:67:ec:95:c9:b4:81:68:11:
         bf:a8:bb:ea:c3:a7:fa:69:fa:dc:0f:72:66:9a:90:e9:cf:cc:
         26:7d:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:36 2025 by rpki-client