Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/34352e3139312e32342e302f32322d3232203d3e20323639363539.roa
File:                     34352e3139312e32342e302f32322d3232203d3e20323639363539.roa (raw, json)
Hash identifier:          nNPY9XaZJvbbgQwGsgbap5KfLZ/LWXvb9lfsGohdSOU=
Subject key identifier:   4F:FF:E0:BE:13:3A:7C:D1:D4:20:63:D2:09:7A:6B:DD:71:07:C9:2D
Certificate issuer:       /CN=9A58D0B7179B6EA51E78B42B74723648AD8910EE
Certificate serial:       4D68D7C7F2234B1F4A7E41827E2F23E628AB94D1
Authority key identifier: 9A:58:D0:B7:17:9B:6E:A5:1E:78:B4:2B:74:72:36:48:AD:89:10:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/34352e3139312e32342e302f32322d3232203d3e20323639363539.roa
Signing time:             Fri 18 Nov 2022 14:06:36 +0000
ROA not before:           Fri 18 Nov 2022 14:01:36 +0000
ROA not after:            Fri 17 Nov 2023 14:06:36 +0000
asID:                     269659
IP address blocks:        45.191.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:68:d7:c7:f2:23:4b:1f:4a:7e:41:82:7e:2f:23:e6:28:ab:94:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A58D0B7179B6EA51E78B42B74723648AD8910EE
        Validity
            Not Before: Nov 18 14:01:36 2022 GMT
            Not After : Nov 17 14:06:36 2023 GMT
        Subject: CN=4FFFE0BE133A7CD1D42063D2097A6BDD7107C92D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:74:24:29:23:f1:5a:65:03:07:01:d8:87:
                    12:b6:fa:50:2e:36:67:21:23:b9:05:ec:d4:98:a5:
                    3b:84:1c:55:5c:68:21:b1:d5:98:ed:85:ae:01:cf:
                    3d:0c:67:88:2d:b9:7e:d1:67:0b:86:7e:4c:ff:e4:
                    08:16:85:da:0e:2e:88:c1:f7:23:93:2a:b9:c8:7b:
                    1b:8a:89:b9:a7:9c:14:75:de:a7:5a:72:a0:d3:41:
                    63:96:50:8b:03:b8:99:99:c7:ea:23:ad:1b:81:01:
                    3f:f5:81:fe:0b:ec:fd:5e:ab:3b:04:28:63:0f:21:
                    ea:f3:c3:fb:26:f0:3b:c1:8c:6b:4d:7d:b8:63:d3:
                    b6:c2:5d:57:cb:83:da:79:ad:3f:50:d7:85:1a:73:
                    3f:aa:db:e2:4d:da:4c:dd:88:ef:b5:e1:2b:7b:93:
                    0b:37:85:85:bc:01:25:c4:8d:15:9b:ac:d8:2c:94:
                    88:11:b7:56:53:f0:c1:0a:00:dd:e3:de:22:3c:c4:
                    61:28:fc:4d:4f:e0:dc:bd:49:3b:9b:e5:4a:f6:bf:
                    b7:2c:69:3f:6e:16:2d:8b:79:3d:75:88:70:ae:fa:
                    5a:4b:35:7b:f3:b9:54:8b:a1:7c:f3:c7:fd:ed:b6:
                    cd:c3:76:55:ac:96:90:dd:b0:21:37:bc:01:b3:a0:
                    98:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FF:E0:BE:13:3A:7C:D1:D4:20:63:D2:09:7A:6B:DD:71:07:C9:2D
            X509v3 Authority Key Identifier:
                keyid:9A:58:D0:B7:17:9B:6E:A5:1E:78:B4:2B:74:72:36:48:AD:89:10:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/34352e3139312e32342e302f32322d3232203d3e20323639363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:3c:c2:09:dc:80:72:c2:f2:64:f2:da:f2:20:4c:5c:21:3a:
         42:74:27:46:10:9e:a7:1d:4d:b5:51:9e:d0:1f:57:55:a0:d5:
         91:96:0e:7b:ec:77:cd:d9:0b:22:1e:77:57:23:eb:d6:a8:bf:
         ea:e4:6e:3d:31:f5:18:73:59:4b:54:20:cc:fd:ee:8b:1a:31:
         25:f8:ef:78:78:a4:24:fe:7a:a8:6f:e1:e7:82:77:6e:c4:e9:
         a1:3d:05:2b:49:ec:7b:9e:d2:37:0e:5d:10:83:1f:03:a3:19:
         38:ab:ed:8c:77:be:65:20:46:2e:3b:e6:d3:c7:a9:60:f1:d4:
         a8:1f:8d:02:96:fa:7c:97:f1:46:2d:99:ae:c8:c7:f3:a3:51:
         17:17:0e:0a:11:25:6e:e4:6d:cd:61:a8:08:2e:5f:f5:2e:7a:
         52:2f:ca:80:2c:f2:ca:62:f3:8b:bd:6a:9a:ca:6f:09:b2:d2:
         78:f2:d2:a6:2a:1f:de:c4:74:0e:2a:21:03:8f:12:1c:b2:f8:
         79:df:1c:80:d9:fd:76:94:04:f3:19:d4:d0:75:23:f4:78:a9:
         49:b7:94:c5:e2:94:9e:11:e6:c3:27:38:bb:9f:f0:81:03:3f:
         32:7b:02:23:5b:b3:98:3e:1b:a5:44:19:d8:d9:ca:4d:3b:de:
         1f:12:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:46 2025 by rpki-client