Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa
File:                     34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa (raw, json)
Hash identifier:          Bk2ddY+oDG8EtarrY1uyHdMYmuLAwkRVo6+mr3Xp3ig=
Subject key identifier:   18:80:A1:78:1C:2C:C5:D4:3E:0B:B2:D0:06:B5:A7:2A:DA:79:D5:D3
Certificate issuer:       /CN=FB3862529E205770549D2C9C549C9466E5CB21B5
Certificate serial:       3DE13FBADC30E710B554F3DA7D6D18662330F528
Authority key identifier: FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB3862529E205770549D2C9C549C9466E5CB21B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa
Signing time:             Tue 14 Nov 2023 14:53:34 +0000
ROA not before:           Tue 14 Nov 2023 14:48:34 +0000
ROA not after:            Tue 12 Nov 2024 14:53:34 +0000
asID:                     269435
IP address blocks:        45.186.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e1:3f:ba:dc:30:e7:10:b5:54:f3:da:7d:6d:18:66:23:30:f5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB3862529E205770549D2C9C549C9466E5CB21B5
        Validity
            Not Before: Nov 14 14:48:34 2023 GMT
            Not After : Nov 12 14:53:34 2024 GMT
        Subject: CN=1880A1781C2CC5D43E0BB2D006B5A72ADA79D5D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:00:9b:fe:d3:48:0a:c0:bd:11:b0:cd:63:
                    f1:8a:38:a0:e0:c2:24:1b:2a:c7:b5:6a:b5:e3:f1:
                    86:89:f1:08:fc:e6:5e:73:bc:dd:75:4d:bf:88:4f:
                    ba:c3:9f:9b:fa:0e:26:21:ce:d6:7b:7e:54:d9:ad:
                    01:f7:7c:54:5f:3a:b3:09:d5:88:59:3d:f9:be:ad:
                    71:7b:fd:a0:af:94:1c:9a:c0:e0:76:e5:51:52:13:
                    77:b8:da:d1:b3:78:e0:0f:ba:03:ba:56:de:99:57:
                    e0:a3:38:1f:81:53:72:fc:e0:8e:56:9c:01:99:99:
                    60:78:8c:17:47:63:49:91:e3:4c:f8:03:1c:70:61:
                    c5:c3:c2:b8:66:00:4d:90:9f:94:1b:4f:ff:82:10:
                    79:52:1e:dc:94:b0:e0:41:91:42:60:c3:87:c0:c4:
                    8b:eb:86:68:ae:2c:54:50:72:50:59:02:36:c7:00:
                    7d:4a:3a:a5:10:38:ab:98:88:da:22:7f:e5:4e:9b:
                    76:98:fb:cc:66:db:6a:be:42:9d:ae:5a:ed:0b:d0:
                    56:45:a6:1b:c5:64:e9:bd:c2:98:1b:0e:f9:39:a5:
                    e8:32:9c:4a:37:ba:15:21:4f:f0:b4:53:29:6e:d9:
                    44:6a:15:e2:51:71:f6:81:ad:10:5c:2f:bd:ee:5d:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:A1:78:1C:2C:C5:D4:3E:0B:B2:D0:06:B5:A7:2A:DA:79:D5:D3
            X509v3 Authority Key Identifier:
                keyid:FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/FB3862529E205770549D2C9C549C9466E5CB21B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB3862529E205770549D2C9C549C9466E5CB21B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:26:09:d1:98:c6:40:c6:9c:9e:39:64:1b:0a:1c:5e:a5:ed:
         0a:57:63:63:89:08:a2:10:0b:29:06:eb:1e:18:fa:a3:d2:3f:
         55:66:2d:a8:9a:65:c2:b5:09:9a:89:b7:4c:c4:36:7e:46:a2:
         df:d1:d6:ed:7b:e4:3f:e6:a6:c1:cc:c3:cf:e9:68:68:92:fb:
         dc:37:5a:8f:01:1c:2a:f1:e0:ea:80:5d:ec:27:6f:5a:c8:d5:
         cc:a7:44:45:2c:d4:ae:44:66:05:b9:1a:8e:82:4e:08:8b:d9:
         a6:8f:38:d0:d6:7d:e9:76:23:db:0a:96:59:b2:2e:c3:7b:3b:
         b3:30:67:a3:e0:c3:bb:32:8a:7f:3a:77:b7:ea:15:3e:ae:73:
         e3:7b:78:2d:a8:32:63:1b:53:29:e9:e2:64:38:7a:2a:6a:b1:
         0a:d9:c2:b0:3b:3d:e6:72:a4:87:87:16:fb:ff:40:63:a4:ed:
         d5:e2:a3:68:32:f4:2e:fb:aa:bb:25:46:b6:20:68:66:96:1e:
         1d:ca:c8:67:93:7b:76:48:1b:41:eb:ce:cc:eb:83:72:be:e4:
         ea:12:ba:8b:e9:07:8c:75:aa:49:17:c9:12:12:2d:31:39:64:
         4d:9d:77:4c:ac:d0:33:c5:49:d6:f4:a0:e6:96:40:5c:10:3b:
         c9:54:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:34 2025 by rpki-client