Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32332d3233203d3e20323637303933.roa
File:                     34352e3232382e3139342e302f32332d3233203d3e20323637303933.roa (raw, json)
Hash identifier:          xXlI1MgqShkusstRWHkCavlRYnjvI1WcS6BfSG0HF3g=
Subject key identifier:   20:EF:AD:0B:5F:6C:32:5D:2E:AD:E5:EF:D1:7A:59:ED:FB:E3:13:66
Certificate issuer:       /CN=8969EE982CBE9BCDB5B100091931153438B2D419
Certificate serial:       695E4D136572A540019F0BD6B60ADB481359558A
Authority key identifier: 89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32332d3233203d3e20323637303933.roa
Signing time:             Fri 10 Jan 2025 13:55:59 +0000
ROA not before:           Fri 10 Jan 2025 13:50:59 +0000
ROA not after:            Fri 09 Jan 2026 13:55:59 +0000
asID:                     267093
IP address blocks:        45.228.194.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5e:4d:13:65:72:a5:40:01:9f:0b:d6:b6:0a:db:48:13:59:55:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8969EE982CBE9BCDB5B100091931153438B2D419
        Validity
            Not Before: Jan 10 13:50:59 2025 GMT
            Not After : Jan  9 13:55:59 2026 GMT
        Subject: CN=20EFAD0B5F6C325D2EADE5EFD17A59EDFBE31366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:0d:8a:c6:07:3c:46:38:bf:14:c4:0e:64:
                    cd:31:f2:7c:3c:9f:83:d8:cf:2e:15:1c:c7:05:ae:
                    0d:dd:eb:59:79:bc:7a:ee:45:ee:e8:ec:bc:b0:0f:
                    4f:be:e8:27:96:0f:d9:7b:20:c3:25:48:09:b9:e8:
                    fc:47:33:a9:be:8f:7e:84:51:a7:97:c4:02:59:1d:
                    35:3b:e5:9e:27:ce:6b:ad:d5:e2:d2:19:06:1f:a6:
                    75:a2:89:84:40:47:70:78:9b:1c:73:c0:76:62:cc:
                    ef:52:83:df:70:57:57:4f:04:c6:25:32:86:8c:10:
                    8c:da:88:8d:a3:b7:6b:61:54:fd:b2:b3:ef:cb:16:
                    a5:a8:62:16:8e:90:1d:43:c2:a4:f3:ff:7c:53:40:
                    a8:5c:03:3e:a0:c6:a3:f2:86:37:82:58:ae:45:98:
                    a1:0f:6e:e8:f8:0c:76:06:7c:4e:85:92:08:f2:43:
                    62:2f:7b:98:e9:33:cc:e4:9c:7d:8b:3d:8e:91:3e:
                    dd:c8:91:b9:74:5e:e6:fd:21:80:e1:cc:22:9c:9a:
                    d6:8b:9e:e9:e5:6a:d2:33:6e:73:05:2e:4f:40:f1:
                    70:48:b6:c0:1c:a3:60:cd:eb:f9:50:8c:c7:49:68:
                    1b:96:f6:af:13:42:40:00:6f:41:f1:7e:49:a9:2b:
                    f6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EF:AD:0B:5F:6C:32:5D:2E:AD:E5:EF:D1:7A:59:ED:FB:E3:13:66
            X509v3 Authority Key Identifier:
                keyid:89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32332d3233203d3e20323637303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:c2:32:a1:84:2b:9a:01:8c:c3:7e:16:e6:ef:c6:46:66:ae:
         22:df:e4:0a:96:b4:65:e6:b8:c9:88:a6:ce:d5:ff:e2:5c:eb:
         3b:eb:2d:5e:49:44:e5:1f:ce:04:9d:01:c9:c4:c2:f8:d9:42:
         04:9f:d6:de:02:ae:c0:15:b7:2b:de:a4:a3:33:0e:7e:77:a2:
         55:35:d6:38:7b:6a:79:5d:84:1d:77:7f:b6:91:db:11:da:a4:
         41:3f:a0:63:c0:3c:01:46:87:be:69:ff:6c:3f:6f:d7:bf:89:
         a8:10:ab:ec:ce:3a:4d:95:c8:55:4d:4e:f8:4c:66:8d:14:4d:
         06:9e:e8:21:4c:87:dc:de:70:5a:91:8b:92:e3:d5:8e:b4:dc:
         29:70:ee:73:53:c4:ee:25:a1:5c:b9:20:c2:7d:78:36:7b:b9:
         95:1c:9a:9c:6d:44:96:c8:a3:14:73:3d:fd:dc:2a:5c:50:14:
         76:dc:c1:b5:06:7b:6e:1d:c1:73:58:8d:46:bb:04:c1:a2:d2:
         8b:cd:f3:8f:1a:7e:45:de:e0:bc:ec:28:8f:a8:67:b7:4c:c6:
         d9:2c:a1:ba:b3:5e:52:55:11:c6:7d:e3:09:2e:a3:63:4a:96:
         13:a1:df:37:24:9f:a7:2f:d6:4b:e7:7a:04:b9:87:71:bb:36:
         03:56:ce:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:48 2025 by rpki-client