Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32342d3234203d3e20323636393137.roa
File:                     34352e37312e3134302e302f32342d3234203d3e20323636393137.roa (raw, json)
Hash identifier:          fikunO7wtOnbgiriD4AjZ1b5QS7T8kQZDH7kTUXZdog=
Subject key identifier:   14:D2:50:EE:78:D0:3D:A4:FC:9A:45:71:66:9C:21:E7:A5:DB:B8:D6
Certificate issuer:       /CN=0B8669C70E9ED5741CBEC40B6864B185977F0A18
Certificate serial:       6100A8CF0A64739D4E32EF6929CAFED0002759FC
Authority key identifier: 0B:86:69:C7:0E:9E:D5:74:1C:BE:C4:0B:68:64:B1:85:97:7F:0A:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B8669C70E9ED5741CBEC40B6864B185977F0A18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32342d3234203d3e20323636393137.roa
Signing time:             Wed 02 Oct 2024 19:33:03 +0000
ROA not before:           Wed 02 Oct 2024 19:28:03 +0000
ROA not after:            Wed 01 Oct 2025 19:33:03 +0000
asID:                     266917
IP address blocks:        45.71.140.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:00:a8:cf:0a:64:73:9d:4e:32:ef:69:29:ca:fe:d0:00:27:59:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B8669C70E9ED5741CBEC40B6864B185977F0A18
        Validity
            Not Before: Oct  2 19:28:03 2024 GMT
            Not After : Oct  1 19:33:03 2025 GMT
        Subject: CN=14D250EE78D03DA4FC9A4571669C21E7A5DBB8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:29:62:ad:61:90:1a:3b:29:1e:f8:b1:c2:
                    75:b8:be:b3:2f:12:d5:f6:00:53:89:30:10:be:df:
                    73:02:a8:8a:89:0e:d1:4e:69:8f:76:fd:46:b2:57:
                    9e:e9:53:eb:e0:d2:57:9e:86:bc:05:48:7c:19:f1:
                    e4:f5:30:13:72:bf:48:ad:02:10:f0:be:2a:82:9c:
                    ba:59:f5:48:e4:f5:0d:82:df:5f:f4:a4:25:a6:89:
                    13:f3:58:7b:37:af:88:2f:21:be:9b:89:89:98:e9:
                    72:92:60:f0:f6:9d:89:d4:62:90:70:0e:71:03:29:
                    5c:98:20:18:e5:c1:ae:f1:d4:a5:69:6c:91:8a:26:
                    1c:6f:1a:24:28:22:19:54:08:41:23:e0:37:96:4a:
                    e5:4f:a7:f6:1b:cd:48:8f:77:b6:40:a4:57:81:9e:
                    a0:a2:bc:7b:94:fd:f0:b3:a7:37:10:77:d6:ee:2b:
                    77:62:c9:7c:3b:61:78:53:5d:9b:1c:bb:e1:88:3d:
                    fb:f1:42:89:9f:cc:ce:07:86:73:c5:3f:a7:e6:f2:
                    66:f5:73:17:d9:83:4d:95:64:f1:0e:97:4e:d9:ef:
                    0c:26:ab:d1:17:94:19:a3:5a:a7:f2:90:f9:79:1e:
                    6a:58:ec:d1:9d:b2:3f:bd:38:32:6f:ba:98:db:ad:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D2:50:EE:78:D0:3D:A4:FC:9A:45:71:66:9C:21:E7:A5:DB:B8:D6
            X509v3 Authority Key Identifier:
                keyid:0B:86:69:C7:0E:9E:D5:74:1C:BE:C4:0B:68:64:B1:85:97:7F:0A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/0B8669C70E9ED5741CBEC40B6864B185977F0A18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B8669C70E9ED5741CBEC40B6864B185977F0A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/34352e37312e3134302e302f32342d3234203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:42:82:c7:65:db:ac:07:41:5b:f6:43:2e:bf:4e:4a:4b:
         47:c7:35:cf:f7:c4:09:dc:f8:e3:8a:01:29:c4:85:33:70:fe:
         83:96:f4:39:e2:fa:3b:d1:1d:ff:c6:ad:a5:b8:d9:3c:6f:38:
         ec:0e:90:ef:7f:63:2b:4c:53:f7:2d:28:77:64:53:e2:a8:3b:
         a4:d5:8d:f4:fe:fb:50:9f:94:a7:2c:ba:94:09:43:41:b2:b1:
         a4:7c:e7:87:93:9f:18:26:22:7b:1b:5a:2c:1c:46:eb:2f:35:
         7e:d7:38:b5:8b:9a:4a:cf:6f:e1:b6:76:fd:47:60:02:2d:62:
         c2:ff:6b:f9:f6:29:6e:0b:cd:5c:eb:c0:17:6d:54:0b:13:5b:
         76:f1:e5:1d:f4:d1:ae:7b:2a:fd:4c:2b:15:44:b6:5a:77:89:
         b9:08:7d:3a:d4:a3:a1:4d:8a:29:fb:0f:c3:59:68:40:dd:5d:
         46:d5:76:d3:d7:da:9f:b4:42:4c:e9:2a:e6:94:49:58:bd:a1:
         f2:9c:91:ba:5b:fd:92:9a:fc:f0:98:f8:82:62:7c:83:23:96:
         f1:45:9d:cd:3d:9e:08:34:40:09:68:2c:92:98:29:da:f1:41:
         51:6c:c3:09:06:93:77:77:f4:f9:d7:40:de:31:5e:c5:a8:46:
         db:a8:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:33:18 2025 by rpki-client