Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39322e302f32322d3232203d3e20323636313239.roa
File:                     34352e362e39322e302f32322d3232203d3e20323636313239.roa (raw, json)
Hash identifier:          e2x1tvS9n/+Onne1CTVPBh164F9WVy9J6hFjxDyA4as=
Subject key identifier:   D4:67:20:06:4B:96:D5:DD:6F:A8:03:1E:C0:7E:8C:CB:A8:2C:75:49
Certificate issuer:       /CN=806014EFB447E6CDC6DAE631F19157D7748822CD
Certificate serial:       190CB561CB6ABC107793B5D0819C0FF73E933B2C
Authority key identifier: 80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39322e302f32322d3232203d3e20323636313239.roa
Signing time:             Mon 04 Mar 2024 19:00:00 +0000
ROA not before:           Mon 04 Mar 2024 18:55:00 +0000
ROA not after:            Mon 03 Mar 2025 19:00:00 +0000
asID:                     266129
IP address blocks:        45.6.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0c:b5:61:cb:6a:bc:10:77:93:b5:d0:81:9c:0f:f7:3e:93:3b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806014EFB447E6CDC6DAE631F19157D7748822CD
        Validity
            Not Before: Mar  4 18:55:00 2024 GMT
            Not After : Mar  3 19:00:00 2025 GMT
        Subject: CN=D46720064B96D5DD6FA8031EC07E8CCBA82C7549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:39:fc:fe:5c:03:87:f6:30:ef:4d:1d:88:
                    75:cb:e5:30:6c:4e:8c:0e:1b:1f:f7:c5:3e:58:6f:
                    3a:4a:c3:59:d7:32:eb:35:36:41:17:0c:4a:14:eb:
                    e3:87:c2:34:fb:ab:79:a9:6b:c4:40:93:2f:7c:de:
                    a5:ce:a0:9f:5b:ec:4f:c9:42:50:00:b0:86:34:6e:
                    2d:ae:a7:ec:5f:75:83:96:8d:76:70:76:3e:29:2e:
                    29:83:32:5b:d5:76:b9:fb:5d:1e:aa:d9:0b:46:c2:
                    08:ef:38:5e:0e:41:0e:a6:7b:f3:00:91:fe:aa:8f:
                    18:bc:34:68:31:bf:41:71:4a:3d:44:ef:f2:cf:cf:
                    1f:e1:04:4e:a9:2c:a4:dc:d5:b1:6a:00:e6:30:60:
                    d6:cd:bf:48:1f:ef:81:10:d1:c3:1a:a3:f6:77:58:
                    8f:18:8b:06:3c:a5:4b:fa:3c:c6:dd:84:79:0a:a0:
                    b5:c0:b8:a9:2a:c2:c3:4c:a5:f7:70:c8:3d:6d:b6:
                    1b:b4:77:c6:74:51:34:fc:d6:e0:d1:7b:9e:eb:a5:
                    80:0a:8c:dc:a7:95:29:2e:f7:f7:66:5c:6b:8c:20:
                    31:72:66:6a:11:9b:8b:f7:2d:62:e8:5c:83:89:be:
                    b5:22:7a:e7:fd:c9:0a:a6:8b:81:a7:a8:2c:fd:3a:
                    30:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:67:20:06:4B:96:D5:DD:6F:A8:03:1E:C0:7E:8C:CB:A8:2C:75:49
            X509v3 Authority Key Identifier:
                keyid:80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/806014EFB447E6CDC6DAE631F19157D7748822CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e362e39322e302f32322d3232203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:26:d8:74:4a:eb:9e:a4:2c:5d:70:cf:66:67:3b:9f:68:00:
         72:a2:41:3e:6a:86:be:0c:e9:0f:a1:db:37:b1:07:c7:12:f3:
         1f:8a:dc:73:e9:34:34:4d:31:33:66:2a:ef:18:06:ec:e0:a8:
         02:31:0f:7c:aa:ec:14:a2:ef:c4:5f:ea:43:bc:0c:a6:88:95:
         42:74:bf:1c:a5:bc:9b:5e:fd:40:aa:5a:b2:af:73:5b:97:c3:
         ed:12:b3:64:c8:14:61:a6:07:d9:d2:1f:cd:c9:e5:36:e9:5b:
         64:49:f3:11:3d:1d:1b:9d:3d:15:cc:13:92:b0:5d:a5:39:5f:
         ee:0e:92:f8:ee:5f:25:d2:d3:55:46:17:4b:6c:0c:f9:78:80:
         4a:9b:84:bf:47:f2:0f:a7:6e:d8:38:fe:0d:09:ba:cf:d8:ff:
         c5:7b:bc:21:5e:ee:89:c5:0b:1d:12:92:7d:f7:1e:40:6a:f7:
         71:94:b4:a0:90:48:ae:8b:94:ce:86:3b:37:7c:d1:19:fc:f9:
         59:86:a7:a0:41:05:d0:00:bd:ec:1e:0f:e2:d4:1d:3c:f3:32:
         55:a0:1d:14:82:88:5c:82:52:f4:2d:7b:32:ed:9c:85:bc:e4:
         02:06:55:2f:20:ce:17:c3:13:d4:94:64:4a:66:83:28:e7:67:
         67:ad:63:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:36 2025 by rpki-client