Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/3137302e38312e3234382e302f32322d3332203d3e20323636343339.roa
File:                     3137302e38312e3234382e302f32322d3332203d3e20323636343339.roa (raw, json)
Hash identifier:          c47gE9OtBYcK2r1EXc2gIxUxE8it3sJ39AnEQNQcq3g=
Subject key identifier:   E6:0E:CB:B8:2E:90:44:1A:48:F7:DC:2C:51:D0:F8:DF:A5:E3:2E:2E
Certificate issuer:       /CN=323408F4A08085567D2BEEC5D6976D62865EE349
Certificate serial:       56DEFC58A56588A7B9F889FBB4058A330C6F7FF4
Authority key identifier: 32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/323408F4A08085567D2BEEC5D6976D62865EE349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/3137302e38312e3234382e302f32322d3332203d3e20323636343339.roa
Signing time:             Thu 14 Dec 2023 16:13:01 +0000
ROA not before:           Thu 14 Dec 2023 16:08:01 +0000
ROA not after:            Thu 12 Dec 2024 16:13:01 +0000
asID:                     266439
IP address blocks:        170.81.248.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:de:fc:58:a5:65:88:a7:b9:f8:89:fb:b4:05:8a:33:0c:6f:7f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323408F4A08085567D2BEEC5D6976D62865EE349
        Validity
            Not Before: Dec 14 16:08:01 2023 GMT
            Not After : Dec 12 16:13:01 2024 GMT
        Subject: CN=E60ECBB82E90441A48F7DC2C51D0F8DFA5E32E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:ac:12:57:57:3a:74:15:0c:31:e6:2b:45:
                    d5:7c:bf:17:8b:33:19:49:3d:5c:12:ee:25:8d:11:
                    56:1c:04:08:ac:91:fd:7b:f2:9d:bf:d1:7d:d3:45:
                    9b:d1:84:a5:1f:c8:ac:53:f1:54:3f:47:41:81:8e:
                    3c:fe:fc:22:ae:34:6d:26:2d:2d:56:27:fd:71:c9:
                    5e:d4:11:bc:64:5b:32:f9:49:e8:73:f3:a4:32:74:
                    f8:d0:20:9a:6f:dc:a2:4a:15:a7:d2:56:c4:cf:27:
                    f9:7e:24:08:4a:28:f9:78:62:81:db:ef:52:77:e2:
                    30:31:7e:26:b8:b4:80:29:e0:6a:27:97:ed:8c:4d:
                    7a:a4:9c:6a:1d:f5:0d:62:a3:dd:85:31:1d:f4:b5:
                    14:a5:b8:45:8c:d6:0f:ff:07:2c:f0:c9:51:a4:be:
                    82:cf:de:5f:31:45:33:4d:6a:de:d9:d7:a8:70:56:
                    03:84:7a:ad:5b:32:31:e7:ea:b8:9a:5c:20:d5:df:
                    90:fc:63:37:43:6b:20:27:2a:84:87:12:b4:d4:f0:
                    92:4d:d1:d7:85:07:3a:b5:35:6c:47:93:ae:6b:9a:
                    6c:f3:4f:7b:9c:fa:5d:a7:f4:44:4a:ce:86:e2:e9:
                    00:9d:b6:70:d4:10:37:4f:7e:1b:48:22:a3:98:ba:
                    fe:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0E:CB:B8:2E:90:44:1A:48:F7:DC:2C:51:D0:F8:DF:A5:E3:2E:2E
            X509v3 Authority Key Identifier:
                keyid:32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323408F4A08085567D2BEEC5D6976D62865EE349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/323408F4A08085567D2BEEC5D6976D62865EE349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/3137302e38312e3234382e302f32322d3332203d3e20323636343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:98:e1:fc:db:a8:24:b2:ad:81:e5:98:da:36:32:97:bd:ef:
         88:07:d2:e9:18:f0:e6:d5:6d:04:6f:57:2e:0a:d1:16:9c:31:
         21:c5:83:1d:db:49:1e:9a:0a:4c:ad:ff:44:ac:a6:27:a8:de:
         3d:82:fb:40:0a:d7:fa:56:6b:36:17:5b:92:e5:53:16:cb:75:
         29:53:50:a7:69:32:f8:eb:fe:86:2a:96:42:e7:14:0a:e7:4d:
         52:a8:34:6d:2d:d9:24:9d:f5:ce:a3:52:bd:95:f1:18:90:74:
         31:df:f4:4c:ee:36:9d:a1:2c:bd:83:cb:0b:49:19:a0:62:d5:
         ad:b7:01:42:7f:b0:5e:66:ac:6c:d6:a3:ee:f7:c3:87:3e:06:
         db:32:f3:d1:7f:c0:3d:35:f8:86:a2:d8:cd:2f:34:58:61:47:
         e2:46:b8:5f:66:ca:e4:3f:e9:a6:d3:7b:dd:64:d2:cf:d3:17:
         a4:e4:90:f5:a4:3d:6c:d5:4b:80:69:17:6f:8b:d5:a1:47:cd:
         ad:02:33:68:a3:03:34:ad:fc:76:12:af:6b:0d:02:cd:f8:33:
         58:41:3a:39:25:44:7e:26:65:3b:90:96:53:1f:d4:8a:cc:9e:
         77:80:a9:b8:32:b9:43:ef:d7:f9:fb:e3:13:0a:ad:11:99:03:
         98:ae:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:22 2025 by rpki-client