Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38392e302f32342d3234203d3e20323632343934.roa
File:                     34352e3232362e38392e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          Qthk1uALPtp9zgVLK4jt2wTcf69LwuFuFoCxNK0o3Oc=
Subject key identifier:   C2:DE:FE:1D:5A:E3:13:9B:B3:14:68:C7:D7:39:04:B0:95:52:FE:12
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       43271A5FCD03E4A76C023C1BAF4D3C83E102DD5D
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38392e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:40 +0000
ROA not before:           Thu 19 Sep 2024 14:06:40 +0000
ROA not after:            Thu 18 Sep 2025 14:11:40 +0000
asID:                     262494
IP address blocks:        45.226.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:27:1a:5f:cd:03:e4:a7:6c:02:3c:1b:af:4d:3c:83:e1:02:dd:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:40 2024 GMT
            Not After : Sep 18 14:11:40 2025 GMT
        Subject: CN=C2DEFE1D5AE3139BB31468C7D73904B09552FE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f6:af:c2:67:95:7d:09:eb:5e:00:09:69:8e:
                    64:1a:b9:b5:f2:1a:9d:41:d0:8c:e2:c3:b6:c6:a1:
                    96:f3:21:24:5e:07:7a:d2:7b:3a:65:8a:c3:00:d8:
                    a8:93:0b:2b:7b:d4:53:c9:f5:54:74:5f:74:18:a2:
                    0c:43:be:6a:2f:9b:b8:01:00:08:fe:35:9a:dd:3d:
                    d0:b5:b3:46:fc:3b:30:1a:66:b9:1b:e2:cc:31:8f:
                    50:1b:e6:48:ff:24:e8:da:6a:fa:76:01:ad:72:7b:
                    e1:f0:57:79:7b:36:4f:17:44:58:82:11:16:79:4d:
                    b3:58:b8:43:5f:91:c0:cd:76:a5:78:4f:2c:bf:8e:
                    ab:c2:7d:79:81:ef:9f:d6:2f:a1:7b:29:8f:dc:7d:
                    56:10:d5:bc:eb:46:5a:b7:71:30:4a:d9:06:88:99:
                    54:4a:f6:98:60:58:04:41:79:c9:4e:55:f0:2f:06:
                    46:f3:b0:5a:98:20:f6:a0:e0:ba:cd:77:fd:f1:92:
                    93:51:d8:5b:a9:c0:82:64:83:29:4a:99:56:74:91:
                    0f:94:95:41:7c:2c:ef:07:fc:ec:21:30:75:d0:5b:
                    a9:a2:2c:02:c9:cb:03:b9:18:d7:8c:5e:81:19:9b:
                    fb:12:a8:ac:cd:0a:25:63:f0:22:79:85:be:f5:3c:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DE:FE:1D:5A:E3:13:9B:B3:14:68:C7:D7:39:04:B0:95:52:FE:12
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38392e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:7c:90:2d:6c:13:84:e6:db:49:ee:6d:ce:fc:ee:c2:7d:a3:
         85:38:5a:2f:e8:e5:3d:07:25:d0:29:04:46:78:2c:4f:7f:4c:
         42:a2:2b:27:b9:46:0c:05:ea:1d:5a:ce:6c:91:f1:91:ce:40:
         2c:e2:ea:91:f1:5a:55:44:1f:49:1f:0d:5c:c3:9f:90:2f:c4:
         b1:e0:fe:14:d3:ec:d4:49:3c:e3:79:25:35:aa:fd:e7:2d:6e:
         e2:ad:0c:20:ad:ce:2f:5e:50:a3:c7:6a:77:e2:49:45:34:c0:
         70:d1:33:7f:ae:bc:62:54:35:f6:8d:3a:04:4a:79:9e:a8:76:
         75:51:3a:11:f0:c5:3c:c7:bd:b9:d4:fb:bb:1f:3d:e3:ac:ac:
         f3:25:84:ea:67:44:8d:e2:e9:8f:78:28:30:1a:6e:7c:34:a1:
         60:c2:67:9c:41:96:66:52:1c:d6:25:dd:91:0d:53:05:94:e7:
         56:5e:34:4b:c2:f9:2a:97:ea:d1:26:3d:db:bd:02:bc:3d:14:
         4a:30:e2:ec:2a:4d:44:df:fc:3c:ac:99:70:83:35:b3:07:e6:
         56:5c:44:0f:1f:27:be:a0:ed:a8:ef:10:ca:98:9e:59:a7:d8:
         cf:9b:9a:df:53:5d:46:54:ef:ca:9e:4d:c9:a0:49:a7:d5:9c:
         cb:39:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:52:45 2025 by rpki-client