Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231342e302f32342d3234203d3e20323637333839.roa
File:                     34352e3136312e3231342e302f32342d3234203d3e20323637333839.roa (raw, json)
Hash identifier:          ttP6DbqDqHTxxYlwa+qK1/9EUPKLOohCGc3aTYpk8Xw=
Subject key identifier:   8F:FE:01:50:44:68:5D:2A:81:59:A2:AC:E4:C5:28:EC:9B:DD:84:67
Certificate issuer:       /CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
Certificate serial:       439FD2A7A2A4D6FEFBB27AFE65F2C1966BCD6F81
Authority key identifier: 7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231342e302f32342d3234203d3e20323637333839.roa
Signing time:             Sat 02 Dec 2023 15:46:09 +0000
ROA not before:           Sat 02 Dec 2023 15:41:09 +0000
ROA not after:            Sat 30 Nov 2024 15:46:09 +0000
asID:                     267389
IP address blocks:        45.161.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9f:d2:a7:a2:a4:d6:fe:fb:b2:7a:fe:65:f2:c1:96:6b:cd:6f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
        Validity
            Not Before: Dec  2 15:41:09 2023 GMT
            Not After : Nov 30 15:46:09 2024 GMT
        Subject: CN=8FFE015044685D2A8159A2ACE4C528EC9BDD8467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:04:67:ca:59:f4:0c:ae:e2:a4:34:29:a6:
                    ff:09:bb:05:56:38:ae:6d:1a:a2:cd:54:bc:56:b7:
                    e4:5b:2e:a2:9f:89:fa:3d:40:28:06:68:77:93:7b:
                    10:53:4b:ef:74:78:59:d2:a4:bf:9e:a3:a7:e7:03:
                    c5:79:af:f4:7c:ea:00:71:5b:fb:bc:62:0c:a4:15:
                    7f:ae:19:28:71:39:44:df:0a:bc:9e:d2:99:f4:b7:
                    ce:51:e8:89:ff:6b:f9:1c:e4:ce:f3:e3:78:d0:a2:
                    e3:37:05:57:20:3c:59:bd:53:d1:01:fe:c9:91:b8:
                    da:b5:22:3f:a5:00:92:a2:80:73:46:8c:25:64:4c:
                    6e:8c:fe:3f:1c:17:47:29:c9:08:71:b9:b5:6e:0e:
                    0a:43:78:b8:d8:58:8d:65:84:74:9d:8a:9a:6f:c0:
                    f7:86:a0:26:12:90:7f:07:6e:e6:bf:fb:39:43:04:
                    5d:ce:c0:91:08:2b:7b:34:17:0e:c0:1d:5d:19:f1:
                    b3:19:f0:08:83:25:76:a3:00:4e:5a:95:db:80:c1:
                    5c:79:62:f0:b7:76:96:59:3b:7a:9f:4c:14:05:b1:
                    c3:90:9b:31:86:46:2d:60:e2:fe:a5:9c:5f:5f:3f:
                    91:0f:4b:f2:1b:8d:36:64:85:fc:69:e3:90:fc:5f:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FE:01:50:44:68:5D:2A:81:59:A2:AC:E4:C5:28:EC:9B:DD:84:67
            X509v3 Authority Key Identifier:
                keyid:7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231342e302f32342d3234203d3e20323637333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:fa:91:6f:29:3d:e3:f1:0b:f8:83:6e:af:97:4a:1f:99:e8:
         5e:f5:7d:48:44:88:b9:16:2a:7c:c9:81:8d:99:c7:38:68:64:
         07:95:a2:2c:24:53:30:0d:da:19:a4:35:19:08:22:01:50:8b:
         e8:ad:4a:ed:20:42:9a:77:88:ee:01:91:a9:52:af:78:95:75:
         91:58:a8:02:23:20:38:df:fc:2b:08:65:6d:84:a6:97:91:45:
         d2:62:5b:e3:94:0a:68:a3:c1:23:3d:ef:4e:a1:5f:0e:5a:14:
         82:85:21:d4:85:bd:04:39:4a:08:86:53:00:48:90:86:cb:66:
         b1:76:58:72:1a:84:e7:5a:a5:91:c4:81:12:72:85:3f:19:d2:
         9a:25:5f:4b:3f:dd:34:d9:e5:60:96:d4:de:f6:e8:9a:aa:da:
         00:38:c9:69:15:ca:77:93:7f:0f:b0:f0:16:1d:76:d3:59:71:
         5c:e8:55:6f:88:06:2b:91:2d:06:a9:f6:ca:76:a6:61:6e:68:
         31:73:d0:bb:b4:86:49:04:cd:4f:34:09:5d:ec:0d:c5:d2:54:
         be:e8:d3:f0:b9:0e:d9:93:c3:e4:4c:55:14:a8:0a:83:c5:2f:
         7e:af:31:97:e5:6d:e9:ca:67:28:f3:e2:c1:43:86:05:26:49:
         12:a6:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:58:58 2025 by rpki-client