Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31332e302f32342d3234203d3e20323638383734.roa
File:                     34352e3137352e31332e302f32342d3234203d3e20323638383734.roa (raw, json)
Hash identifier:          MhT2cq2XSEgbuO+FVZ7yB12A2UCDDKTidIGdnOXmWG0=
Subject key identifier:   1D:D0:C7:46:3A:0E:0B:13:05:AF:B0:55:E2:16:8D:60:FD:6C:A5:C6
Certificate issuer:       /CN=8AF8BCFB5020364BB44D6951343DC3B09C3E72A6
Certificate serial:       146515C510FFEA951F7EA89D99FC09A9AC33258F
Authority key identifier: 8A:F8:BC:FB:50:20:36:4B:B4:4D:69:51:34:3D:C3:B0:9C:3E:72:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AF8BCFB5020364BB44D6951343DC3B09C3E72A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31332e302f32342d3234203d3e20323638383734.roa
Signing time:             Thu 19 May 2022 15:29:43 +0000
ROA not before:           Thu 19 May 2022 15:24:43 +0000
ROA not after:            Thu 18 May 2023 15:29:43 +0000
asID:                     268874
IP address blocks:        45.175.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:65:15:c5:10:ff:ea:95:1f:7e:a8:9d:99:fc:09:a9:ac:33:25:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AF8BCFB5020364BB44D6951343DC3B09C3E72A6
        Validity
            Not Before: May 19 15:24:43 2022 GMT
            Not After : May 18 15:29:43 2023 GMT
        Subject: CN=1DD0C7463A0E0B1305AFB055E2168D60FD6CA5C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:cb:08:51:b5:a5:28:b2:3b:1f:37:1e:cc:
                    1a:d1:ee:b4:98:62:6b:44:ca:d5:c1:59:83:57:c6:
                    c5:1f:2c:ba:7f:3c:8e:ab:03:e2:25:39:ab:1e:4c:
                    5b:3e:b3:2c:dc:5f:92:9f:ef:b1:60:ab:77:90:1f:
                    32:0f:0e:f4:37:73:95:85:a7:5e:eb:25:0a:fe:a3:
                    fb:ad:f1:17:71:22:f8:a7:0c:af:34:ed:ce:4b:e8:
                    7a:db:a4:de:cb:f6:d6:86:b0:d7:a1:c8:66:73:06:
                    0f:79:79:5e:12:3e:50:4e:a8:68:3d:10:34:91:cc:
                    1c:4e:4d:96:d7:ec:66:46:ac:25:a3:e4:b3:1b:20:
                    bb:75:be:2f:19:18:3e:81:3d:6a:18:7f:c0:a9:cc:
                    91:07:d2:22:79:b0:22:60:a6:93:eb:04:68:e7:27:
                    0c:c0:ea:62:8c:a7:4c:7a:02:b1:0d:93:f9:92:18:
                    31:f2:c7:63:36:52:3b:c4:22:ef:91:78:82:a0:03:
                    97:2b:ad:7c:04:44:94:07:e3:6d:ab:db:0f:8c:ca:
                    c2:53:d3:ec:b9:15:6e:6a:57:33:ee:cb:fa:9d:58:
                    50:1e:dc:66:70:68:14:8a:f7:cb:c5:b8:8b:65:01:
                    02:a7:3e:29:8c:b0:82:c4:2f:78:37:bb:72:39:d3:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D0:C7:46:3A:0E:0B:13:05:AF:B0:55:E2:16:8D:60:FD:6C:A5:C6
            X509v3 Authority Key Identifier:
                keyid:8A:F8:BC:FB:50:20:36:4B:B4:4D:69:51:34:3D:C3:B0:9C:3E:72:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/8AF8BCFB5020364BB44D6951343DC3B09C3E72A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AF8BCFB5020364BB44D6951343DC3B09C3E72A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31332e302f32342d3234203d3e20323638383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:e1:cd:0c:fc:1f:fe:b6:2b:71:0b:c2:aa:e0:eb:c7:01:ad:
         95:39:78:be:43:bd:d1:b6:b6:55:ad:f4:01:e0:e9:11:da:ca:
         2e:79:98:75:96:7d:8e:ee:ad:8a:dc:f2:8d:4f:de:37:ff:f1:
         ce:b1:b2:82:8b:35:ec:0b:a5:3d:71:2c:a9:7f:fb:6e:af:c9:
         9e:06:bc:63:5e:19:9a:1f:b9:6e:f5:48:05:a5:6c:88:34:e6:
         68:04:27:5c:38:9f:24:17:dc:61:31:3b:cb:77:f4:30:34:07:
         07:7d:58:4e:ae:d0:76:bf:0e:57:e6:d3:d3:4a:26:e9:06:1a:
         e7:f5:64:81:0d:ed:22:78:30:52:5a:5f:43:c1:3b:01:ec:e7:
         de:21:86:80:2b:38:24:55:63:06:b1:c9:9f:3d:fb:8c:34:c2:
         c0:38:af:68:8e:74:5a:ed:9e:33:cb:18:10:87:01:e5:ea:c0:
         b0:c7:70:6f:be:42:11:61:04:89:02:18:67:1c:c8:d5:56:b6:
         fd:4c:d9:dd:c7:de:b3:c9:a9:76:5a:f2:a3:6e:59:a0:65:07:
         d7:0c:95:c3:01:ec:84:11:ce:d7:2c:4f:85:e4:67:16:0c:8e:
         22:b9:58:80:c5:6f:a7:44:f1:c7:d1:48:57:a9:7b:d6:4c:01:
         9d:33:9f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:06 2025 by rpki-client