Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jrtfYJLdofHPHdadATDgM4dwhki3YPDoqyddCU88e52/0/34352e3136312e3136302e302f32322d3332203d3e20323638343636.roa
File:                     34352e3136312e3136302e302f32322d3332203d3e20323638343636.roa (raw, json)
Hash identifier:          hbYXQuTPbcr55bbUlwwPatdjruEYz9jH+cu7g0h3Yck=
Subject key identifier:   8B:8D:FA:85:32:8A:EB:69:05:01:AC:E3:68:19:D6:91:61:33:C8:15
Certificate issuer:       /CN=DDF13098A1638513ADF14ADA12869BB266EDED56
Certificate serial:       24313622489D2B77C8B0D9B990A7859B2A2D174A
Authority key identifier: DD:F1:30:98:A1:63:85:13:AD:F1:4A:DA:12:86:9B:B2:66:ED:ED:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF13098A1638513ADF14ADA12869BB266EDED56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jrtfYJLdofHPHdadATDgM4dwhki3YPDoqyddCU88e52/0/34352e3136312e3136302e302f32322d3332203d3e20323638343636.roa
Signing time:             Thu 09 Jan 2025 20:16:55 +0000
ROA not before:           Thu 09 Jan 2025 20:11:55 +0000
ROA not after:            Thu 08 Jan 2026 20:16:55 +0000
asID:                     268466
IP address blocks:        45.161.160.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:31:36:22:48:9d:2b:77:c8:b0:d9:b9:90:a7:85:9b:2a:2d:17:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF13098A1638513ADF14ADA12869BB266EDED56
        Validity
            Not Before: Jan  9 20:11:55 2025 GMT
            Not After : Jan  8 20:16:55 2026 GMT
        Subject: CN=8B8DFA85328AEB690501ACE36819D6916133C815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:a8:36:a8:62:44:53:71:28:f1:96:ca:80:
                    9a:a6:5f:7b:1d:cc:74:81:c4:98:59:ee:f1:e5:96:
                    4c:29:d9:3f:07:e8:24:ec:b7:cf:23:1f:15:fc:24:
                    e2:b5:03:a6:39:1c:cf:e1:b8:11:dc:84:cb:a9:86:
                    3f:eb:b7:8d:21:a4:0e:f1:f9:30:93:be:20:58:7b:
                    d0:4f:08:3b:b6:85:8a:ff:73:b1:9f:3d:93:e9:00:
                    c0:1b:f8:3b:0a:1f:70:27:c6:f6:db:e0:cb:c2:c7:
                    66:eb:70:cb:49:d8:f9:b4:1e:74:40:ed:21:fc:3c:
                    1d:56:d0:74:ba:68:f0:79:5c:5d:a4:ff:6b:04:f6:
                    c7:cc:ac:3a:16:5c:04:31:5e:60:a7:02:38:9c:c7:
                    24:3f:a8:46:fa:85:56:3d:6e:98:0f:77:0f:f2:73:
                    63:3c:16:ea:61:45:ea:ee:5d:ee:25:09:1b:f6:5a:
                    6f:4b:88:6d:93:84:1a:e0:21:8d:bb:68:6a:35:42:
                    1a:5e:cc:4e:77:d6:90:1e:29:58:dd:39:82:d1:88:
                    2f:54:58:2d:ef:69:7d:46:e7:e8:21:0d:b7:fd:65:
                    fa:2d:21:04:f2:9b:e2:f7:aa:eb:ac:c0:85:36:76:
                    a9:60:b9:ae:08:3e:ba:df:93:57:93:35:b8:52:11:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8D:FA:85:32:8A:EB:69:05:01:AC:E3:68:19:D6:91:61:33:C8:15
            X509v3 Authority Key Identifier:
                keyid:DD:F1:30:98:A1:63:85:13:AD:F1:4A:DA:12:86:9B:B2:66:ED:ED:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jrtfYJLdofHPHdadATDgM4dwhki3YPDoqyddCU88e52/0/DDF13098A1638513ADF14ADA12869BB266EDED56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF13098A1638513ADF14ADA12869BB266EDED56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jrtfYJLdofHPHdadATDgM4dwhki3YPDoqyddCU88e52/0/34352e3136312e3136302e302f32322d3332203d3e20323638343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:79:63:53:be:2d:82:b9:68:88:2e:64:4c:59:28:05:31:94:
         15:74:1e:a6:b5:16:8d:aa:0b:c5:af:bf:72:d2:77:9c:9a:f0:
         0f:d2:98:a7:db:24:19:14:7e:4a:fd:d3:57:53:fe:b2:b9:f5:
         e1:f7:6b:ac:ca:3b:39:9b:2e:b8:cc:7f:c9:85:b2:62:dc:1f:
         c8:ba:52:ce:5f:62:37:13:a2:4c:92:71:14:5e:c7:11:2d:99:
         8e:21:47:2c:38:fd:26:ce:53:ad:ff:3f:bb:07:a0:42:b2:39:
         cb:a2:9c:5a:dc:c0:68:d4:64:f1:95:59:d6:d2:86:e9:64:4a:
         bb:1d:d0:89:7b:3f:75:f0:30:44:45:e0:42:5e:28:fb:47:fb:
         0b:e1:59:15:f3:c5:5b:d8:bf:23:1e:16:78:0c:1d:5a:06:49:
         75:f3:48:c1:51:03:05:7a:23:4a:6a:4e:f3:19:f7:7d:43:1f:
         19:05:c8:4f:84:ab:ea:9b:e1:d1:e1:0b:3c:dd:47:02:52:0c:
         35:9e:d6:f4:3d:e8:a5:a9:d1:ff:36:92:dc:b3:96:4a:31:2e:
         97:71:86:d2:22:df:9d:6e:81:eb:0f:5c:86:08:d2:ca:21:12:
         33:39:bc:3d:14:82:88:1d:6c:f8:32:ad:9e:e4:1c:45:4e:0e:
         3c:a9:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:36:27 2025 by rpki-client