Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/34352e3137382e3131302e302f32342d3234203d3e20323639303334.roa
File:                     34352e3137382e3131302e302f32342d3234203d3e20323639303334.roa (raw, json)
Hash identifier:          YcnGfkHT4x7WZC9O9htqiJxDBowgdR96nHFfqz0Dsgg=
Subject key identifier:   D7:34:6B:80:32:F1:1E:A5:95:75:17:96:05:C6:89:E7:1C:09:76:EB
Certificate issuer:       /CN=8A27BCF74D27B0FFE8478E11F3A09A4E59E5F9C1
Certificate serial:       0EAD3A40A328374A998AAFBCA424EE63565593B0
Authority key identifier: 8A:27:BC:F7:4D:27:B0:FF:E8:47:8E:11:F3:A0:9A:4E:59:E5:F9:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A27BCF74D27B0FFE8478E11F3A09A4E59E5F9C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/34352e3137382e3131302e302f32342d3234203d3e20323639303334.roa
Signing time:             Fri 24 Mar 2023 01:47:11 +0000
ROA not before:           Fri 24 Mar 2023 01:42:11 +0000
ROA not after:            Fri 22 Mar 2024 01:47:11 +0000
asID:                     269034
IP address blocks:        45.178.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ad:3a:40:a3:28:37:4a:99:8a:af:bc:a4:24:ee:63:56:55:93:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A27BCF74D27B0FFE8478E11F3A09A4E59E5F9C1
        Validity
            Not Before: Mar 24 01:42:11 2023 GMT
            Not After : Mar 22 01:47:11 2024 GMT
        Subject: CN=D7346B8032F11EA59575179605C689E71C0976EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:20:c3:83:ed:91:cd:25:09:22:db:7f:e1:
                    e2:47:a2:77:f3:81:3a:13:00:ff:e5:fc:47:71:8d:
                    4b:f6:a2:f5:63:ec:a3:cc:87:f7:38:0b:f6:ad:83:
                    15:f3:6d:1b:ed:a2:6e:c5:65:09:e7:92:19:0d:6c:
                    74:b1:86:fb:ca:94:1e:e2:fe:24:80:23:53:b0:86:
                    12:e9:f3:5e:0e:ef:e7:48:c8:74:10:9c:54:5f:43:
                    73:d4:38:bb:ae:6c:d6:42:55:c3:3a:40:fc:0e:b6:
                    51:8b:1e:b1:7a:0c:f1:36:0e:69:26:85:2c:49:4a:
                    83:da:fe:e2:2d:bd:36:e7:34:a4:54:58:84:a9:51:
                    3a:8b:59:68:bc:0d:44:12:ae:a8:78:92:b9:ad:15:
                    fb:88:3b:11:73:30:07:a4:ac:3e:ee:ca:5d:74:20:
                    a3:e9:12:56:b6:9c:61:bc:dc:95:92:6d:e9:07:e8:
                    f8:b6:d1:c6:c1:eb:7f:6b:ed:e3:c4:fc:07:e9:41:
                    83:69:2f:6b:22:03:bb:95:ee:1d:0c:80:df:79:c9:
                    d2:80:83:18:c4:f4:20:6f:20:8a:a3:c6:c5:b3:b3:
                    c7:fd:33:d6:7a:8a:9e:09:47:e4:4e:70:b5:20:57:
                    76:c3:74:ef:96:1d:41:5e:73:d7:f1:6d:83:ef:9a:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:34:6B:80:32:F1:1E:A5:95:75:17:96:05:C6:89:E7:1C:09:76:EB
            X509v3 Authority Key Identifier:
                keyid:8A:27:BC:F7:4D:27:B0:FF:E8:47:8E:11:F3:A0:9A:4E:59:E5:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/8A27BCF74D27B0FFE8478E11F3A09A4E59E5F9C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A27BCF74D27B0FFE8478E11F3A09A4E59E5F9C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/34352e3137382e3131302e302f32342d3234203d3e20323639303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:bf:eb:50:56:0f:99:e7:6d:e2:d2:23:59:ab:6c:bc:ce:
         2c:64:6c:48:9e:72:89:7e:80:4c:0c:ae:ca:da:11:84:ce:75:
         7d:67:60:aa:14:db:67:64:fe:a0:cb:1e:50:d1:4e:2b:48:99:
         29:bd:dd:64:e6:2a:11:b3:68:1f:7c:66:6f:73:4d:a9:cf:a4:
         7a:78:c6:7c:79:41:fc:aa:53:e0:e5:61:38:ef:d4:48:b9:9d:
         6c:49:30:8b:f0:0c:56:7c:e3:e9:c2:32:9a:cb:21:f6:41:51:
         a4:04:7b:d2:45:cb:e4:c3:07:df:04:40:e1:74:ff:77:3e:fe:
         b8:79:c2:48:44:45:45:8d:6f:a6:21:75:ff:58:b5:67:70:78:
         9a:8c:8d:f5:39:eb:93:7e:45:e8:48:f0:aa:4c:72:01:55:19:
         46:5b:ab:2e:29:42:11:cd:3f:9b:a8:ac:08:fa:ef:76:9f:4d:
         1f:94:c5:6d:19:66:e7:4f:02:bc:eb:b6:c1:96:ab:dc:90:e2:
         ed:22:9e:2e:08:a8:9f:0a:5d:71:3e:22:19:60:83:ad:27:85:
         c9:55:b5:6c:48:f5:cc:f6:70:e1:a9:1f:4c:85:5d:f8:cf:1e:
         28:68:09:b3:19:14:74:84:09:6c:52:02:b8:44:e8:c5:52:92:
         15:d8:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:13:26 2025 by rpki-client