Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/34352e3136332e3234332e302f32342d3234203d3e20323638353834.roa
File:                     34352e3136332e3234332e302f32342d3234203d3e20323638353834.roa (raw, json)
Hash identifier:          IlTIvnFFoLT3PvqC4Ze2HioPMiouroSzofzRrbfnlNI=
Subject key identifier:   26:3E:C9:ED:06:16:E1:85:91:3F:7C:0F:9F:A2:9C:27:D2:C2:6A:8F
Certificate issuer:       /CN=4BD795F092B94300EC0509053A12492273477784
Certificate serial:       4C5B7CF9CE715711D6A7B3AD17900BE2A26833F1
Authority key identifier: 4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/34352e3136332e3234332e302f32342d3234203d3e20323638353834.roa
Signing time:             Tue 02 Jan 2024 17:16:08 +0000
ROA not before:           Tue 02 Jan 2024 17:11:08 +0000
ROA not after:            Tue 31 Dec 2024 17:16:08 +0000
asID:                     268584
IP address blocks:        45.163.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5b:7c:f9:ce:71:57:11:d6:a7:b3:ad:17:90:0b:e2:a2:68:33:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD795F092B94300EC0509053A12492273477784
        Validity
            Not Before: Jan  2 17:11:08 2024 GMT
            Not After : Dec 31 17:16:08 2024 GMT
        Subject: CN=263EC9ED0616E185913F7C0F9FA29C27D2C26A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:31:cc:6b:99:32:a9:26:c7:a1:30:a7:f2:ae:
                    b3:7a:d7:d9:62:bd:34:bc:86:68:d4:32:9d:d6:06:
                    18:27:b2:1f:e2:41:7c:04:b3:90:bb:9d:a0:0c:aa:
                    ee:11:f3:d9:f3:21:d5:b8:c6:d5:56:82:2d:57:9a:
                    45:b0:cf:22:4d:c3:df:3e:69:43:57:e1:90:4d:48:
                    35:2b:97:3f:0b:47:81:16:ea:75:70:a5:3d:65:fc:
                    c5:2d:1e:5c:a0:8e:c9:08:59:97:a0:57:db:93:49:
                    13:89:96:ec:c1:82:90:89:fd:85:4b:a1:aa:ed:2c:
                    b2:c1:70:50:cc:be:0d:a1:9c:d8:39:be:83:28:95:
                    83:70:30:3b:41:53:c2:74:47:82:bd:85:5e:a4:d0:
                    1d:4b:bb:f6:c9:89:eb:1a:91:21:01:ff:73:55:e9:
                    59:e4:d9:0a:a3:f3:29:d6:62:a2:5b:af:8b:c9:c4:
                    41:33:7b:b8:12:b4:5a:2a:47:e8:91:11:9c:52:d0:
                    d2:52:b5:3e:16:87:0d:82:91:76:d3:f5:01:66:a3:
                    12:c4:44:3e:51:07:f8:e8:e0:b2:e6:1f:10:10:fa:
                    70:96:7d:29:79:66:99:f5:d4:ae:8b:5c:4e:60:6e:
                    da:76:04:77:f4:a4:b8:e6:a6:b6:8a:90:74:14:ec:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3E:C9:ED:06:16:E1:85:91:3F:7C:0F:9F:A2:9C:27:D2:C2:6A:8F
            X509v3 Authority Key Identifier:
                keyid:4B:D7:95:F0:92:B9:43:00:EC:05:09:05:3A:12:49:22:73:47:77:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/4BD795F092B94300EC0509053A12492273477784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BD795F092B94300EC0509053A12492273477784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qw98KyBoGRX9V9ELjPB8j7pvEDbvgz22HqAWjmNTBWw/0/34352e3136332e3234332e302f32342d3234203d3e20323638353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:4d:84:97:33:29:bd:4e:de:30:cb:b6:7d:91:79:6a:f3:15:
         b0:3d:f4:33:2a:fa:3f:d8:16:61:c8:1b:71:1c:10:63:ea:00:
         95:ee:54:1d:b4:c5:93:29:b4:0f:ac:d1:1b:dc:2e:3f:6f:b6:
         a4:f8:9a:63:ce:ac:03:6a:da:e5:ae:81:b4:50:7d:c7:94:eb:
         4b:5f:4c:1e:40:04:97:e7:86:50:5e:aa:a2:7a:27:2c:67:9d:
         b4:f6:ad:c0:b1:81:20:dc:d8:d3:3b:45:59:98:77:a2:20:d6:
         b3:99:54:2d:38:3d:91:8a:bb:5d:1e:99:49:a9:bf:c6:4d:7f:
         3a:21:6f:54:e7:20:f7:62:ab:49:df:af:03:12:e2:11:11:53:
         dc:eb:20:37:2e:60:28:58:aa:a7:47:94:86:fa:43:0b:3b:f0:
         3f:66:3d:f9:e1:b1:12:8a:d0:7b:d9:50:ca:d3:8f:69:ff:eb:
         0b:80:53:a3:bc:99:83:63:dd:28:8c:f0:be:57:bb:c0:17:b0:
         16:a1:77:58:d4:d7:cf:70:5a:73:68:b3:64:80:31:b0:fb:3f:
         77:0c:8a:7b:f7:ae:d6:41:71:61:e6:36:a9:7e:c7:a4:de:5e:
         de:d9:df:47:62:4d:e6:24:d3:21:81:7f:80:2b:98:90:04:25:
         f2:a5:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:29:27 2025 by rpki-client