Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3138342e3134382e302f32322d3234203d3e20323632393037.roa
File:                     34352e3138342e3134382e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          S+Tlm1v49V8DpoF3dDbr7otciVFYANRYZVhV+SRd7Bw=
Subject key identifier:   FC:9F:25:65:EA:F0:21:6D:99:6E:8A:2C:90:0C:FC:36:2F:3D:63:02
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       433A1D61AED242C29BA071C38196758F29F20683
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3138342e3134382e302f32322d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:23 +0000
ROA not before:           Sat 03 Feb 2024 12:48:23 +0000
ROA not after:            Sat 01 Feb 2025 12:53:23 +0000
asID:                     262907
IP address blocks:        45.184.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3a:1d:61:ae:d2:42:c2:9b:a0:71:c3:81:96:75:8f:29:f2:06:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:23 2024 GMT
            Not After : Feb  1 12:53:23 2025 GMT
        Subject: CN=FC9F2565EAF0216D996E8A2C900CFC362F3D6302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:b4:e1:b0:c5:d6:9c:ab:fa:cd:88:04:82:
                    bd:90:68:95:77:99:2a:f8:58:59:37:1c:01:50:bd:
                    18:a7:27:7e:6a:ca:6d:83:7d:ce:ce:ad:f1:a8:d6:
                    0f:30:4a:ab:d7:8c:ac:b9:9c:ae:79:65:91:70:d5:
                    0b:80:69:43:7e:71:30:53:95:80:3c:89:cf:2c:cf:
                    32:51:20:ba:6b:99:79:79:c3:aa:9b:b5:8f:6b:a7:
                    ce:34:88:48:5c:c7:b5:91:0d:f7:6d:7b:5d:b8:7f:
                    a6:90:8a:21:9f:ed:f4:d9:6a:3c:83:73:e6:84:fb:
                    ae:c3:da:f5:ee:db:e8:b5:34:bd:02:72:d3:2a:03:
                    77:ac:50:64:24:ca:ae:ac:9b:23:21:96:6f:13:f5:
                    b2:40:56:09:79:86:98:f5:be:11:77:ce:70:84:e0:
                    a6:53:af:8d:9b:6e:37:b9:1f:90:30:3e:ba:e2:32:
                    fa:20:c0:8a:7b:05:81:10:db:9e:46:3d:44:c3:f8:
                    0a:f8:6f:3d:2d:63:87:1e:6f:fe:5a:63:04:f3:89:
                    b7:90:f3:31:9f:6e:2b:c2:00:b6:a3:14:83:e1:0c:
                    62:37:ff:3f:a2:9a:9a:68:d0:de:1c:c4:fb:55:22:
                    ce:ba:be:5d:5a:9b:2e:51:a1:a0:61:e9:65:ed:fa:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9F:25:65:EA:F0:21:6D:99:6E:8A:2C:90:0C:FC:36:2F:3D:63:02
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3138342e3134382e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:22:59:5e:9d:b7:1b:d5:52:46:46:3f:88:14:a5:ad:32:5b:
         2c:bf:90:2b:4e:4a:86:ad:ba:8e:ed:2c:ea:e6:32:e1:b7:ed:
         b6:c7:03:3c:55:de:68:96:c6:8f:ef:26:65:6a:2e:81:eb:e5:
         1d:e3:d4:19:2f:1b:83:bd:7c:c2:2b:1d:64:32:cf:9e:ce:d1:
         6a:5d:97:68:b8:ec:43:23:c9:0b:6c:60:fb:e2:79:0a:6e:6a:
         8b:74:50:e2:ad:ec:19:e9:dd:ec:a7:32:53:a3:d8:75:b5:8e:
         f6:79:97:c1:d6:83:7e:bd:34:f4:1b:58:3b:70:29:46:ed:9d:
         ac:0c:43:a5:44:0d:27:b6:db:ce:54:8d:9c:04:f8:c6:82:5e:
         5b:f8:26:88:5e:7e:5d:eb:3c:f5:f7:e7:02:01:11:8c:37:f2:
         64:b3:4e:cd:28:78:45:ec:40:00:57:41:c5:70:5a:9f:40:fd:
         34:17:5e:ae:8d:ef:c3:31:7a:67:65:9f:7b:24:cc:c8:9a:84:
         b0:3c:5f:b6:e9:8a:8b:70:52:3e:cd:a3:bc:06:18:5e:8a:d2:
         20:e2:71:4f:e3:91:ab:cc:5e:d3:f3:c6:fa:dd:dd:2b:5d:46:
         47:10:4b:a2:62:a0:0d:81:97:ac:71:bf:dc:05:55:aa:d8:c5:
         32:be:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:50 2025 by rpki-client