Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234322e302f32342d3234203d3e20323638363437.roa
File:                     34352e3136342e3234322e302f32342d3234203d3e20323638363437.roa (raw, json)
Hash identifier:          Fev2NMZq7TiWaHXBYyjOX9C23gK5icLN5D59PwMLOeQ=
Subject key identifier:   12:D1:B6:31:85:B2:53:25:E9:A4:7F:58:86:A5:BA:2B:74:60:99:21
Certificate issuer:       /CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
Certificate serial:       0BFBC540691D3C97FFF0D4CF0C21FB70C6D8AD94
Authority key identifier: AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234322e302f32342d3234203d3e20323638363437.roa
Signing time:             Sat 14 Aug 2021 21:00:00 +0000
ROA not before:           Sat 14 Aug 2021 20:55:00 +0000
ROA not after:            Sun 14 Aug 2022 21:00:00 +0000
asID:                     268647
IP address blocks:        45.164.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fb:c5:40:69:1d:3c:97:ff:f0:d4:cf:0c:21:fb:70:c6:d8:ad:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075
        Validity
            Not Before: Aug 14 20:55:00 2021 GMT
            Not After : Aug 14 21:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:93:f2:fe:29:d6:9f:2e:be:92:f6:a1:af:5f:
                    82:fe:f3:18:90:2c:3b:94:34:90:3b:a3:09:3f:af:
                    72:05:c0:c1:ae:ee:3b:1b:d8:8c:7b:65:70:88:f5:
                    e4:d5:a3:7d:75:d9:fa:5e:03:32:fa:9f:b9:c6:d8:
                    81:10:d8:78:78:dc:c0:d5:1c:d2:28:f3:3a:7b:9b:
                    08:93:96:d9:1c:66:17:62:32:da:11:24:5b:35:51:
                    51:51:4c:7a:70:ef:91:86:d2:4d:b3:c9:8c:28:6e:
                    44:95:e4:97:77:c6:80:72:8b:eb:cf:64:87:5c:27:
                    5d:9d:fb:c7:ab:9c:34:28:11:66:46:d8:2f:dc:d2:
                    19:31:db:c8:a7:bc:da:1f:4a:03:38:7c:06:d1:89:
                    d0:c2:c3:44:35:89:84:ea:8d:c5:fd:5e:5d:d4:7e:
                    61:e0:e5:a0:55:fb:32:54:33:d3:c2:c1:23:1d:7d:
                    e6:ac:50:bc:52:3f:61:75:ad:fb:87:16:87:77:47:
                    67:37:52:81:03:ca:20:d4:21:ee:b5:57:bc:06:93:
                    72:d1:01:2e:09:7b:86:31:1c:8e:4f:33:e0:40:16:
                    37:48:55:ea:c8:21:7c:9c:a6:41:f2:c8:11:ea:a4:
                    b7:f1:f2:78:dd:b3:b4:1c:67:c8:e2:f3:e1:fb:5e:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D1:B6:31:85:B2:53:25:E9:A4:7F:58:86:A5:BA:2B:74:60:99:21
            X509v3 Authority Key Identifier:
                keyid:AF:A0:5D:44:F2:05:E1:A6:80:D3:A9:F8:C8:B7:F7:D9:7A:A6:F0:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFA05D44F205E1A680D3A9F8C8B7F7D97AA6F075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/34352e3136342e3234322e302f32342d3234203d3e20323638363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:90:cc:a9:8c:c2:02:e1:4a:b6:2c:fe:70:19:92:31:7b:af:
         eb:69:47:c2:bb:01:15:30:51:f6:a0:7c:a0:a1:97:e5:f5:ba:
         83:4c:bd:d2:67:75:0c:90:4c:eb:74:6b:94:e6:dc:4a:dc:46:
         ff:2e:74:e5:a4:fc:48:31:39:f6:e7:38:6a:a1:04:27:4b:d9:
         a8:f2:52:bb:64:d0:b1:37:65:b7:7e:81:06:fd:e0:cd:d0:47:
         40:ea:d6:7e:85:9b:7a:54:eb:35:31:a7:9c:d4:b3:bb:e2:d1:
         a8:5c:a4:b3:1d:5b:7b:23:df:5a:d5:61:f8:a9:d8:22:cd:1a:
         0f:73:62:b8:5f:6b:87:cc:18:3d:d6:21:c7:b3:64:44:40:f3:
         5b:84:3a:ba:a4:0f:82:4e:47:39:98:b4:2f:df:d9:75:69:c8:
         af:9e:7e:4a:57:31:87:a6:5f:c6:86:d4:a2:5a:31:9d:57:df:
         16:40:ab:82:77:18:af:2f:0a:b6:05:cd:11:59:5e:19:56:d4:
         c7:a9:72:d7:7f:75:d1:fd:c5:50:91:21:8a:ad:d9:38:48:b6:
         eb:c2:79:b9:bb:53:26:0e:5c:40:6a:6d:fc:eb:05:7d:81:61:
         07:a9:23:0d:75:44:04:0b:ba:77:8f:85:da:02:dd:da:b2:2d:
         7d:fe:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:34:10 2025 by rpki-client