Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/34352e3136342e3135362e302f32342d3234203d3e20323638363332.roa
File:                     34352e3136342e3135362e302f32342d3234203d3e20323638363332.roa (raw, json)
Hash identifier:          0eB66qXqN50h0ZU246yN0zD5EvtmgHzY7NUJVdKU1CU=
Subject key identifier:   5B:B2:0A:DF:25:B8:32:52:07:82:D4:0B:35:6E:F5:6E:F6:2C:3E:C2
Certificate issuer:       /CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
Certificate serial:       4DF2856639F17312E39A68FA7E88B2D68FF2239F
Authority key identifier: E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/34352e3136342e3135362e302f32342d3234203d3e20323638363332.roa
Signing time:             Tue 07 Nov 2023 20:20:04 +0000
ROA not before:           Tue 07 Nov 2023 20:15:04 +0000
ROA not after:            Tue 05 Nov 2024 20:20:04 +0000
asID:                     268632
IP address blocks:        45.164.156.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f2:85:66:39:f1:73:12:e3:9a:68:fa:7e:88:b2:d6:8f:f2:23:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
        Validity
            Not Before: Nov  7 20:15:04 2023 GMT
            Not After : Nov  5 20:20:04 2024 GMT
        Subject: CN=5BB20ADF25B832520782D40B356EF56EF62C3EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:15:e9:85:20:c3:ea:51:89:37:f8:21:62:
                    9d:24:f5:8d:b8:49:85:ba:6e:79:2d:00:58:32:20:
                    9d:13:7e:41:7c:86:09:15:e2:31:e4:76:0f:38:b0:
                    df:36:73:2a:ad:07:ad:a6:84:b6:a6:e9:f0:f3:18:
                    a8:bd:ac:1f:a3:ce:86:5f:85:66:5a:19:43:be:d5:
                    e7:cc:bf:c6:61:98:da:7b:d6:94:e9:f3:e6:07:7e:
                    2b:2e:6f:1b:97:bb:d2:8b:37:c3:49:e9:ad:72:6b:
                    49:70:75:3b:6f:bd:48:99:66:40:a4:61:d6:b3:78:
                    fd:32:90:b9:ad:fb:ba:fc:54:0b:91:d5:dd:71:62:
                    a6:98:06:31:d8:26:6b:62:c4:88:c5:5d:f0:73:2f:
                    92:a0:0a:57:d5:19:72:89:53:16:af:6b:d4:82:ba:
                    65:68:6f:8b:eb:9a:41:1c:a9:92:2d:94:fb:5c:59:
                    d0:05:bd:33:45:57:f9:eb:58:f4:42:1a:68:33:81:
                    b0:3d:1e:1d:a8:66:ef:0e:79:12:ab:fe:fa:da:ec:
                    71:a6:3e:51:ba:dc:19:9a:58:ba:a2:6e:6b:6d:59:
                    28:1d:9f:9d:ab:b0:59:f2:21:3c:68:13:ba:95:ce:
                    c5:74:77:fe:6c:78:a4:54:d8:84:01:06:8d:2e:af:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B2:0A:DF:25:B8:32:52:07:82:D4:0B:35:6E:F5:6E:F6:2C:3E:C2
            X509v3 Authority Key Identifier:
                keyid:E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/34352e3136342e3135362e302f32342d3234203d3e20323638363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:6e:f4:3a:e4:40:c8:79:8e:0f:11:c4:fa:0b:68:72:27:37:
         71:90:48:7b:f0:90:80:b8:0b:e3:cb:85:7b:a8:a5:b7:18:38:
         e0:bb:d6:d9:00:9d:60:55:97:82:7e:ff:be:ab:ec:2f:f7:46:
         67:fb:aa:ee:25:36:c7:0c:62:d8:fa:17:d6:ec:fa:5c:fb:50:
         79:67:07:de:22:36:e9:43:32:81:3b:e3:40:9d:56:a6:d7:02:
         37:46:d6:18:9c:2d:bf:b6:29:aa:7c:60:50:b2:e1:18:73:68:
         12:a3:f5:59:a1:32:35:74:f0:0d:ea:fd:8c:e6:c3:6b:88:a2:
         c3:95:28:4d:4e:d0:2c:60:26:88:f1:cd:07:44:47:42:8c:3d:
         7b:60:7c:7e:7a:46:b7:a2:ed:86:4c:d2:96:00:bb:b5:c4:e8:
         87:c2:ae:59:5d:a2:38:bc:cf:52:76:3f:8d:ea:69:b6:af:68:
         d7:f2:f4:5c:a0:c9:ae:c8:3e:7a:e8:f2:50:89:9b:e9:4d:15:
         c8:50:9c:93:26:75:bb:b6:82:35:85:8a:85:a2:e5:e8:9b:26:
         97:13:c7:c2:8c:a4:15:a9:85:c5:46:78:dd:b3:a0:cd:64:6c:
         0f:d5:43:96:c7:e1:5b:22:4c:fe:79:5a:48:2c:e1:51:b2:de:
         56:64:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:41 2025 by rpki-client