Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/34352e3136342e3135382e302f32342d3234203d3e20323638363332.roa
File:                     34352e3136342e3135382e302f32342d3234203d3e20323638363332.roa (raw, json)
Hash identifier:          jU3s9UCwI8GD4Foo7GQTEFfr1VlLKXVMeDwJ7cigf5w=
Subject key identifier:   A3:C3:C2:36:18:80:6D:36:74:F7:9F:3D:78:6D:FF:D2:9B:3D:2B:72
Certificate issuer:       /CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
Certificate serial:       25E6FD9B40542C9FD614DE10239362A49B27597F
Authority key identifier: E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/34352e3136342e3135382e302f32342d3234203d3e20323638363332.roa
Signing time:             Tue 07 Nov 2023 20:20:06 +0000
ROA not before:           Tue 07 Nov 2023 20:15:06 +0000
ROA not after:            Tue 05 Nov 2024 20:20:06 +0000
asID:                     268632
IP address blocks:        45.164.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e6:fd:9b:40:54:2c:9f:d6:14:de:10:23:93:62:a4:9b:27:59:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74F032955E13B4A7C4DFC4184F1D8018DB7C68C
        Validity
            Not Before: Nov  7 20:15:06 2023 GMT
            Not After : Nov  5 20:20:06 2024 GMT
        Subject: CN=A3C3C23618806D3674F79F3D786DFFD29B3D2B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:07:21:ce:23:db:6f:d3:79:e9:b5:a0:00:
                    ed:cc:62:aa:7e:c6:41:94:32:1d:c0:50:19:a4:b0:
                    0c:a1:5c:80:6d:d7:e4:1a:c8:24:e3:4e:2c:02:5a:
                    d1:48:dd:1d:8e:f0:1c:ba:b5:af:ae:9c:b8:1a:32:
                    67:fa:e1:c5:57:60:64:5f:d3:24:b8:c9:46:41:39:
                    f7:58:ce:f6:7a:ee:be:d0:52:87:39:69:c1:e6:39:
                    34:91:3b:01:48:79:e0:ba:ed:53:27:ee:cc:5f:0b:
                    1c:e3:da:85:5c:cc:dd:cb:ea:14:12:20:ba:0f:1d:
                    28:80:f5:76:00:c6:bb:4b:1f:86:e6:35:15:71:e2:
                    a2:e7:a0:55:f5:27:9d:e4:a2:d4:1d:21:35:a4:d7:
                    69:f5:9c:71:b9:ec:4d:ef:4d:d9:18:a8:02:ac:2b:
                    08:c6:f2:c2:f0:c1:a3:cb:68:43:35:50:d9:fb:1e:
                    b7:23:90:d0:4b:64:cf:c1:cf:9f:2b:9d:24:30:3d:
                    ed:f4:45:be:9b:7e:43:bb:c2:e9:14:f0:65:de:d5:
                    79:05:2f:ac:63:11:17:45:7d:95:3b:bb:46:db:e7:
                    45:2e:2b:49:58:3b:80:19:91:be:0c:25:32:f1:bb:
                    d7:c3:6f:ff:5f:25:e0:67:cf:7b:21:4b:94:d0:53:
                    6d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C3:C2:36:18:80:6D:36:74:F7:9F:3D:78:6D:FF:D2:9B:3D:2B:72
            X509v3 Authority Key Identifier:
                keyid:E7:4F:03:29:55:E1:3B:4A:7C:4D:FC:41:84:F1:D8:01:8D:B7:C6:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E74F032955E13B4A7C4DFC4184F1D8018DB7C68C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/34352e3136342e3135382e302f32342d3234203d3e20323638363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:6e:e3:e9:ef:3c:1c:ad:42:cd:1b:68:2e:ad:94:bd:d5:5c:
         bf:45:49:c7:fc:3c:56:2d:3a:75:59:65:3f:6d:2f:fb:82:24:
         5f:41:31:e1:f0:79:5b:ff:2c:92:5c:fb:0a:12:64:b8:1a:c0:
         39:c0:af:fe:42:b3:23:ff:b3:75:72:43:67:a0:fb:36:a6:dd:
         e3:59:e2:58:eb:19:54:b1:0f:90:83:f3:7a:b0:7f:bd:eb:4b:
         bc:bc:55:b5:e4:d5:39:e6:18:29:ab:5c:6a:f5:c9:ba:17:8c:
         4f:eb:2f:8a:19:55:bd:dd:3f:9c:fd:9b:d2:68:4a:2d:1b:00:
         a5:c7:f9:0d:db:32:9e:54:60:2a:a4:f8:74:47:a2:ac:22:7f:
         88:38:09:7f:60:58:9f:a0:dc:2e:29:ba:11:67:7e:f1:93:26:
         12:1d:1c:1a:5a:a3:a8:d8:69:20:ab:08:7a:8b:27:bd:81:0f:
         8e:5d:8e:a2:f5:02:e7:b3:2e:21:a8:eb:f2:41:cb:32:da:fa:
         02:1e:25:09:f4:39:e9:67:81:3e:17:14:db:1c:c9:3d:49:13:
         90:b1:6b:59:a9:1a:af:f8:60:ea:0a:d9:6d:df:f9:c4:b4:6b:
         76:fe:11:6d:15:49:78:e9:0e:88:b9:56:06:01:01:0c:3c:89:
         cd:1d:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:11:45 2025 by rpki-client