Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/34352e3137322e3230392e302f32342d3234203d3e20323634313030.roa
File:                     34352e3137322e3230392e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          lIhfem0wiEwImIrMSO8E0AtGFEU08lHihkgfohRcYdQ=
Subject key identifier:   A0:BB:40:3B:35:22:1D:B7:7C:F7:13:4D:0E:FD:B4:53:68:49:78:E6
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       0D75D4CB330526A6E7C228C16FCA60A828A623B2
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/34352e3137322e3230392e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:06:55 +0000
ROA not before:           Mon 02 Dec 2024 12:01:55 +0000
ROA not after:            Mon 01 Dec 2025 12:06:55 +0000
asID:                     264100
IP address blocks:        45.172.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:75:d4:cb:33:05:26:a6:e7:c2:28:c1:6f:ca:60:a8:28:a6:23:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:01:55 2024 GMT
            Not After : Dec  1 12:06:55 2025 GMT
        Subject: CN=A0BB403B35221DB77CF7134D0EFDB453684978E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:8b:ee:8a:7c:75:27:05:e7:3d:11:3b:ae:
                    53:46:49:f9:33:cc:74:bb:22:44:71:d7:19:19:c5:
                    cd:01:6d:44:b9:24:4f:42:da:f2:69:63:29:c7:8f:
                    4b:f6:2c:a1:2e:c9:5c:1f:13:68:d9:48:e3:a3:7e:
                    f7:c2:03:20:12:ba:72:ba:d8:06:77:fa:21:15:8d:
                    bc:27:bf:18:61:39:b4:61:ea:e8:07:ce:2b:4e:93:
                    b2:19:38:1c:94:99:96:e5:cb:37:41:5c:4e:23:86:
                    27:73:d9:a6:86:03:0b:4d:66:32:34:f3:40:97:83:
                    fd:50:4d:30:ce:2f:9e:d0:95:13:d0:69:84:29:15:
                    a8:01:17:04:f0:c8:b0:1d:4b:19:7f:46:24:c3:c7:
                    a3:ed:00:b2:74:98:10:29:57:e5:8c:66:2b:49:6c:
                    c3:1c:3c:6f:a6:35:b9:c2:fd:17:22:6a:0d:aa:e3:
                    87:e3:f8:1c:2b:2e:bf:92:cf:03:81:66:5d:9b:4d:
                    6e:e7:8f:b1:2d:ca:b1:d5:f8:52:bc:e8:a6:8a:d4:
                    b8:6f:4d:23:81:74:53:1f:c0:1a:b2:9d:68:5a:5a:
                    c8:55:06:85:81:cf:e9:eb:72:d7:b2:fe:cd:60:b7:
                    33:b9:d7:ff:cb:24:ec:7a:83:db:db:e0:26:f5:47:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BB:40:3B:35:22:1D:B7:7C:F7:13:4D:0E:FD:B4:53:68:49:78:E6
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/34352e3137322e3230392e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:77:c9:5d:28:66:99:db:c3:b2:ca:97:fa:42:69:31:39:4c:
         fb:47:cd:d9:1e:4e:3d:17:9b:cf:01:2b:74:ee:00:6a:4d:37:
         a7:42:5b:a1:58:e8:ce:69:6a:66:74:a1:3d:99:52:51:ef:aa:
         6c:49:49:6f:25:7d:c0:e6:70:30:46:d1:ee:a9:99:12:25:6d:
         16:e7:43:6e:aa:07:3a:d2:7a:1e:ae:c2:56:42:44:0a:fe:b3:
         d6:94:cf:d9:4e:0f:b2:16:c4:17:24:07:28:c3:0d:0d:50:f6:
         1a:5e:d6:5e:a2:b5:4a:d8:26:77:df:1b:b5:88:ef:c6:07:80:
         cd:88:8b:62:df:0b:77:b0:5b:8f:24:d4:68:66:b6:6a:ea:06:
         5d:04:12:dc:d5:23:74:c6:1c:cb:a3:84:6b:e5:1b:7d:82:3f:
         09:96:79:3f:16:48:80:d4:d8:1a:4e:a9:7b:50:bd:ec:2c:bb:
         b3:7e:47:90:3a:80:32:8c:87:7f:32:90:0c:c3:e3:82:4a:21:
         55:75:1f:e4:ab:a2:63:45:ec:d7:34:69:8e:30:b0:ee:19:c3:
         49:e7:1a:c7:df:5d:bf:d5:ac:bb:b4:83:19:65:70:67:f6:a0:
         5b:16:4a:0f:a1:fe:c2:a3:5c:52:ea:a8:56:19:51:d9:01:ad:
         3d:42:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:32:38 2025 by rpki-client