Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32342d3234203d3e20323637303936.roa
File:                     34352e3232392e32342e302f32342d3234203d3e20323637303936.roa (raw, json)
Hash identifier:          jHq1YxI0ipGq42h8P3Q8fql5+4tw72GSR6nu1xIsuyc=
Subject key identifier:   7D:5D:27:84:FF:48:CD:6B:A6:E7:EC:60:B3:E2:80:3B:07:FA:A1:8A
Certificate issuer:       /CN=801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7
Certificate serial:       458F46453BC1AAB84640E0D1D53A21D9F510EC27
Authority key identifier: 80:1F:F8:CE:80:8C:FA:AA:DB:7C:04:20:FD:EA:11:0B:55:C4:F7:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32342d3234203d3e20323637303936.roa
Signing time:             Wed 11 Sep 2024 12:50:31 +0000
ROA not before:           Wed 11 Sep 2024 12:45:31 +0000
ROA not after:            Wed 10 Sep 2025 12:50:31 +0000
asID:                     267096
IP address blocks:        45.229.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8f:46:45:3b:c1:aa:b8:46:40:e0:d1:d5:3a:21:d9:f5:10:ec:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7
        Validity
            Not Before: Sep 11 12:45:31 2024 GMT
            Not After : Sep 10 12:50:31 2025 GMT
        Subject: CN=7D5D2784FF48CD6BA6E7EC60B3E2803B07FAA18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:4f:dd:56:4b:12:45:71:2d:cb:b9:dd:24:
                    d9:b4:79:d8:67:2c:6f:c7:4a:b0:7d:ae:51:43:87:
                    f8:c7:e1:f7:5a:7a:22:43:be:15:b0:84:d5:80:01:
                    f3:e1:49:33:86:2e:8d:12:10:c1:1b:7c:41:fa:28:
                    38:ca:44:be:95:be:d6:ff:08:98:64:2b:23:75:f6:
                    7d:a0:03:1f:3d:85:10:df:5c:8d:3d:52:76:a5:f2:
                    0e:ee:6c:93:e4:ec:bb:92:8b:ed:e4:11:98:74:13:
                    d2:91:42:8c:e8:98:79:d6:b0:44:c2:d5:d4:a6:12:
                    18:0d:0b:8f:ea:93:08:00:20:54:10:45:6d:70:70:
                    d8:3f:8b:e3:84:c3:aa:69:1a:2e:bb:50:1e:93:10:
                    30:0c:97:d2:e4:2a:89:8d:8e:33:33:e4:a2:a1:88:
                    0d:e7:43:bd:2d:34:d5:67:03:06:ca:9b:33:56:d4:
                    11:ec:fd:8b:e2:6a:b3:cd:16:cf:4a:e5:46:b1:7f:
                    26:d9:c4:9d:b0:d8:29:7f:27:85:33:5a:b7:a0:f6:
                    62:f2:f2:8e:65:cf:cc:16:3d:fa:0a:44:47:17:47:
                    e6:87:d8:6b:7a:1d:f9:40:22:3b:b0:0d:ef:0a:a2:
                    72:cf:b1:ff:2c:76:ff:57:d7:a5:c6:8e:e4:16:44:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5D:27:84:FF:48:CD:6B:A6:E7:EC:60:B3:E2:80:3B:07:FA:A1:8A
            X509v3 Authority Key Identifier:
                keyid:80:1F:F8:CE:80:8C:FA:AA:DB:7C:04:20:FD:EA:11:0B:55:C4:F7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32342e302f32342d3234203d3e20323637303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ff:35:48:db:0e:9e:b6:f5:0e:22:74:8d:1e:f4:5a:6c:01:
         34:78:14:37:0c:30:db:fa:2b:29:d2:43:e2:3e:96:58:e5:e3:
         13:4f:a0:85:f3:3d:3e:e6:f5:0f:0d:a9:e8:8c:ff:31:69:04:
         a0:aa:24:5d:d8:3c:86:44:a0:b5:8c:8f:73:19:46:15:9f:78:
         c7:23:09:1a:dc:19:2d:30:23:4e:17:87:0e:5f:fd:c4:de:30:
         89:f6:a5:e7:24:9e:29:61:3b:3b:02:d3:6c:0d:2f:38:eb:28:
         c6:a8:50:d0:19:9a:4c:7e:7d:38:8e:de:80:14:3b:e7:73:61:
         2b:76:4b:03:c2:e7:74:ac:7f:a7:a2:54:89:bd:89:33:2a:fe:
         8a:87:e3:51:87:bd:20:31:e3:5a:c7:d2:07:87:9d:2c:b5:c3:
         03:37:2d:f9:86:df:f1:1b:0a:65:e3:bf:71:8a:79:01:78:5c:
         fe:52:7c:84:5b:e0:46:19:4e:58:d7:a9:15:2c:29:bf:db:44:
         81:9d:ec:f2:82:52:6e:fd:b0:40:26:22:1c:ae:f8:77:26:0f:
         95:21:2e:2a:d1:1f:86:b6:69:97:e1:62:16:6f:08:72:de:21:
         5b:e1:28:ee:12:af:86:a8:b3:1f:b3:3b:c3:5c:24:8a:dd:03:
         bd:d2:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:40:20 2025 by rpki-client