Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/34352e3232392e3134372e302f32342d3234203d3e20323637313535.roa
File:                     34352e3232392e3134372e302f32342d3234203d3e20323637313535.roa (raw, json)
Hash identifier:          Ub/5emoTNA0DVtqQNxSPaZiIa/BARBQwpylRIdboC/E=
Subject key identifier:   DB:1F:58:18:CC:9A:7A:61:76:D6:C5:48:66:98:93:68:72:E5:8C:0A
Certificate issuer:       /CN=A18EADDA564A5AFA58919635BE82B33C43174020
Certificate serial:       70C45C82EB358F25213D39F605A649A37472F5DE
Authority key identifier: A1:8E:AD:DA:56:4A:5A:FA:58:91:96:35:BE:82:B3:3C:43:17:40:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18EADDA564A5AFA58919635BE82B33C43174020.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/34352e3232392e3134372e302f32342d3234203d3e20323637313535.roa
Signing time:             Mon 07 Oct 2024 17:02:55 +0000
ROA not before:           Mon 07 Oct 2024 16:57:55 +0000
ROA not after:            Mon 06 Oct 2025 17:02:55 +0000
asID:                     267155
IP address blocks:        45.229.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c4:5c:82:eb:35:8f:25:21:3d:39:f6:05:a6:49:a3:74:72:f5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18EADDA564A5AFA58919635BE82B33C43174020
        Validity
            Not Before: Oct  7 16:57:55 2024 GMT
            Not After : Oct  6 17:02:55 2025 GMT
        Subject: CN=DB1F5818CC9A7A6176D6C5486698936872E58C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3e:c2:ea:f1:41:d6:5e:bf:1c:ad:5a:2e:28:
                    e2:86:9e:09:b6:94:d7:1a:26:66:95:ac:59:d2:e8:
                    0a:30:ee:8b:6b:7c:d9:9b:f9:68:87:17:1d:a9:06:
                    81:b4:65:c4:7b:7a:79:ab:52:1e:c0:d4:3d:ed:67:
                    12:5a:a8:8a:d4:7b:32:c4:be:28:3a:06:c0:f4:6f:
                    14:69:cc:16:fb:45:09:97:13:ed:81:b1:bc:cc:db:
                    70:3b:08:0e:92:e4:22:82:36:66:7f:b6:8c:9e:5a:
                    21:a7:1e:d5:3f:03:0a:b9:c1:92:26:ed:51:90:7a:
                    a7:eb:c6:16:bc:a9:8a:27:82:21:dd:ce:e1:65:1e:
                    27:37:fc:86:8a:e0:82:49:a5:f4:95:89:3f:22:79:
                    a3:58:99:72:1c:0a:0b:03:54:69:06:c1:1c:7e:b7:
                    38:ff:24:62:62:b7:f9:3b:ba:02:70:c8:46:95:37:
                    fb:2e:64:76:9e:c3:15:0d:8e:5c:f9:3e:4f:7b:9c:
                    81:58:3a:ac:ff:26:32:3e:d4:0d:82:f7:1f:ea:da:
                    ec:b3:99:dd:b6:46:ad:c5:f0:99:85:b9:09:25:cc:
                    dd:f1:00:ae:73:a9:6a:00:58:e8:56:92:3f:99:6b:
                    b3:86:53:9d:4b:dd:84:6e:ad:57:83:bb:57:90:7d:
                    33:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1F:58:18:CC:9A:7A:61:76:D6:C5:48:66:98:93:68:72:E5:8C:0A
            X509v3 Authority Key Identifier:
                keyid:A1:8E:AD:DA:56:4A:5A:FA:58:91:96:35:BE:82:B3:3C:43:17:40:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/A18EADDA564A5AFA58919635BE82B33C43174020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18EADDA564A5AFA58919635BE82B33C43174020.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/34352e3232392e3134372e302f32342d3234203d3e20323637313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:9a:a8:91:0c:5e:bf:0f:ac:02:5f:24:ab:61:e8:cf:a5:ab:
         6d:4d:0b:bd:f3:33:eb:93:7c:01:14:d3:eb:c6:fe:26:6d:2c:
         bb:90:be:d6:ff:8f:3a:a3:97:1e:b1:2f:ad:30:67:ee:c7:c5:
         75:53:38:ec:84:5b:10:cd:46:5c:95:e1:15:91:a6:b9:d6:05:
         6f:42:d0:62:3e:2f:c9:42:35:0e:c7:db:01:bf:45:53:52:5e:
         7a:80:97:f2:fb:e4:37:f2:b9:a9:7d:a2:5b:e4:88:83:3c:fc:
         5b:8d:0e:32:81:07:99:99:cf:4c:82:dc:2d:5b:8c:54:64:5d:
         a3:5c:51:1d:c0:63:20:16:f9:84:46:59:51:d1:c3:43:9b:8a:
         bb:41:2e:5f:71:d3:ec:10:d9:fb:bd:1d:e0:fa:0a:4d:64:6f:
         9b:e3:6e:37:18:a4:07:65:cb:10:cc:00:1c:91:92:96:17:01:
         e5:f4:a7:6c:02:29:e5:95:51:ba:a4:b7:4e:5d:f3:ac:91:14:
         61:51:27:e7:f3:60:c8:5d:5b:d6:a1:58:96:ba:30:86:c0:38:
         50:ae:64:ce:c0:a0:5f:9d:92:a2:d3:8b:c8:87:1d:bd:47:1a:
         33:20:6f:78:3a:27:dd:a9:b3:f3:9e:0d:03:ae:a3:d5:25:c1:
         73:71:7d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:45 2025 by rpki-client