Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3135302e302f32342d3234203d3e20323637353839.roa
File:                     34352e37302e3135302e302f32342d3234203d3e20323637353839.roa (raw, json)
Hash identifier:          OC3tFGP3Anhyslc32o0Og1zR8jDboNAvFLpnP+cVRQ4=
Subject key identifier:   16:DF:33:EB:C3:C2:5C:6E:91:A4:75:BB:FE:E7:76:B3:17:7B:2A:8D
Certificate issuer:       /CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
Certificate serial:       47E388513D8C6E35D41345258D0F15726A623277
Authority key identifier: BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3135302e302f32342d3234203d3e20323637353839.roa
Signing time:             Thu 28 Dec 2023 11:44:33 +0000
ROA not before:           Thu 28 Dec 2023 11:39:33 +0000
ROA not after:            Thu 26 Dec 2024 11:44:33 +0000
asID:                     267589
IP address blocks:        45.70.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e3:88:51:3d:8c:6e:35:d4:13:45:25:8d:0f:15:72:6a:62:32:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
        Validity
            Not Before: Dec 28 11:39:33 2023 GMT
            Not After : Dec 26 11:44:33 2024 GMT
        Subject: CN=16DF33EBC3C25C6E91A475BBFEE776B3177B2A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:19:4c:56:96:e8:6c:41:86:30:d3:c4:20:
                    d9:3f:6e:4b:61:82:95:e9:84:40:e0:9e:97:0c:63:
                    5f:ff:d0:be:6d:58:bb:73:06:89:a9:17:5c:28:02:
                    5d:9b:64:cf:cc:41:18:85:9b:f5:a4:a7:84:63:5c:
                    a2:c0:ff:c7:01:28:ee:cb:ea:bb:87:ae:d8:5d:a7:
                    6e:27:2e:8c:b1:64:8c:f2:d8:97:20:31:4b:f3:36:
                    ac:eb:5b:0a:f2:54:db:ed:3a:c1:63:33:88:ab:8e:
                    0d:fb:c5:2e:66:cb:92:9b:9f:4b:da:be:f7:74:21:
                    3e:db:f4:50:44:59:8a:db:d0:a1:62:aa:b6:e4:a3:
                    91:de:b6:e2:4f:dd:10:a8:d0:37:ba:43:0b:6c:e7:
                    23:ab:9c:bd:e2:65:38:69:27:80:12:1c:f2:5d:99:
                    a4:02:22:f0:cb:d7:f6:94:75:3c:47:02:55:b0:e9:
                    3a:45:fd:d7:f4:d7:7f:ce:62:5e:f2:0b:0e:37:39:
                    cf:8d:b3:ff:55:1a:44:e0:d9:08:fb:80:73:54:b2:
                    27:7f:81:0e:4e:29:3c:65:fc:25:a3:6e:d2:bc:aa:
                    5d:2d:65:20:66:64:75:e2:1f:55:4f:48:e4:f0:f0:
                    b1:a2:18:f9:92:5f:a1:6c:74:0b:b8:07:7d:40:f0:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DF:33:EB:C3:C2:5C:6E:91:A4:75:BB:FE:E7:76:B3:17:7B:2A:8D
            X509v3 Authority Key Identifier:
                keyid:BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3135302e302f32342d3234203d3e20323637353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:00:3f:92:84:5b:f7:bd:48:b2:a8:8b:dc:8f:c5:7b:7f:94:
         2c:c9:65:3c:cb:69:c3:db:9c:90:1c:d3:59:75:66:53:6b:7f:
         02:2a:85:5e:13:b8:c5:61:2e:f8:a9:0e:a8:a1:dd:b5:62:23:
         54:9d:3b:6e:80:11:5f:77:00:4d:5b:91:3e:ba:34:f5:16:e8:
         07:05:5c:6d:2e:1d:65:c9:2a:9a:b4:00:d4:8f:57:ad:62:b7:
         36:04:2b:3d:01:e6:89:22:22:02:cc:dd:5e:48:14:51:c7:88:
         51:9f:48:f8:98:d2:55:05:35:02:5e:52:32:dd:56:09:91:bc:
         05:00:df:f2:9a:7d:36:bc:f3:7b:06:5b:81:9a:0a:83:10:00:
         4d:62:b5:a5:99:1e:57:b5:36:1a:fa:5b:d4:de:5b:ec:1a:28:
         e3:4b:56:7b:60:2c:ef:96:0d:1e:4d:2b:bb:00:e2:3d:55:bb:
         17:76:74:d5:d0:8a:41:6e:d9:82:11:83:6c:88:3e:5a:ec:d5:
         84:40:e3:90:50:89:12:f3:54:43:72:24:a1:c4:b0:92:af:62:
         5a:e9:ea:bc:63:8d:fb:e6:2d:9a:89:06:4c:b9:d6:0e:1d:42:
         ef:12:04:71:28:33:b0:83:00:99:fb:c0:a3:96:d6:2e:b3:11:
         70:ce:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:30 2025 by rpki-client