Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32322d3232203d3e20323638303931.roa
File:                     34352e3136392e32342e302f32322d3232203d3e20323638303931.roa (raw, json)
Hash identifier:          TEU76DMxj6pgb8FSktR9ZYptKrWD9Z+rX4khNtaQrbs=
Subject key identifier:   36:12:EC:07:3E:26:91:14:25:4F:A1:83:B6:B8:6A:12:00:CF:2B:A5
Certificate issuer:       /CN=92F8F0F4694D9C74BE501F8D0CE6018FEF8D2E7F
Certificate serial:       6936CA77BC4E0F5B65602E7BF351D4E8D8C80CF3
Authority key identifier: 92:F8:F0:F4:69:4D:9C:74:BE:50:1F:8D:0C:E6:01:8F:EF:8D:2E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92F8F0F4694D9C74BE501F8D0CE6018FEF8D2E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32322d3232203d3e20323638303931.roa
Signing time:             Wed 18 Oct 2023 16:01:36 +0000
ROA not before:           Wed 18 Oct 2023 15:56:36 +0000
ROA not after:            Wed 16 Oct 2024 16:01:36 +0000
asID:                     268091
IP address blocks:        45.169.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:36:ca:77:bc:4e:0f:5b:65:60:2e:7b:f3:51:d4:e8:d8:c8:0c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92F8F0F4694D9C74BE501F8D0CE6018FEF8D2E7F
        Validity
            Not Before: Oct 18 15:56:36 2023 GMT
            Not After : Oct 16 16:01:36 2024 GMT
        Subject: CN=3612EC073E269114254FA183B6B86A1200CF2BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:b1:e3:91:4b:c3:18:45:26:1f:3f:c0:b8:
                    54:3d:d9:85:eb:43:8e:82:92:b4:22:5f:b1:40:41:
                    8f:84:1a:c4:f9:55:05:38:73:5d:c2:48:c9:71:d7:
                    41:89:7e:a4:11:a7:2d:88:4b:ee:71:2c:b7:ed:5d:
                    2b:c9:10:b4:77:4c:14:87:96:29:54:33:0a:96:1e:
                    ab:8d:f7:de:97:0d:54:65:96:b8:7b:21:3b:79:60:
                    9a:bc:11:02:04:cb:3e:a2:8f:04:66:2d:be:04:ca:
                    de:2b:6d:da:b8:bb:cf:1b:3a:4b:32:47:33:48:29:
                    e3:fe:02:4a:8d:55:fb:e8:15:17:f3:13:ef:e3:4c:
                    38:82:e1:ed:0e:5a:56:a5:f5:3d:a9:f6:32:70:79:
                    2b:68:4e:04:e3:3c:1b:19:87:84:a0:55:47:97:f1:
                    bc:35:a1:14:60:a6:c0:08:04:f2:ab:d0:b0:ee:49:
                    a6:0d:25:94:ac:6d:6f:20:5f:b2:e7:0f:8b:df:09:
                    66:23:65:9b:6b:17:98:a6:4b:7f:ff:8b:79:c6:6f:
                    b9:ad:5f:e2:81:59:53:2a:0a:55:de:6d:3d:0e:e4:
                    fe:f3:14:cf:e5:8e:11:47:55:ef:9c:37:01:d6:1e:
                    a7:cb:81:92:38:0a:b0:99:f2:ed:1e:84:e4:7a:a8:
                    b8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:12:EC:07:3E:26:91:14:25:4F:A1:83:B6:B8:6A:12:00:CF:2B:A5
            X509v3 Authority Key Identifier:
                keyid:92:F8:F0:F4:69:4D:9C:74:BE:50:1F:8D:0C:E6:01:8F:EF:8D:2E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/92F8F0F4694D9C74BE501F8D0CE6018FEF8D2E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92F8F0F4694D9C74BE501F8D0CE6018FEF8D2E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32322d3232203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:18:97:f4:bf:a7:d0:2c:be:38:0d:19:cb:14:3b:a1:ea:ae:
         67:bf:a0:fd:2c:e2:cd:30:59:38:80:0c:ac:3e:29:ee:3c:77:
         66:4c:3b:08:ad:56:18:46:d9:86:84:9b:ac:15:cc:52:0a:dd:
         e7:ad:ec:cc:34:2f:ad:3a:d3:43:4f:35:5a:04:5f:e9:22:56:
         f3:1d:44:97:f3:b6:9a:ea:1f:bc:ee:ac:fd:a1:eb:de:11:cc:
         42:c1:1f:3d:4f:94:aa:62:10:e9:fb:18:97:44:e5:85:8c:d8:
         eb:65:3e:b0:fa:76:b1:68:02:20:f5:17:4e:33:ea:76:47:9e:
         1e:6f:f6:3d:b9:40:b3:2b:8e:eb:c8:54:cf:25:df:76:93:2c:
         72:30:46:98:05:8a:1f:4f:2d:d7:36:b2:5c:29:f3:0a:ba:6b:
         3e:7b:db:7e:cc:fc:77:e4:1f:55:2b:b3:37:74:33:d1:73:5d:
         40:6a:94:d8:9a:5c:b6:6a:a6:68:ad:67:a1:31:7e:3b:ac:f7:
         95:d9:80:21:07:73:3b:fb:b9:e5:83:2f:41:b1:0a:e4:ab:85:
         98:66:3e:f4:55:0e:08:fc:fd:b3:9c:23:e1:31:8b:0a:65:e0:
         89:9c:66:53:fc:11:30:e2:6f:3b:d2:db:7d:1d:cd:c2:8d:59:
         a9:55:e4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:03 2025 by rpki-client