Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa
File:                     34352e3136352e39362e302f32322d3232203d3e20323638363734.roa (raw, json)
Hash identifier:          ockBw2p7NpXfA8MA7gloI26NEq5o3bqJIkryK582Z9Y=
Subject key identifier:   BA:4F:D0:7A:89:CC:83:18:73:04:7D:F3:E0:07:78:63:90:A9:D5:A9
Certificate issuer:       /CN=04004212A99696A4F283C73FE7EC609301933701
Certificate serial:       79998401DB0BDFCC753C89AF1FDD8DCD56A0BE70
Authority key identifier: 04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04004212A99696A4F283C73FE7EC609301933701.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa
Signing time:             Fri 15 Mar 2024 13:18:58 +0000
ROA not before:           Fri 15 Mar 2024 13:13:58 +0000
ROA not after:            Fri 14 Mar 2025 13:18:58 +0000
asID:                     268674
IP address blocks:        45.165.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:99:84:01:db:0b:df:cc:75:3c:89:af:1f:dd:8d:cd:56:a0:be:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04004212A99696A4F283C73FE7EC609301933701
        Validity
            Not Before: Mar 15 13:13:58 2024 GMT
            Not After : Mar 14 13:18:58 2025 GMT
        Subject: CN=BA4FD07A89CC831873047DF3E007786390A9D5A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:96:af:99:63:fd:b6:ae:dc:e1:cb:4a:03:
                    c9:67:38:94:66:c2:6e:60:54:27:56:34:90:5b:ce:
                    90:4c:69:7e:cd:82:0c:d6:9e:1d:9c:74:97:49:d6:
                    83:68:cc:0c:67:71:2d:b0:cb:e3:89:ca:8a:d6:af:
                    e1:21:92:18:49:8b:54:85:24:cf:3c:f6:6a:c9:c0:
                    04:25:fd:90:1e:11:00:33:c3:d6:13:0e:a4:01:4f:
                    c8:90:1f:73:79:af:20:97:cb:d6:65:ab:33:3e:89:
                    dd:d4:10:62:11:87:f6:b6:39:5c:b6:8e:bf:13:9d:
                    06:8b:d6:dd:b2:ea:a2:39:95:36:b5:55:d1:72:96:
                    04:8f:a8:d9:83:08:39:65:bf:06:80:65:8d:90:5a:
                    7f:37:7b:1b:b2:11:a0:c9:4a:a0:76:7f:51:a9:1a:
                    f3:37:6e:aa:03:ea:b7:47:f9:5c:e3:37:a1:b2:5f:
                    0b:1b:69:ca:39:e9:62:58:2f:81:d7:46:c2:73:1b:
                    b4:4e:0f:60:fd:a6:8b:81:9c:c4:63:74:58:bf:9a:
                    65:c2:f2:4a:8c:a4:62:1c:c2:b8:b6:98:d0:bf:06:
                    4f:30:66:3f:31:ec:11:94:7d:61:25:16:f4:04:2c:
                    10:87:57:d6:b6:2d:85:63:73:d9:4c:20:11:8c:b1:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4F:D0:7A:89:CC:83:18:73:04:7D:F3:E0:07:78:63:90:A9:D5:A9
            X509v3 Authority Key Identifier:
                keyid:04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/04004212A99696A4F283C73FE7EC609301933701.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04004212A99696A4F283C73FE7EC609301933701.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:ee:cc:39:88:0d:79:60:e8:f8:63:55:07:c4:f3:1e:1e:4a:
         b8:a1:03:0e:1e:a0:07:61:71:a4:08:f5:37:47:b5:38:77:3b:
         82:94:e1:69:de:3f:23:44:bf:b6:7f:c2:e6:fd:a1:44:0c:32:
         c7:e3:57:c8:5a:11:60:87:4e:be:7e:f9:2a:07:8a:a5:ad:a4:
         54:e3:01:6a:bc:12:c7:a3:7b:b9:55:b8:b2:c5:2c:de:c6:9d:
         a0:66:7b:2f:77:6a:30:ce:c2:df:45:6d:bf:50:19:2b:0d:55:
         59:9a:5e:a0:db:f7:53:8a:25:3c:53:b8:71:9e:c7:80:12:0e:
         73:7b:77:12:e3:9a:4a:eb:7d:c2:a9:c0:9e:21:76:af:34:ce:
         51:63:f3:cb:be:4c:0c:22:4c:d4:38:20:a2:d9:c1:e7:a1:65:
         a4:ea:35:b2:56:52:92:2b:18:73:34:87:c1:a2:fb:85:a8:1c:
         ca:49:d1:11:2f:12:f7:8f:a8:f5:78:c7:ee:8e:21:ca:2e:6c:
         0c:0b:06:b1:67:cd:58:a0:4d:4a:e9:da:2b:f3:66:62:5b:41:
         bc:ac:95:66:b7:a2:17:03:0c:31:eb:97:81:14:83:9f:3d:91:
         c0:b7:38:87:07:0a:a1:ab:2d:89:72:4a:ee:0b:6e:b0:90:b8:
         97:81:29:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:46 2025 by rpki-client