Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/34352e3137312e31322e302f32322d3234203d3e20323638313737.roa
File:                     34352e3137312e31322e302f32322d3234203d3e20323638313737.roa (raw, json)
Hash identifier:          IDC4lOuF+kNfLvTfdPRvCA7e9Jg9p55h8Nu6UMYB1AA=
Subject key identifier:   79:51:57:50:70:10:AB:57:AA:46:6B:AE:D2:4C:E3:38:6E:15:3D:25
Certificate issuer:       /CN=14F32A13ACEF5A58C84C147548B1C3475FB1E893
Certificate serial:       1B3AF830670BA28D8A74DD472C7D4BC78CD492B0
Authority key identifier: 14:F3:2A:13:AC:EF:5A:58:C8:4C:14:75:48:B1:C3:47:5F:B1:E8:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/34352e3137312e31322e302f32322d3234203d3e20323638313737.roa
Signing time:             Tue 11 Apr 2023 12:34:25 +0000
ROA not before:           Tue 11 Apr 2023 12:29:25 +0000
ROA not after:            Tue 09 Apr 2024 12:34:25 +0000
asID:                     268177
IP address blocks:        45.171.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3a:f8:30:67:0b:a2:8d:8a:74:dd:47:2c:7d:4b:c7:8c:d4:92:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F32A13ACEF5A58C84C147548B1C3475FB1E893
        Validity
            Not Before: Apr 11 12:29:25 2023 GMT
            Not After : Apr  9 12:34:25 2024 GMT
        Subject: CN=795157507010AB57AA466BAED24CE3386E153D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:33:17:2d:b0:7f:a1:89:4f:60:7a:ec:58:
                    ef:08:2d:18:c9:86:45:e6:f2:22:f4:58:ba:fc:55:
                    1d:93:79:4b:94:d2:ee:e9:7c:71:0d:c8:2d:2c:a1:
                    4e:72:c7:19:6a:61:1e:e2:73:3f:9c:08:13:9f:2d:
                    42:ef:be:4a:af:1f:0b:87:cb:20:d3:58:04:6a:2e:
                    a3:3b:b8:0f:7f:39:55:b6:b1:d5:e6:1e:b2:dd:38:
                    54:1e:f9:4f:cb:43:92:4b:31:c1:70:76:0a:08:54:
                    ab:a5:6a:e1:af:25:da:61:f0:5a:6c:c0:90:25:25:
                    e4:fa:2a:cd:a2:f3:76:e0:ee:38:4e:e3:88:e0:76:
                    5d:ec:f1:87:f8:94:97:db:f2:b6:ce:d0:26:2e:bb:
                    28:ea:b5:bb:b7:c3:8d:c0:c9:07:d4:79:70:31:5f:
                    00:54:e2:d3:68:ea:59:a8:a4:bf:a0:cb:be:53:9f:
                    b9:c3:5b:83:b0:09:04:59:15:74:ff:d4:f6:24:62:
                    b2:42:93:6f:2b:72:9d:6d:d0:5f:a6:1e:24:58:15:
                    50:58:b8:6e:9a:1e:ec:1c:0f:db:35:9d:b9:6d:39:
                    79:3a:73:8b:05:62:4a:3c:c6:f7:6e:d9:1a:83:ae:
                    18:99:11:15:0e:9c:03:9b:a7:bb:84:90:2a:51:37:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:51:57:50:70:10:AB:57:AA:46:6B:AE:D2:4C:E3:38:6E:15:3D:25
            X509v3 Authority Key Identifier:
                keyid:14:F3:2A:13:AC:EF:5A:58:C8:4C:14:75:48:B1:C3:47:5F:B1:E8:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/34352e3137312e31322e302f32322d3234203d3e20323638313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:63:04:25:df:85:01:df:88:13:b5:ed:e7:1a:72:53:e1:da:
         b8:6c:06:05:cf:38:49:e6:df:a4:9e:3a:ad:09:3a:a3:cf:0b:
         7a:0e:8a:87:e2:fb:da:57:6f:fc:ee:fc:c2:de:04:e2:8c:6a:
         39:55:a9:7d:6d:1a:3b:01:58:83:cf:4f:c9:2f:3a:ff:7a:91:
         57:81:49:be:c5:d5:cf:77:00:42:61:02:c2:c3:2f:6e:37:f7:
         59:2c:9d:03:df:f3:72:bb:53:3c:cd:75:c2:e1:0f:96:f1:de:
         cb:70:74:d4:ed:ab:08:d2:e1:a9:e7:a3:c7:1c:d4:30:48:06:
         f5:50:1d:f0:8a:44:ab:e2:05:d4:3a:47:93:c5:c2:9b:a8:c8:
         d6:79:b4:49:71:70:6c:94:ae:a7:48:a1:2e:f2:24:ed:78:70:
         df:fd:f9:d8:c8:58:ae:60:b4:66:3b:e7:60:54:b1:23:75:76:
         bb:d8:2d:cd:27:a4:e4:90:ea:a3:64:59:1d:5f:d2:73:f8:16:
         91:a6:61:27:62:07:79:bb:19:2e:1a:d5:4e:58:a0:ff:eb:2c:
         0d:44:dd:7e:0e:95:0d:6e:fc:b9:0f:67:2f:d4:a3:45:ab:d3:
         dd:3d:1b:15:a7:01:a3:1a:62:3a:58:bf:f6:ea:f4:60:9c:29:
         ad:1b:6e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:37:00 2025 by rpki-client