Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136312e302f32342d3234203d3e20323639303032.roa
File:                     34352e3137362e3136312e302f32342d3234203d3e20323639303032.roa (raw, json)
Hash identifier:          JmIWktYQ1HG/PLAU0y3/1oIY3ftI2D4Tg8k6OgidhxM=
Subject key identifier:   87:CF:C7:3C:08:33:36:6C:AB:39:99:A6:3C:0D:89:66:E1:A7:10:82
Certificate issuer:       /CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
Certificate serial:       39F94AB6632AB57803C7E61E5D5CA66CF7A2CFD5
Authority key identifier: F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136312e302f32342d3234203d3e20323639303032.roa
Signing time:             Thu 15 Feb 2024 21:51:39 +0000
ROA not before:           Thu 15 Feb 2024 21:46:39 +0000
ROA not after:            Thu 13 Feb 2025 21:51:39 +0000
asID:                     269002
IP address blocks:        45.176.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f9:4a:b6:63:2a:b5:78:03:c7:e6:1e:5d:5c:a6:6c:f7:a2:cf:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F398A83D78DD12A3CD95E521760F978E1F2B8819
        Validity
            Not Before: Feb 15 21:46:39 2024 GMT
            Not After : Feb 13 21:51:39 2025 GMT
        Subject: CN=87CFC73C0833366CAB3999A63C0D8966E1A71082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:48:1b:7c:ef:fb:49:23:a4:03:d9:6d:cf:fb:
                    5a:7f:1f:17:ad:41:44:cc:36:5a:3f:7b:fa:b3:ce:
                    71:f1:fb:5a:4d:13:c2:29:c6:63:be:2d:52:65:24:
                    52:9c:af:6e:fc:01:c5:05:75:34:5d:45:dd:5e:c7:
                    28:3d:32:9f:f8:81:58:37:11:4e:ef:a6:29:7d:0b:
                    16:a6:80:db:ff:04:4d:20:ce:17:43:24:0b:5f:a3:
                    ea:57:65:e4:8c:57:60:1c:e4:ec:65:57:86:7d:b7:
                    39:a8:2c:79:60:9a:4a:de:f3:81:54:3d:5b:7c:d4:
                    ca:b1:37:d2:f7:62:cc:da:94:e5:1f:b8:0f:41:bd:
                    7e:42:67:39:ac:6d:2d:9f:7a:e7:c1:d0:cf:f8:38:
                    24:33:5c:00:d3:5e:7e:09:88:c1:68:c3:27:d9:a5:
                    33:60:ae:55:d2:54:3d:8a:85:0c:ea:7b:58:b0:e1:
                    ca:6b:0d:57:9f:47:0c:9c:70:56:d6:ae:57:73:5a:
                    54:e7:69:e2:10:1b:e3:26:b5:39:da:46:2c:5f:5c:
                    c7:62:77:5d:c3:7b:da:da:1c:e8:39:06:75:43:39:
                    a5:cf:1a:ee:c3:cb:5a:42:95:b2:c9:42:3a:20:8d:
                    05:5f:e7:61:b8:4d:ef:fb:ed:3d:48:98:d9:ad:a0:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CF:C7:3C:08:33:36:6C:AB:39:99:A6:3C:0D:89:66:E1:A7:10:82
            X509v3 Authority Key Identifier:
                keyid:F3:98:A8:3D:78:DD:12:A3:CD:95:E5:21:76:0F:97:8E:1F:2B:88:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F398A83D78DD12A3CD95E521760F978E1F2B8819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/0/34352e3137362e3136312e302f32342d3234203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:b5:c3:16:99:c5:c9:5d:4f:7c:d8:8b:cf:66:79:73:b9:
         b4:ea:89:fe:58:bd:49:4a:20:29:d8:cf:3e:98:f7:c8:0c:37:
         dd:45:92:b6:78:5c:b6:de:f3:60:7f:95:7e:d4:48:56:bf:7a:
         45:90:55:90:d3:b5:2a:94:33:8c:c0:7c:88:89:ca:4f:46:5c:
         96:5e:45:ab:da:01:ae:66:9e:d9:9b:6d:30:a9:5a:0f:02:af:
         a1:16:d1:22:f0:7f:f8:f5:21:4a:13:5a:e9:d4:24:17:48:b4:
         ca:0a:1e:75:0a:1c:39:f0:ef:d4:8a:e5:54:1f:a6:28:6b:d0:
         e1:19:2c:61:09:2c:02:c3:30:05:75:6d:a1:4e:b6:50:a0:5a:
         9e:a0:e7:17:6b:52:d8:ea:53:28:bd:a0:a0:30:9e:37:71:f6:
         76:ca:9b:63:59:b5:a0:20:a9:33:df:92:e4:21:1a:88:f2:cd:
         74:3e:1f:60:1b:23:8d:55:c2:ab:dc:8e:89:20:ba:89:75:a9:
         67:83:0e:38:86:0b:73:a4:70:19:f4:93:fe:52:75:ac:73:80:
         ed:64:63:55:95:39:14:8f:d9:a5:c0:12:62:5f:7a:c2:6c:36:
         e7:25:00:67:be:54:6f:c2:99:3d:3a:66:50:d3:4d:58:44:9a:
         97:7a:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:06 2025 by rpki-client