Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3137342e3230382e302f32342d3234203d3e20323635333435.roa
File:                     34352e3137342e3230382e302f32342d3234203d3e20323635333435.roa (raw, json)
Hash identifier:          mm7w3KjheRuXr82yQBGbnx/3gTciVzUYVBjTqdqSbvE=
Subject key identifier:   B0:56:31:56:05:42:E7:10:E9:FF:B6:53:4E:CD:C8:D8:22:29:A7:5C
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       3DD099BD479F83EAE17F32DAFA01D1F3F024D15D
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3137342e3230382e302f32342d3234203d3e20323635333435.roa
Signing time:             Mon 28 Oct 2024 14:40:57 +0000
ROA not before:           Mon 28 Oct 2024 14:35:57 +0000
ROA not after:            Mon 27 Oct 2025 14:40:57 +0000
asID:                     265345
IP address blocks:        45.174.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d0:99:bd:47:9f:83:ea:e1:7f:32:da:fa:01:d1:f3:f0:24:d1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Oct 28 14:35:57 2024 GMT
            Not After : Oct 27 14:40:57 2025 GMT
        Subject: CN=B05631560542E710E9FFB6534ECDC8D82229A75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:2c:4b:6b:40:4e:11:b5:50:83:b4:09:1f:
                    27:22:7d:6d:a1:f9:aa:89:fc:b7:8d:e2:c3:64:15:
                    a6:3a:24:2d:be:b7:9b:9c:37:4e:39:4c:2a:52:27:
                    6a:f1:f2:db:52:9a:c8:90:60:11:2f:a6:fa:36:40:
                    05:12:c3:db:a9:9e:98:8c:4b:0f:21:6c:ab:1e:11:
                    50:c7:67:18:53:f6:43:61:14:94:85:bc:b8:55:bf:
                    3a:f8:49:e1:41:ea:3e:ad:ef:83:43:5e:72:d6:06:
                    10:b5:57:b8:04:2d:57:b7:c0:00:15:4f:65:db:c9:
                    ec:c6:45:0b:b1:0c:70:a7:11:f8:d9:ee:32:cd:78:
                    8a:3a:0a:05:ec:26:c3:88:67:4a:73:70:dc:18:87:
                    ec:79:a6:36:64:cd:ca:6d:b1:e4:4a:64:39:ec:7d:
                    35:e3:8c:37:a5:4f:2c:0f:39:82:7d:d0:f8:cf:7a:
                    90:dd:f6:eb:7f:34:6a:d2:02:2a:23:bf:8f:06:0c:
                    cc:78:7a:33:70:22:a5:d1:93:98:79:f5:75:21:8e:
                    d1:3b:83:2c:65:54:7a:1f:65:f0:d3:7c:6b:e9:e3:
                    36:39:ae:e1:8e:c0:17:79:fe:18:b4:60:fb:01:8a:
                    0d:1b:15:de:62:ef:6b:39:dd:c1:8a:a7:f0:e1:e5:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:56:31:56:05:42:E7:10:E9:FF:B6:53:4E:CD:C8:D8:22:29:A7:5C
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3137342e3230382e302f32342d3234203d3e20323635333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:1b:84:5c:1f:22:35:f4:12:fd:46:bc:b5:1b:93:a3:f0:4b:
         66:fa:c3:85:81:13:85:9c:fc:24:7a:42:a4:19:27:ab:ae:17:
         3f:6d:66:0f:6c:a2:56:3d:42:ea:b5:27:00:63:b9:48:3d:5a:
         bc:fb:08:e8:8a:72:b1:94:b4:6c:50:6b:01:1e:48:3b:e0:40:
         94:11:65:ad:ca:50:9b:23:7a:51:8e:fd:7c:0f:22:20:3f:8a:
         0d:d8:f3:5c:a8:85:c8:ed:89:bf:bc:4c:53:80:d3:0c:79:d0:
         6d:44:89:0f:e3:7f:92:4b:e9:f7:c8:0e:cf:41:64:66:ce:56:
         23:fa:81:0f:da:40:14:6b:b5:1c:1d:1d:43:75:7a:10:c7:69:
         da:3f:0b:2a:fa:07:07:4a:50:54:75:6a:ea:4f:e4:a3:be:4f:
         17:0f:5d:44:bd:f4:8f:77:e5:c6:09:d5:cf:06:e7:9e:1f:5b:
         89:ec:2a:95:46:8a:3c:f5:aa:a8:36:23:7c:fc:5e:98:b3:3d:
         b6:e4:71:4f:64:d0:4c:70:74:05:7a:92:db:d7:5e:98:f6:bc:
         bb:65:fa:f0:25:8a:8f:76:d3:be:97:cb:40:83:8a:fc:c2:5d:
         7c:a9:4d:c0:cc:71:ae:5d:24:8f:81:e4:02:68:86:48:ee:45:
         c2:4a:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:29 2025 by rpki-client