Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa
File:                     34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa (raw, json)
Hash identifier:          bRTwcGlI4NLggTdzBA/iGlzodiNCMpCvUVTOOPwAhD8=
Subject key identifier:   AD:80:6C:E7:E3:DD:DD:81:C4:08:87:D6:E8:EE:F9:4F:99:1E:4D:72
Certificate issuer:       /CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
Certificate serial:       1F570E2F6917FD47D2B466BF6EB9126935659467
Authority key identifier: 84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa
Signing time:             Wed 22 Nov 2023 17:53:00 +0000
ROA not before:           Wed 22 Nov 2023 17:48:00 +0000
ROA not after:            Wed 20 Nov 2024 17:53:00 +0000
asID:                     268011
IP address blocks:        45.167.140.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:57:0e:2f:69:17:fd:47:d2:b4:66:bf:6e:b9:12:69:35:65:94:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
        Validity
            Not Before: Nov 22 17:48:00 2023 GMT
            Not After : Nov 20 17:53:00 2024 GMT
        Subject: CN=AD806CE7E3DDDD81C40887D6E8EEF94F991E4D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:a2:02:27:70:84:24:bd:38:7f:ee:a7:db:
                    d6:49:6d:aa:14:a0:0a:8f:50:ed:e2:50:d6:ba:f7:
                    90:f8:78:48:f8:1f:7e:af:5b:e2:e5:01:4e:c6:7c:
                    ca:c8:16:2d:8c:37:ca:7c:a4:01:7b:bc:aa:db:df:
                    df:bc:b4:ef:d5:43:da:98:64:c7:66:a8:4f:14:bd:
                    d0:1a:76:76:32:7b:33:97:7c:6c:27:83:f3:22:9b:
                    2c:2c:ea:b8:0f:b2:25:2f:84:d6:3c:0d:30:0e:54:
                    91:94:03:b3:23:32:33:d9:45:5f:7f:4f:6e:96:32:
                    06:8d:6e:67:0d:1f:16:f9:0c:69:53:00:60:6e:69:
                    3c:14:dd:8d:bd:72:43:d3:cf:92:b0:a2:d4:9f:05:
                    55:61:76:8e:97:54:22:6d:f8:1a:cc:a8:cc:32:2d:
                    4d:66:f2:89:91:06:ba:6c:07:67:28:f0:11:91:19:
                    32:81:f2:59:67:ac:16:7b:f6:03:50:95:53:00:7b:
                    e2:b6:05:dd:cb:e2:40:7f:c4:57:f1:44:5a:2b:df:
                    b0:3c:d6:f1:47:91:a0:21:79:b3:80:7d:11:bf:1f:
                    46:fa:18:3b:7f:64:65:32:cc:51:73:ac:6a:7e:ad:
                    ec:24:58:a0:aa:fe:bc:44:4b:7c:06:05:32:23:67:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:80:6C:E7:E3:DD:DD:81:C4:08:87:D6:E8:EE:F9:4F:99:1E:4D:72
            X509v3 Authority Key Identifier:
                keyid:84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:4b:95:f9:36:57:29:43:72:73:f8:88:3c:98:97:4d:e0:47:
         19:c7:28:d5:47:b1:8c:41:cc:28:cf:5f:70:9d:12:aa:94:a2:
         a1:18:f6:67:72:45:c2:ed:06:dc:f7:f8:9d:51:b1:eb:f5:dd:
         98:28:8d:f8:42:f2:58:ac:26:0d:63:dc:21:b1:1d:98:09:c6:
         d6:9a:36:57:c7:9f:0a:e2:20:7c:05:76:98:f8:99:05:f9:37:
         cd:0a:c1:2b:ad:5c:6f:3b:d1:a6:f2:1f:82:34:26:bb:c2:99:
         9a:a1:b8:25:95:ee:ea:d1:b3:c2:32:47:63:f9:59:49:d5:57:
         af:0d:4f:8b:05:f4:50:1c:9b:27:05:b1:b5:6d:a5:c1:49:e6:
         76:f3:d4:70:36:86:da:08:6f:eb:8e:9a:0f:d3:b3:af:f8:1a:
         82:82:9a:b3:d1:11:e1:b0:1c:92:63:7e:99:bb:86:43:b4:c9:
         42:4b:d2:94:35:fb:53:de:47:98:ee:f1:05:a5:5a:de:2e:b0:
         87:65:25:0f:67:3a:32:d9:32:e8:80:d3:4b:52:d4:07:b3:a8:
         bf:47:b6:68:46:96:6d:02:61:e9:ca:e8:fe:d4:2f:1e:b8:b0:
         8a:ba:e2:8c:59:9e:88:78:42:71:99:16:fd:c4:b0:16:7b:63:
         3e:5b:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:11 2025 by rpki-client