Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa
File:                     34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa (raw, json)
Hash identifier:          de0+OIsO24UY0QjqqqdOOStdT+bxghCFoIPSE2HbVac=
Subject key identifier:   B0:0F:90:D7:8B:65:1A:33:53:5D:E8:E9:81:81:BE:D6:AB:AD:C0:DE
Certificate issuer:       /CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
Certificate serial:       050D4FE0E4B3D87C707CC622D42C02FFBE524449
Authority key identifier: 8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa
Signing time:             Tue 26 Dec 2023 16:59:25 +0000
ROA not before:           Tue 26 Dec 2023 16:54:25 +0000
ROA not after:            Tue 24 Dec 2024 16:59:25 +0000
asID:                     268729
IP address blocks:        45.171.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0d:4f:e0:e4:b3:d8:7c:70:7c:c6:22:d4:2c:02:ff:be:52:44:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
        Validity
            Not Before: Dec 26 16:54:25 2023 GMT
            Not After : Dec 24 16:59:25 2024 GMT
        Subject: CN=B00F90D78B651A33535DE8E98181BED6ABADC0DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:6a:31:e1:f1:57:11:63:a2:95:63:ac:46:
                    75:f2:77:28:ce:6e:23:8a:1d:b7:5e:26:83:5e:e3:
                    57:0e:49:21:db:5f:0a:0a:8c:0f:fb:2f:4c:5f:31:
                    b7:fb:8f:76:c3:41:c5:02:64:b5:cc:82:33:d1:83:
                    d6:1c:15:0e:03:a5:cb:ab:07:18:26:ba:08:b6:e3:
                    83:05:9c:b9:4d:ab:0f:ac:f5:97:fd:05:18:2b:7e:
                    4d:fe:bc:d0:14:6a:9e:d9:73:06:d5:10:f2:6d:aa:
                    65:c6:c7:ef:19:1f:55:92:7d:64:85:f1:04:19:37:
                    ba:99:02:9d:ca:43:0f:55:94:aa:cb:29:53:a4:98:
                    cd:cd:13:d8:11:1c:f4:bb:d5:45:31:35:b4:7d:25:
                    00:22:c8:c8:e7:44:d2:c9:21:98:04:f8:e9:02:b2:
                    8c:ba:51:4a:d8:1e:4e:f3:ae:c3:07:6f:72:68:fa:
                    9a:05:af:17:f2:fc:0e:ec:4f:67:07:46:38:3b:07:
                    7c:71:61:f1:52:4d:41:d7:c0:46:48:a7:0d:21:bd:
                    7b:eb:3a:06:10:31:97:c2:04:f4:b4:6f:4c:6b:9b:
                    a2:c3:49:4b:68:25:c3:cd:b1:92:7b:72:08:e8:5d:
                    20:cc:73:64:00:d6:ae:14:ef:8b:bd:2d:c8:ed:ca:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0F:90:D7:8B:65:1A:33:53:5D:E8:E9:81:81:BE:D6:AB:AD:C0:DE
            X509v3 Authority Key Identifier:
                keyid:8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:18:59:88:26:ce:8e:c1:79:8c:8a:9e:29:fb:42:b2:0b:
         5a:ae:5d:60:a8:d1:ec:cd:00:50:76:a4:a1:e6:f5:fc:b2:8a:
         6e:79:16:b4:7a:3d:6f:05:6b:57:24:10:84:a9:e0:03:82:82:
         57:bb:91:1d:49:a2:2a:73:8f:67:cb:4d:3d:54:12:54:88:32:
         87:37:b5:39:bc:fc:c4:47:4c:8d:72:bf:81:26:fb:fb:d8:e5:
         50:22:91:46:29:ff:c1:2a:13:63:63:91:e0:67:f3:cd:96:84:
         25:16:42:a8:60:18:96:02:b5:4c:76:2b:5a:c8:32:2e:16:db:
         0f:b8:27:23:71:8e:87:e1:21:d6:50:ab:a0:e3:9e:89:0f:29:
         44:05:68:fd:b3:d2:77:52:5d:63:8d:05:78:ae:da:71:b4:a7:
         4b:2f:fa:0a:83:62:bb:42:ea:aa:e5:83:d2:b3:c2:8c:a8:4c:
         1e:4f:af:6d:2f:93:c4:d9:f3:b3:0c:fd:bd:c1:5e:92:37:d4:
         57:92:7a:69:7c:67:d0:92:5f:b1:cb:d0:8b:eb:3c:3d:9e:a7:
         66:cd:64:d4:0e:d8:6b:ef:01:a1:1f:f0:e1:55:c1:d7:3c:06:
         e0:f2:9f:64:f9:13:71:1e:3f:58:d9:be:ea:7a:d0:d3:f8:69:
         8e:bf:f7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:55 2025 by rpki-client