Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa
File:                     34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa (raw, json)
Hash identifier:          o4tBZRuWGdV2KfH5IOxHIlDQ54Uo8D3n8hLRp/qiMGg=
Subject key identifier:   02:D2:6B:26:C3:42:2E:53:76:5B:59:D2:2D:E1:59:04:DE:2E:35:15
Certificate issuer:       /CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
Certificate serial:       4C8B00BFF6667DD6592CA9AB96348BE3C210EC4E
Authority key identifier: 8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa
Signing time:             Tue 26 Dec 2023 16:59:30 +0000
ROA not before:           Tue 26 Dec 2023 16:54:30 +0000
ROA not after:            Tue 24 Dec 2024 16:59:30 +0000
asID:                     268729
IP address blocks:        45.171.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8b:00:bf:f6:66:7d:d6:59:2c:a9:ab:96:34:8b:e3:c2:10:ec:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
        Validity
            Not Before: Dec 26 16:54:30 2023 GMT
            Not After : Dec 24 16:59:30 2024 GMT
        Subject: CN=02D26B26C3422E53765B59D22DE15904DE2E3515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:e4:46:5f:32:44:1e:c0:24:6e:f1:84:5d:
                    c7:92:ec:28:d7:f6:21:a6:1b:ca:9c:64:03:c9:fb:
                    ca:b8:29:8d:34:2d:16:4f:ab:9c:f0:ca:7d:f9:6f:
                    4b:4a:04:f8:76:4a:fe:6e:04:77:e6:3e:2e:b0:4d:
                    b3:db:00:d2:e0:ee:77:1c:f7:70:22:fa:40:a5:43:
                    59:29:4a:a6:e5:57:c2:32:cb:c4:c0:7f:de:e3:3f:
                    a9:cd:23:15:8e:87:b2:26:56:66:58:90:3f:ec:40:
                    79:76:42:d1:04:8a:5f:1a:ba:93:2e:9e:6d:ed:7c:
                    9e:b6:14:d3:75:2a:46:0c:90:7c:19:44:1a:2c:b5:
                    62:a5:33:56:a8:7b:19:22:f3:1c:4c:1c:2d:76:cb:
                    56:73:2a:f9:ac:83:3e:5d:c5:18:6a:15:b4:a7:5e:
                    6e:b3:fb:18:f3:f8:5f:43:9f:76:53:2f:a3:8c:8e:
                    c0:14:f4:2f:2b:a0:fd:39:36:cb:e3:17:4d:23:6b:
                    f5:6a:e2:f8:77:b8:1f:d9:68:38:c2:52:88:b5:55:
                    88:1d:36:0a:eb:13:ff:3b:3e:e3:12:56:3f:c5:75:
                    81:0f:78:8f:d4:9d:86:56:47:12:55:2c:77:77:f6:
                    a0:7b:83:0b:62:81:a6:f1:a1:c4:41:02:17:0f:29:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D2:6B:26:C3:42:2E:53:76:5B:59:D2:2D:E1:59:04:DE:2E:35:15
            X509v3 Authority Key Identifier:
                keyid:8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:c0:81:1b:02:ea:a3:3b:78:df:e1:61:b5:4b:b4:e4:ff:
         fc:f2:f6:d9:6d:df:96:2c:37:a9:99:81:d0:d8:8b:fb:8e:f6:
         24:70:0e:a1:8a:67:4d:f9:d9:09:0a:00:f4:95:03:bc:2c:34:
         0f:e3:a6:82:ea:6b:c2:ed:28:a6:eb:c6:6e:d7:20:d8:7f:ca:
         b4:f9:69:55:62:b3:cb:f3:e1:db:65:5f:ef:26:43:44:4f:9d:
         4c:1d:b5:f7:fe:4c:15:aa:9d:18:e4:c4:a5:9a:d9:08:78:38:
         4b:de:99:b6:7a:aa:e3:dc:ed:d4:69:be:53:67:b2:b7:a7:c7:
         13:30:ef:2c:66:8b:fa:d0:34:0a:c1:9d:67:79:e3:bd:bb:e0:
         72:09:22:ac:dc:48:6e:31:de:1e:06:67:db:67:b9:f4:4d:29:
         35:c9:90:7b:c5:f8:de:f8:2d:1f:93:e8:5c:c5:98:70:97:81:
         3f:0b:81:72:e9:33:e5:00:a4:f7:1b:6f:ca:96:f3:7b:56:01:
         a0:d5:c7:0b:47:7f:7b:98:df:0a:38:1a:17:5a:9a:6e:d3:7c:
         e2:86:cf:40:24:a3:87:8a:41:c4:6d:8a:a3:45:75:1d:c4:06:
         c8:ea:61:0f:f8:d5:b5:c6:fa:3d:9a:07:7a:cf:2e:31:38:6e:
         ae:50:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:22 2025 by rpki-client