Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/1/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa
File:                     34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa (raw, json)
Hash identifier:          6//F7Ta9khiPnpZGW+e4/XG2w+bHVJiAJeyDOSXGpw8=
Subject key identifier:   19:F7:32:23:2A:C1:EB:58:C0:16:48:D9:99:CC:99:6A:EF:CB:65:97
Certificate issuer:       /CN=4CBEAD8BAD80DD93561BC9A6BAB37CE1DD275CD4
Certificate serial:       7FD243953E67740CCDA98FABB8036D9ABDACECF3
Authority key identifier: 4C:BE:AD:8B:AD:80:DD:93:56:1B:C9:A6:BA:B3:7C:E1:DD:27:5C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CBEAD8BAD80DD93561BC9A6BAB37CE1DD275CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/1/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa
Signing time:             Mon 21 Aug 2023 12:00:57 +0000
ROA not before:           Mon 21 Aug 2023 11:55:57 +0000
ROA not after:            Mon 19 Aug 2024 12:00:57 +0000
asID:                     268737
IP address blocks:        45.171.252.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d2:43:95:3e:67:74:0c:cd:a9:8f:ab:b8:03:6d:9a:bd:ac:ec:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CBEAD8BAD80DD93561BC9A6BAB37CE1DD275CD4
        Validity
            Not Before: Aug 21 11:55:57 2023 GMT
            Not After : Aug 19 12:00:57 2024 GMT
        Subject: CN=19F732232AC1EB58C01648D999CC996AEFCB6597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:07:db:f1:86:40:0f:4d:9c:eb:85:d3:a1:
                    95:7b:77:2d:be:e6:39:06:41:c4:b2:0b:c8:d3:5c:
                    c3:ee:aa:53:f7:b6:17:ed:19:3a:52:dd:37:73:2d:
                    15:34:29:eb:3f:28:a5:91:35:11:f8:83:c8:f3:9e:
                    f8:8a:60:42:cf:7e:9c:a4:10:f7:15:9a:40:48:d6:
                    13:4b:53:f3:23:09:85:20:69:5f:2d:e7:c6:97:b7:
                    84:75:56:11:7e:4c:c1:53:1e:8d:87:2a:63:3c:8f:
                    73:df:df:d3:83:4b:ee:50:99:19:5a:ab:65:3d:0b:
                    86:b6:05:a1:7c:fe:6d:f6:9e:60:86:61:1a:ea:42:
                    39:ee:f7:3f:bb:bb:d7:79:60:63:f1:30:4b:94:04:
                    d7:81:95:73:48:9d:19:80:1d:b0:bd:c7:67:7e:f8:
                    84:5b:d1:db:f7:18:6a:bc:00:4d:11:7b:6d:57:92:
                    a9:d1:59:c7:53:a1:b4:50:46:c2:b4:10:5f:65:17:
                    ad:74:5a:33:7c:29:98:f7:16:d7:91:c5:6d:b5:7f:
                    a1:47:a7:e0:b7:7d:f0:84:2a:38:ee:e4:fc:b0:b2:
                    31:09:11:e6:eb:dd:37:ea:b1:fd:0f:33:ed:13:e6:
                    a8:78:8c:d0:8a:f9:75:57:3d:0e:03:75:c9:7e:73:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F7:32:23:2A:C1:EB:58:C0:16:48:D9:99:CC:99:6A:EF:CB:65:97
            X509v3 Authority Key Identifier:
                keyid:4C:BE:AD:8B:AD:80:DD:93:56:1B:C9:A6:BA:B3:7C:E1:DD:27:5C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/1/4CBEAD8BAD80DD93561BC9A6BAB37CE1DD275CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CBEAD8BAD80DD93561BC9A6BAB37CE1DD275CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/1/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:28:b8:e2:0e:b9:f1:08:83:3c:8f:a9:cd:68:ec:84:fa:
         27:64:da:61:ef:15:46:39:c1:64:69:66:d5:93:22:2a:2e:ba:
         07:62:43:dc:e0:95:37:2f:96:9e:d5:80:0e:f3:1b:5b:77:c1:
         f5:10:a4:35:cd:16:b0:4e:1c:d0:5a:8a:b7:0c:96:cf:2e:dd:
         97:d6:d3:2c:af:73:8a:61:61:0d:c2:e0:d4:96:81:2e:f3:00:
         04:c4:32:0c:c1:0c:ba:5a:94:fc:a7:3b:5e:fd:4b:52:bb:14:
         75:7e:23:9c:47:a8:15:11:7e:57:f1:98:d9:54:7b:be:ad:c3:
         a9:f4:03:7c:31:91:56:c2:16:7e:e5:34:50:89:ef:81:07:d1:
         5d:b5:41:f8:b2:a5:0d:49:2f:08:b7:29:01:91:7d:81:1d:6b:
         6d:bf:85:1a:15:7b:fd:42:f5:a4:26:92:fb:2d:63:00:e8:d2:
         f9:b3:ac:4c:76:a1:c6:47:ba:d1:2a:2c:f8:40:2f:79:18:1f:
         74:a8:7f:0f:e7:86:19:37:9b:68:d3:bd:33:2a:57:77:d4:22:
         5a:5a:73:08:c5:3a:e6:8f:e6:1c:ac:03:8c:67:00:a6:2c:92:
         03:e3:d5:0b:7c:7e:86:f8:6a:83:2d:00:79:33:73:68:06:7c:
         06:03:38:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:08 2025 by rpki-client