Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/34352e3137382e3137322e302f32322d3232203d3e20323639303336.roa
File:                     34352e3137382e3137322e302f32322d3232203d3e20323639303336.roa (raw, json)
Hash identifier:          zXK1Q/sqb1Bklyb8qPEgss1npm8wwgGpWrPNarCfr44=
Subject key identifier:   D5:D8:FF:7C:4C:DE:B1:DF:A6:CE:FD:1B:F6:90:55:3B:0A:4E:B0:2B
Certificate issuer:       /CN=32B0E6548F3A2FFBFDFF7091C549B32A759B6617
Certificate serial:       6FAC057E96A17664CA82A0836E1D391B25591D3E
Authority key identifier: 32:B0:E6:54:8F:3A:2F:FB:FD:FF:70:91:C5:49:B3:2A:75:9B:66:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/34352e3137382e3137322e302f32322d3232203d3e20323639303336.roa
Signing time:             Fri 08 Dec 2023 18:43:12 +0000
ROA not before:           Fri 08 Dec 2023 18:38:12 +0000
ROA not after:            Fri 06 Dec 2024 18:43:12 +0000
asID:                     269036
IP address blocks:        45.178.172.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ac:05:7e:96:a1:76:64:ca:82:a0:83:6e:1d:39:1b:25:59:1d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32B0E6548F3A2FFBFDFF7091C549B32A759B6617
        Validity
            Not Before: Dec  8 18:38:12 2023 GMT
            Not After : Dec  6 18:43:12 2024 GMT
        Subject: CN=D5D8FF7C4CDEB1DFA6CEFD1BF690553B0A4EB02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:1a:db:3b:f4:68:eb:1b:cf:3c:b1:3b:9a:
                    d0:af:43:d8:a1:15:ce:10:a9:7a:58:9b:05:6a:79:
                    a1:f7:c4:b5:9a:35:32:2c:60:a3:dc:37:b2:0a:49:
                    cd:a3:74:0f:4f:2a:3e:b6:f7:3e:f6:e9:c7:71:29:
                    a3:e1:28:02:97:d3:71:5e:fe:f3:19:64:56:1d:35:
                    db:a2:9c:ab:d3:a7:b8:71:db:e9:9b:f7:ff:c9:b0:
                    3f:5c:f8:7f:21:2d:5e:e8:64:1a:13:7f:7e:5b:f5:
                    d9:a2:6d:73:92:45:eb:e8:d0:99:01:52:50:da:d7:
                    22:f5:4d:52:ce:dd:ce:0d:fe:5a:53:d1:10:ca:e5:
                    b1:3b:43:98:38:5b:33:fc:95:04:47:73:f7:84:6c:
                    7a:1f:7f:90:31:6a:eb:27:0a:c4:d0:90:58:cb:52:
                    0e:0f:f8:32:99:73:2e:f3:4d:8f:ba:9a:70:a1:c1:
                    84:60:3a:8d:e3:62:a3:78:0e:4b:dd:b0:69:7e:93:
                    aa:66:92:83:64:b2:fe:a1:03:c9:21:ab:0e:37:bf:
                    1c:4f:84:9d:28:ed:29:0c:27:e7:b2:b6:49:26:64:
                    63:5e:ea:4a:9e:d4:1a:23:12:1a:97:03:af:df:2d:
                    96:9f:bb:7f:0e:59:a6:04:ba:15:5a:60:29:20:0d:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D8:FF:7C:4C:DE:B1:DF:A6:CE:FD:1B:F6:90:55:3B:0A:4E:B0:2B
            X509v3 Authority Key Identifier:
                keyid:32:B0:E6:54:8F:3A:2F:FB:FD:FF:70:91:C5:49:B3:2A:75:9B:66:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/34352e3137382e3137322e302f32322d3232203d3e20323639303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:18:7e:c8:63:6d:9e:35:38:96:74:d1:75:ec:58:b5:39:c5:
         fd:09:88:8d:b8:2a:f6:52:68:d7:79:39:82:66:3b:2e:4c:55:
         ce:43:3e:5c:83:c5:f0:39:c8:2e:a2:e6:a2:f1:ff:ec:e1:89:
         09:d8:0e:bc:e1:49:01:11:13:ff:c2:1e:90:3c:89:2b:69:f2:
         b5:2b:d7:07:b3:9e:4b:72:dc:ea:a5:0e:03:35:77:0d:5e:88:
         77:58:7d:80:a1:98:da:1f:70:a9:03:b7:75:16:d8:51:67:c5:
         cb:f0:97:39:69:dc:58:f0:fa:36:a8:bd:45:c4:e3:2d:ca:5a:
         05:1f:8a:1b:ef:c6:72:cc:14:71:dd:fc:8f:de:29:a7:29:9b:
         52:42:62:ea:4e:8a:63:cf:18:05:dc:b4:cf:79:5f:9a:e5:2f:
         4a:a4:ce:11:cc:51:79:3e:c7:31:ee:80:9a:77:dc:0c:97:92:
         5a:7d:6f:c5:82:35:78:6b:1f:da:bc:d0:3b:27:6d:fe:2d:56:
         3d:69:a4:5a:79:43:08:25:13:5a:b1:09:dd:13:0b:60:e9:25:
         ff:b1:13:c8:33:07:19:56:7d:25:55:17:33:89:0a:a5:b0:82:
         11:a1:94:7a:63:dc:e0:12:2a:54:0f:98:23:08:0d:d5:0a:85:
         e5:90:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:22 2025 by rpki-client