Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa
File:                     34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa (raw, json)
Hash identifier:          0eVHXhrm38DEEiErjROfGk0EybmOBOyhMJX+tCVm7WQ=
Subject key identifier:   70:05:11:72:BF:28:16:B8:62:D9:32:86:3E:FA:1C:C0:3C:C7:C3:8F
Certificate issuer:       /CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
Certificate serial:       402F4E67BBC6B8249141E0A9DD70728DAE853EF0
Authority key identifier: 7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa
Signing time:             Wed 20 Mar 2024 18:38:01 +0000
ROA not before:           Wed 20 Mar 2024 18:33:01 +0000
ROA not after:            Wed 19 Mar 2025 18:38:01 +0000
asID:                     269647
IP address blocks:        45.190.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2f:4e:67:bb:c6:b8:24:91:41:e0:a9:dd:70:72:8d:ae:85:3e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
        Validity
            Not Before: Mar 20 18:33:01 2024 GMT
            Not After : Mar 19 18:38:01 2025 GMT
        Subject: CN=70051172BF2816B862D932863EFA1CC03CC7C38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:01:1f:84:36:06:99:25:6e:f6:81:91:8e:
                    4b:a0:1b:ab:91:33:12:40:66:6d:c8:ce:a4:d9:a6:
                    89:d7:77:30:e0:57:8e:8c:65:f0:5e:e6:41:56:c6:
                    cf:e0:2b:fd:d4:68:a6:1f:0d:28:16:e7:60:e7:b7:
                    23:ae:13:5f:4b:d0:55:39:0f:f9:e6:0c:b0:1c:ca:
                    f6:75:be:75:20:c8:0a:ae:a7:96:1f:e3:23:5a:13:
                    3a:3c:5e:8f:6f:02:24:a0:9c:f1:67:89:4b:a2:9b:
                    ae:e6:fc:aa:d3:dc:9e:9f:a1:c7:9f:28:58:28:36:
                    f4:41:91:52:40:8a:6a:c8:aa:7a:04:bf:fe:ec:5f:
                    ea:5b:ca:e2:97:a9:d1:dd:8b:d6:f4:ac:51:f5:08:
                    95:1d:b1:61:8a:d3:2f:17:11:17:f0:6d:df:25:82:
                    ca:62:3f:f2:5d:37:94:75:4d:f7:74:a0:10:06:88:
                    62:be:b9:83:2e:fd:8a:4c:eb:94:d0:a2:f2:c8:82:
                    a5:09:31:ab:ab:bf:c6:68:c6:b8:47:93:be:7a:12:
                    b0:6e:09:39:87:b2:e7:80:e5:29:2e:e4:71:0b:aa:
                    5f:2a:89:79:b6:dd:d4:a1:ff:9f:0b:25:40:e3:10:
                    93:8f:03:8f:3a:87:a7:25:4f:a8:c4:23:c7:af:cf:
                    e6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:05:11:72:BF:28:16:B8:62:D9:32:86:3E:FA:1C:C0:3C:C7:C3:8F
            X509v3 Authority Key Identifier:
                keyid:7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:80:14:ca:79:db:37:4a:52:14:1e:87:7f:3d:06:3d:cc:f5:
         27:c4:e8:f7:26:29:b1:8b:cd:aa:01:a9:23:96:7c:6d:aa:b5:
         7d:ac:1f:18:54:cf:81:ac:3f:8b:f2:51:60:3d:8a:00:54:c1:
         31:4c:21:4e:1b:f5:9d:d9:59:13:c9:b5:0f:80:88:e9:48:6e:
         ae:36:82:ea:54:88:08:dd:d6:fe:c1:8d:43:c6:36:de:a4:53:
         97:3d:15:5b:28:1b:9a:f9:63:36:8b:81:6a:38:dd:d9:3e:c6:
         53:51:23:ed:b9:d1:7e:03:8f:fe:ae:fb:eb:c1:1f:ec:ad:e3:
         c7:a7:2f:c0:42:b0:17:c3:a1:14:dc:db:78:44:85:51:ee:17:
         8e:df:20:ba:f1:ea:78:58:60:f4:34:c0:f0:4a:c4:c3:cd:41:
         0f:57:67:a1:7b:24:81:71:41:e9:44:31:82:12:49:b8:ec:d8:
         15:1e:c8:5d:a4:77:82:7b:72:22:5e:f0:01:fe:b9:44:2e:8a:
         d8:ee:ab:1f:ee:20:bc:d0:51:07:33:e3:1d:c1:bd:fe:1a:23:
         94:e3:19:27:1d:cb:ea:0c:63:62:e5:4a:87:86:d1:cb:88:e7:
         da:ce:87:ad:00:6a:8c:82:c7:22:a9:12:26:fc:8b:9b:fb:da:
         36:17:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:31:06 2025 by rpki-client