Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32332d3233203d3e20323638363932.roa
File:                     34352e3136352e3230382e302f32332d3233203d3e20323638363932.roa (raw, json)
Hash identifier:          HxOttbuit05O3l0G8TqY3knwGILLPkvLuXsxc9V459k=
Subject key identifier:   FC:77:78:EF:96:0D:70:D0:68:03:1D:C2:CD:8B:73:60:FD:80:08:91
Certificate issuer:       /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial:       592C6489D95D6DE8CE656DE46F86FC62DAB6BA1C
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32332d3233203d3e20323638363932.roa
Signing time:             Fri 20 Sep 2024 18:57:37 +0000
ROA not before:           Fri 20 Sep 2024 18:52:37 +0000
ROA not after:            Fri 19 Sep 2025 18:57:37 +0000
asID:                     268692
IP address blocks:        45.165.208.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2c:64:89:d9:5d:6d:e8:ce:65:6d:e4:6f:86:fc:62:da:b6:ba:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
        Validity
            Not Before: Sep 20 18:52:37 2024 GMT
            Not After : Sep 19 18:57:37 2025 GMT
        Subject: CN=FC7778EF960D70D068031DC2CD8B7360FD800891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:d9:79:59:20:de:33:b6:4b:62:0a:1f:3f:
                    46:61:a1:b8:35:32:0f:0a:53:90:c7:f2:c1:39:74:
                    e8:8f:77:99:22:48:1e:f7:cb:f8:b5:a4:ef:a5:32:
                    8e:99:7e:33:3d:cf:ec:a1:7f:03:23:25:28:0f:ce:
                    a5:b3:c7:09:28:55:34:f8:d2:c9:4b:d8:27:b4:c3:
                    d9:9a:df:1c:99:9f:60:d6:2d:76:85:fc:20:a5:e4:
                    e3:6c:a3:8a:e1:07:9f:14:c7:69:af:53:9e:77:e3:
                    22:19:79:82:38:d7:58:7f:16:f2:83:7e:e5:44:d3:
                    eb:c1:ea:2d:d7:8b:1c:82:e9:f5:86:80:d7:e0:f5:
                    98:79:66:14:ae:b0:df:b3:c7:3c:27:df:83:68:f8:
                    58:7e:a9:db:8f:05:8f:b5:c6:47:51:fb:31:39:21:
                    6f:63:b8:34:5e:52:cd:77:7c:8c:7b:e9:09:5d:75:
                    9b:ae:27:66:ac:8d:48:56:13:8e:8a:41:bc:aa:0d:
                    0d:5a:39:d2:3f:48:e6:04:f7:03:47:8d:3e:31:2c:
                    1b:a7:4a:35:f6:60:08:5a:85:db:e9:c5:4c:0c:48:
                    6e:3d:69:40:1b:c9:7a:ee:6f:87:24:b8:60:c1:8b:
                    2f:ee:c2:5b:2b:d9:6e:4d:bc:70:98:35:56:44:e0:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:77:78:EF:96:0D:70:D0:68:03:1D:C2:CD:8B:73:60:FD:80:08:91
            X509v3 Authority Key Identifier:
                keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32332d3233203d3e20323638363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:6d:41:23:3a:42:0c:df:11:4c:bf:71:80:8a:0f:1a:83:53:
         40:a9:28:90:9a:f2:15:dd:49:19:20:cb:b8:5b:25:47:58:1c:
         db:00:5c:07:47:ec:d1:1f:34:1d:3f:75:77:c3:cf:8e:45:c7:
         f6:b1:97:88:38:2c:ec:4a:4b:a8:ec:67:41:b4:a7:a0:fb:dc:
         62:d5:3c:c9:5b:ed:53:13:6e:a0:2e:09:d8:3c:9f:20:0b:8a:
         82:9e:40:d0:bb:b0:de:fd:82:ce:61:bb:ab:b0:97:82:7b:43:
         15:78:7c:b0:f2:8e:b4:28:c9:b2:ac:71:bf:a0:7a:27:2a:22:
         29:52:d4:ff:da:31:b4:8d:6f:e1:1e:bd:9c:8c:99:f2:38:6e:
         c6:d7:4a:b3:6f:25:be:93:dc:02:2f:bd:df:b7:36:30:3c:3d:
         78:e2:15:b8:73:e4:56:84:6a:1c:4e:73:0e:58:83:2d:f4:7c:
         57:d3:86:5f:c9:67:54:a5:95:ef:33:17:ad:91:82:dd:23:df:
         96:f2:1d:36:f4:c8:91:c2:9a:60:f3:b7:2a:84:c5:03:0d:80:
         11:a8:7b:40:52:57:e2:77:2d:34:a5:db:b5:bc:26:b9:2a:e0:
         06:4b:44:fa:66:1d:b4:cd:a5:ea:86:5a:c4:70:68:93:68:7d:
         22:a5:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:19 2025 by rpki-client