Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/34352e3138322e3230342e302f32332d3233203d3e20323639323337.roa
File:                     34352e3138322e3230342e302f32332d3233203d3e20323639323337.roa (raw, json)
Hash identifier:          PNi2cUurosafDsgHH3pgEpcAoPTE689jFWymfRmFFZ4=
Subject key identifier:   B3:A3:13:75:3A:7B:61:2C:0D:13:D5:3F:6C:05:AF:02:4B:BE:9C:22
Certificate issuer:       /CN=246240EE97BDDD180E05F94C2857F823EA20229D
Certificate serial:       25C9C4DEB56492A7991EF21582687A38DF459082
Authority key identifier: 24:62:40:EE:97:BD:DD:18:0E:05:F9:4C:28:57:F8:23:EA:20:22:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246240EE97BDDD180E05F94C2857F823EA20229D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/34352e3138322e3230342e302f32332d3233203d3e20323639323337.roa
Signing time:             Sat 30 Mar 2024 11:25:41 +0000
ROA not before:           Sat 30 Mar 2024 11:20:41 +0000
ROA not after:            Sat 29 Mar 2025 11:25:41 +0000
asID:                     269237
IP address blocks:        45.182.204.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c9:c4:de:b5:64:92:a7:99:1e:f2:15:82:68:7a:38:df:45:90:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246240EE97BDDD180E05F94C2857F823EA20229D
        Validity
            Not Before: Mar 30 11:20:41 2024 GMT
            Not After : Mar 29 11:25:41 2025 GMT
        Subject: CN=B3A313753A7B612C0D13D53F6C05AF024BBE9C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:5f:63:8a:a4:de:a9:0f:5b:57:59:05:23:
                    20:f7:07:22:9a:9c:f9:79:96:23:8b:7f:e2:ad:cb:
                    da:47:ca:db:ac:d8:c3:2d:fd:85:d9:5c:45:b0:b2:
                    4d:a6:cd:f9:d3:22:e0:95:e2:ba:18:34:76:ff:65:
                    96:56:44:12:db:2c:57:1c:eb:4f:bc:e9:a9:a2:5d:
                    f2:87:54:c7:b4:ed:fd:9e:9a:9b:43:6b:60:fb:0c:
                    8d:3e:6d:ef:df:47:a3:96:5a:ef:b2:33:ab:e9:d4:
                    a5:0a:99:b1:eb:5a:e0:ff:d2:46:86:1a:48:87:be:
                    36:24:f8:79:50:53:64:6a:e8:43:2c:e1:cf:a9:21:
                    04:34:4e:06:be:45:05:b8:a6:74:dc:3a:8a:ef:d1:
                    59:78:38:1e:ae:18:91:3a:b0:30:50:00:0c:2b:39:
                    bb:68:9a:a3:9b:48:f9:66:3f:63:a8:50:fa:fd:e1:
                    e0:7b:33:95:fa:0e:cc:4b:cc:34:25:b7:1a:b5:f2:
                    f7:16:8c:08:09:30:59:53:25:3e:1b:80:03:f8:7d:
                    a5:44:76:a2:fe:60:f4:36:da:f1:b8:dd:17:2b:7a:
                    53:f0:84:e4:10:0a:31:38:c8:c0:83:7e:ff:df:04:
                    ca:f9:e2:01:c7:34:49:52:6e:54:a8:58:08:b1:8f:
                    99:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A3:13:75:3A:7B:61:2C:0D:13:D5:3F:6C:05:AF:02:4B:BE:9C:22
            X509v3 Authority Key Identifier:
                keyid:24:62:40:EE:97:BD:DD:18:0E:05:F9:4C:28:57:F8:23:EA:20:22:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/246240EE97BDDD180E05F94C2857F823EA20229D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246240EE97BDDD180E05F94C2857F823EA20229D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/34352e3138322e3230342e302f32332d3233203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:93:5f:54:ce:3d:7c:1a:5c:33:e6:d4:c3:b6:11:0a:a9:23:
         93:1e:c2:84:e3:6c:80:ad:ad:b0:4b:c2:9b:9b:ac:e9:d0:c6:
         da:da:ba:f9:bf:59:7a:df:1c:a0:f2:d5:13:6c:14:44:58:26:
         53:31:cb:70:99:97:68:6d:bb:f8:21:69:93:2e:a6:87:13:e4:
         72:f5:bf:3a:04:20:c6:58:52:50:7f:89:ad:f8:35:56:18:97:
         9a:12:45:01:2b:d0:76:dc:01:93:78:4f:79:ec:ea:e7:b7:66:
         b4:66:3e:65:6d:46:49:d9:d4:b3:39:8f:12:00:53:78:0b:25:
         2e:40:ff:93:0c:0b:ad:7f:7c:b1:75:8b:ef:0f:e4:f8:ef:22:
         da:5c:b3:fc:21:22:d9:0c:5c:d5:c8:f1:2c:22:48:75:cf:24:
         00:16:3b:8c:d8:cd:98:93:91:f2:1c:6a:00:5b:64:5a:a2:b3:
         d4:79:27:c2:f1:5c:84:b5:d1:82:a8:46:3e:75:72:dd:07:e3:
         70:00:d3:ee:e4:5c:fa:0c:77:d2:3f:11:60:ad:cf:78:22:78:
         e4:ad:23:c0:86:0c:c2:a7:6f:df:81:98:99:48:9a:89:08:8e:
         b8:23:35:45:6e:9a:af:65:29:b0:17:30:69:30:ab:cc:57:ca:
         1b:71:dd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:38 2025 by rpki-client