Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131322e302f32322d3232203d3e20323639313139.roa
File:                     34352e3137392e3131322e302f32322d3232203d3e20323639313139.roa (raw, json)
Hash identifier:          MLBKnB2lgizXC96MBEm5XnOc//XjHaVvSdYxjq4C6pk=
Subject key identifier:   9A:AE:0F:38:A0:37:EB:F9:2C:2F:A2:D2:13:9F:47:A1:F6:08:66:80
Certificate issuer:       /CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
Certificate serial:       6251C55C0E0227A9E74F8874764E3E6E269433D8
Authority key identifier: 93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131322e302f32322d3232203d3e20323639313139.roa
Signing time:             Fri 22 Mar 2024 17:00:00 +0000
ROA not before:           Fri 22 Mar 2024 16:55:00 +0000
ROA not after:            Sat 22 Mar 2025 17:00:00 +0000
asID:                     269119
IP address blocks:        45.179.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:51:c5:5c:0e:02:27:a9:e7:4f:88:74:76:4e:3e:6e:26:94:33:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
        Validity
            Not Before: Mar 22 16:55:00 2024 GMT
            Not After : Mar 22 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:25:fa:83:c7:d9:68:d1:5d:e8:33:ae:fa:
                    5e:72:f4:3f:ad:81:97:c0:27:b5:c6:1f:16:11:25:
                    a0:88:4b:2f:b2:31:8f:b1:8f:1a:68:2b:05:b0:1d:
                    2c:79:1c:95:e1:02:f4:cd:4e:4e:e6:3f:91:ad:ae:
                    a5:c6:9f:41:52:ce:03:d7:40:27:2d:ac:6b:e5:47:
                    df:6b:54:7f:2f:26:31:cf:66:c0:56:5d:27:a6:e3:
                    a4:3b:68:fa:d7:5c:f0:db:ca:45:c9:0f:d4:6d:29:
                    4c:c6:9c:7e:9d:d0:ae:0c:7d:3e:76:ac:9f:92:cb:
                    93:1a:cf:f7:8b:bd:dc:f1:07:9a:87:1d:18:2a:47:
                    51:72:3d:3b:17:c0:bd:d3:ae:38:b6:05:29:34:e9:
                    7c:25:01:fa:b2:f7:9f:fb:5c:d6:aa:ff:31:db:1c:
                    a1:49:60:44:44:35:6b:87:56:17:c3:7f:ac:d3:75:
                    d3:7c:2f:e1:c1:53:f5:13:ea:a3:5d:86:15:37:87:
                    eb:a1:d5:cb:e6:5f:0f:3b:0b:0d:0e:b3:5a:b2:57:
                    84:c5:32:62:02:a1:f0:a2:a5:a3:a4:a6:d8:1f:fd:
                    59:68:9f:05:17:33:81:c1:8b:55:85:fe:cd:6d:49:
                    98:51:8c:23:a1:5a:a4:43:94:f8:95:9f:85:d9:eb:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AE:0F:38:A0:37:EB:F9:2C:2F:A2:D2:13:9F:47:A1:F6:08:66:80
            X509v3 Authority Key Identifier:
                keyid:93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/34352e3137392e3131322e302f32322d3232203d3e20323639313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:9e:58:66:30:05:30:dc:8b:95:10:24:af:a4:bc:87:d4:66:
         55:21:6a:cd:2d:9c:7b:ec:b0:53:71:a2:70:00:3b:5e:66:3a:
         08:9c:52:bd:d3:7a:ef:e4:00:3b:b3:2a:ce:48:66:4b:99:17:
         bc:90:88:1a:a0:90:a0:ba:e5:3e:c8:6e:6a:63:e4:2e:c3:b8:
         43:bf:fc:39:5e:0f:e1:d2:d0:47:16:21:f2:4f:89:18:8d:87:
         3d:03:64:01:78:99:a5:80:55:9a:73:da:96:89:f1:b3:67:ca:
         2f:b2:ad:66:36:46:a1:19:0b:6c:fc:f1:6b:34:78:eb:cc:26:
         ac:f1:c0:4b:18:bd:f3:97:cd:c4:2d:58:6c:fe:0d:ea:aa:a9:
         30:40:f7:b0:34:f5:26:bf:83:e3:61:be:e8:47:bb:09:3f:52:
         8b:78:3b:43:72:6d:60:01:76:25:e1:ca:a4:86:b2:e5:87:b5:
         c6:c2:2d:d5:b5:7a:d5:7c:8e:9c:fb:2d:b2:8e:01:c2:2b:5a:
         9f:02:5f:14:5c:49:d4:ec:e3:e6:4a:b1:c4:cd:51:ad:b0:e2:
         aa:9c:ef:2e:1e:32:63:64:e0:7f:24:46:c3:22:0d:d1:81:b2:
         37:39:49:62:61:d9:be:49:06:6b:76:ff:d6:2a:96:00:2b:1c:
         d3:bb:2e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:31:59 2025 by rpki-client