Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/34352e3137352e38302e302f32322d3234203d3e203533303830.roa
File:                     34352e3137352e38302e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          zt5VnEwYXk+2kmM99UKzfmJT92KGiNrZv3a/1cRNCv4=
Subject key identifier:   1A:02:DD:8A:73:FB:0B:C6:35:10:CF:7F:E8:E3:3C:57:9E:73:C1:7A
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       0997E2CF8587D1BF4CA833E6869791CCC564E1E3
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/34352e3137352e38302e302f32322d3234203d3e203533303830.roa
Signing time:             Thu 31 Oct 2024 17:05:16 +0000
ROA not before:           Thu 31 Oct 2024 17:00:16 +0000
ROA not after:            Thu 30 Oct 2025 17:05:16 +0000
asID:                     53080
IP address blocks:        45.175.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:97:e2:cf:85:87:d1:bf:4c:a8:33:e6:86:97:91:cc:c5:64:e1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:00:16 2024 GMT
            Not After : Oct 30 17:05:16 2025 GMT
        Subject: CN=1A02DD8A73FB0BC63510CF7FE8E33C579E73C17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:5c:dd:7f:06:89:dc:aa:e4:f9:b8:1d:69:
                    03:8b:f3:59:97:de:59:fe:6b:d3:ca:a4:ef:de:05:
                    a9:36:81:8b:8d:bb:bc:a9:c4:f3:87:33:54:cc:9d:
                    ca:59:57:e9:85:06:6a:16:81:f0:38:be:86:28:b5:
                    79:73:cf:7f:d8:3d:ca:e2:db:68:86:5d:56:f5:c0:
                    87:8f:83:d6:ff:8e:34:06:f5:41:a2:45:89:fd:e4:
                    a2:ae:fe:06:de:97:4f:ee:82:00:69:69:10:db:74:
                    55:04:ff:94:af:70:b2:e6:72:6e:e9:24:6c:7e:b3:
                    e6:88:dd:7d:98:5b:62:d2:7c:d8:d5:0b:4a:2b:8f:
                    d5:8f:85:ed:c1:57:6e:df:a2:b0:fb:cc:eb:7c:98:
                    0d:98:4e:03:46:ea:de:f9:56:b8:8e:7e:e0:0c:73:
                    12:ed:2c:9b:0c:eb:5b:ba:a5:f1:76:05:81:2e:52:
                    00:09:ce:09:4b:a2:56:ff:77:56:e5:a3:55:79:c4:
                    1d:cc:36:9a:54:59:43:9a:ef:b4:d3:a3:50:8e:86:
                    f8:12:d8:ef:9a:5b:c4:26:87:7f:7d:ad:f7:74:60:
                    03:4d:bd:c7:33:64:68:e8:2e:65:52:06:f5:ef:87:
                    99:26:6e:68:61:df:ae:3c:3f:c1:8e:d3:6e:62:f4:
                    8b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:02:DD:8A:73:FB:0B:C6:35:10:CF:7F:E8:E3:3C:57:9E:73:C1:7A
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/34352e3137352e38302e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:9f:52:b9:a0:d5:bd:d9:81:a0:3c:86:ca:88:c0:4e:24:1c:
         ea:26:15:21:fb:62:1e:59:4c:83:5f:d0:32:0a:ae:a7:26:14:
         2b:6f:f8:b2:84:59:a3:a0:f9:1a:a7:bb:91:d0:23:4f:59:0b:
         2a:a0:db:40:af:8d:7f:f6:fa:6b:8f:7a:88:02:ad:54:88:45:
         5d:c6:8a:8c:98:24:26:5e:d7:0d:ec:ad:97:41:c1:73:5d:e7:
         56:11:69:45:1c:c9:ef:ca:34:bd:b4:40:8d:f3:03:5f:b4:31:
         71:d3:30:5f:19:c8:d8:7a:65:e4:5c:e4:54:fe:90:b2:35:33:
         a6:8b:ad:d6:8d:cc:89:bf:67:1b:d9:07:13:ba:d2:8f:50:b1:
         83:7c:82:e5:22:5a:07:48:13:3c:98:e5:e8:86:8e:b4:f6:0f:
         4b:59:48:e6:72:27:5f:49:7d:8c:2c:09:58:a9:31:27:e4:64:
         dc:a7:1d:8d:56:c0:3e:d4:4b:94:7c:a2:22:5a:fd:30:3a:b5:
         0f:b9:7a:65:9e:d0:26:76:7c:16:45:75:d7:b7:ba:dd:29:25:
         d9:53:44:5d:62:9d:78:09:ab:ae:1e:0c:b8:b0:f5:3d:40:b2:
         a3:ab:03:a4:3b:6f:4c:08:c1:04:39:55:96:ad:ff:53:b2:81:
         2e:32:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:35 2025 by rpki-client