Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32322d3234203d3e20323639343039.roa
File:                     34352e3138362e33362e302f32322d3234203d3e20323639343039.roa (raw, json)
Hash identifier:          Xh5F966camhNSaQty8SiktLd2bvkG686r/46niIh754=
Subject key identifier:   B9:3A:C4:E0:5A:1A:11:B2:2D:E7:FF:D3:EA:A1:A4:61:24:77:B6:F9
Certificate issuer:       /CN=0F40F991AFD86683432FB917804FDCB3FE6CE126
Certificate serial:       2A05DC21E6776458EAA9A62B9232652196C7F41F
Authority key identifier: 0F:40:F9:91:AF:D8:66:83:43:2F:B9:17:80:4F:DC:B3:FE:6C:E1:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F40F991AFD86683432FB917804FDCB3FE6CE126.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32322d3234203d3e20323639343039.roa
Signing time:             Sat 20 May 2023 18:17:11 +0000
ROA not before:           Sat 20 May 2023 18:12:11 +0000
ROA not after:            Sat 18 May 2024 18:17:11 +0000
asID:                     269409
IP address blocks:        45.186.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:05:dc:21:e6:77:64:58:ea:a9:a6:2b:92:32:65:21:96:c7:f4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F40F991AFD86683432FB917804FDCB3FE6CE126
        Validity
            Not Before: May 20 18:12:11 2023 GMT
            Not After : May 18 18:17:11 2024 GMT
        Subject: CN=B93AC4E05A1A11B22DE7FFD3EAA1A4612477B6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:ab:e0:d0:2c:c8:a1:7f:bf:39:49:e6:89:
                    b3:b3:6f:d0:f3:d3:43:4c:b0:57:cf:94:38:28:87:
                    84:06:72:af:c3:6b:fc:ed:f1:86:d8:0b:5c:fb:3b:
                    64:5d:ba:bd:b8:36:43:f3:d1:37:31:7a:1d:8b:a7:
                    8e:0d:aa:b1:e1:15:db:b9:12:ef:15:02:f4:8c:8c:
                    83:69:99:89:a3:96:c0:18:7f:27:0e:fa:4e:78:5e:
                    b1:8c:8e:8d:e4:74:e6:e4:35:a9:14:7d:f7:05:8d:
                    87:d6:0b:1c:61:97:2b:6e:14:d8:8e:5e:f2:eb:fc:
                    70:3f:d7:f3:68:a4:15:aa:06:68:b0:1d:dc:4d:9d:
                    67:17:a8:d8:1d:38:93:53:09:21:98:3c:3a:9b:e1:
                    64:d0:a8:20:76:6b:6c:c3:3f:73:39:cf:28:8c:5b:
                    2b:d5:a2:5f:87:cc:e9:4a:35:63:d3:e0:4f:4d:45:
                    22:b7:d1:40:3d:0e:ab:a1:70:ab:c0:7f:5a:fb:98:
                    78:4f:3b:04:c8:2f:ac:d1:ba:7a:6b:61:e6:5f:f6:
                    49:c6:f6:85:6e:2b:ba:ed:33:d0:2d:a0:6d:03:b0:
                    7e:91:ac:32:99:ca:10:56:a1:fd:7e:cc:93:0b:e6:
                    ed:76:33:72:39:16:bd:68:4d:0d:6a:25:9f:34:73:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3A:C4:E0:5A:1A:11:B2:2D:E7:FF:D3:EA:A1:A4:61:24:77:B6:F9
            X509v3 Authority Key Identifier:
                keyid:0F:40:F9:91:AF:D8:66:83:43:2F:B9:17:80:4F:DC:B3:FE:6C:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/0F40F991AFD86683432FB917804FDCB3FE6CE126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F40F991AFD86683432FB917804FDCB3FE6CE126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/34352e3138362e33362e302f32322d3234203d3e20323639343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:e3:91:2c:e0:2d:8c:2c:93:b7:fa:20:4d:f7:4e:6d:ff:d4:
         a2:ef:a2:7b:66:f9:a6:bc:75:a3:68:a4:ac:32:fb:a3:4a:a6:
         6b:dd:e0:c9:02:2c:31:00:33:39:ef:31:ac:52:eb:74:a9:73:
         c3:4f:3f:9e:df:a5:38:5d:f1:cf:31:2d:59:18:b0:ff:e0:46:
         19:3a:1d:e3:ff:d8:18:93:f4:31:0a:58:1b:f6:2c:ff:aa:a6:
         01:ca:78:42:e7:51:69:e4:8b:e7:9b:87:b7:11:aa:06:3f:84:
         03:6a:c3:6e:0b:4c:04:88:15:e1:de:bb:32:87:3e:50:c6:df:
         31:a0:c2:6c:0e:8e:cd:62:3f:bc:f7:31:7b:03:91:2a:a4:cd:
         23:5d:4f:8a:c2:11:43:18:fe:fb:32:d4:c3:eb:cf:7f:0d:1c:
         f5:10:87:7a:bb:e7:8d:27:d7:4a:b1:7b:9c:36:99:44:e7:eb:
         2c:1d:1d:04:c8:fa:ca:32:2f:ce:42:e7:9f:b4:6f:bf:cb:4d:
         95:ab:bc:1c:0c:62:d5:66:84:ff:3f:95:2a:a8:db:ed:d2:86:
         ae:04:0a:16:29:9d:39:4f:2e:2f:a1:99:67:70:60:aa:0e:cf:
         e3:76:31:ec:03:aa:4e:a2:fc:86:6f:dc:37:55:11:f0:d4:43:
         ff:9e:64:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:15 2025 by rpki-client