Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa
File:                     34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa (raw, json)
Hash identifier:          WJYR3tm6EQbVvs8uWyJq64Afcl96hqMSQqVcHZizC0M=
Subject key identifier:   CE:C6:99:26:80:DB:AF:4C:25:73:F0:C5:CE:52:4A:7A:F0:33:55:6D
Certificate issuer:       /CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
Certificate serial:       2EDF21C02AB52FEF5F74FC9B0AA4F0A45B9F28C1
Authority key identifier: 0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa
Signing time:             Fri 28 Feb 2025 12:52:11 +0000
ROA not before:           Fri 28 Feb 2025 12:47:11 +0000
ROA not after:            Fri 27 Feb 2026 12:52:11 +0000
asID:                     268786
IP address blocks:        45.172.168.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:df:21:c0:2a:b5:2f:ef:5f:74:fc:9b:0a:a4:f0:a4:5b:9f:28:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
        Validity
            Not Before: Feb 28 12:47:11 2025 GMT
            Not After : Feb 27 12:52:11 2026 GMT
        Subject: CN=CEC6992680DBAF4C2573F0C5CE524A7AF033556D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:c7:b8:ea:d2:98:bd:08:80:3c:5b:e9:f8:
                    71:0c:28:c9:1b:52:5d:c6:3a:a3:5a:f9:61:e4:4f:
                    1f:a6:b2:0c:34:c4:29:c0:f4:b1:8b:7d:28:6a:f6:
                    fc:a8:7f:72:7d:e0:1d:c2:37:6e:f6:e0:e1:84:ab:
                    34:35:99:1c:ef:7a:39:95:42:c5:93:22:7c:56:76:
                    78:e4:6b:74:ce:d9:44:c8:4b:a1:3f:ba:79:bc:04:
                    04:70:5e:12:0a:36:d2:8d:eb:32:1b:11:60:f0:6f:
                    16:fc:3c:63:55:29:d4:bb:42:5b:0a:f5:72:e0:d3:
                    4a:9d:be:62:37:ba:be:24:47:f8:a9:b3:ef:99:01:
                    27:26:c2:62:68:b0:d4:e5:74:79:59:fd:01:5f:8f:
                    c5:75:7a:d2:42:ee:21:4e:31:5a:dd:0c:f6:d4:4d:
                    57:d2:b1:b9:22:20:15:24:ec:e2:9f:ab:6e:68:d5:
                    03:39:cf:26:a1:26:e4:86:6f:b4:87:eb:1e:40:2c:
                    db:84:6d:da:c5:fa:ce:fa:85:cd:cb:1e:29:7a:e2:
                    05:73:ff:87:df:e3:92:c0:e5:f1:79:90:18:52:54:
                    cc:a3:04:e1:25:0e:e7:d3:7c:d7:64:ec:97:af:37:
                    19:4b:76:6b:ae:62:db:7f:b8:0c:be:16:1a:c3:d0:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C6:99:26:80:DB:AF:4C:25:73:F0:C5:CE:52:4A:7A:F0:33:55:6D
            X509v3 Authority Key Identifier:
                keyid:0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:c6:f1:64:d6:09:4b:f2:f3:b6:0e:47:c7:6a:d7:1a:28:ba:
         7b:01:86:45:cd:49:99:90:e5:77:3a:7d:63:8c:a0:c1:a6:05:
         04:ec:b5:42:b8:c9:0a:07:b7:c6:a1:68:c0:02:a0:7e:c3:c6:
         31:24:57:8e:db:45:61:d6:f4:69:e5:8b:4b:04:d2:c4:45:eb:
         f8:9f:85:93:6a:43:f2:aa:dc:6b:6a:f1:fd:d7:ea:6c:34:31:
         83:be:6a:d4:2b:e9:60:af:dc:79:37:bc:15:1c:63:5f:b7:21:
         ef:cf:15:28:6d:08:3a:09:84:df:16:74:bc:4f:2a:ba:59:da:
         94:d0:fd:7f:f4:e9:f1:62:4c:09:0d:05:c1:7c:dd:ed:66:1d:
         b7:ff:05:03:04:27:ba:b6:c5:0e:b0:c9:c2:ab:24:ae:ef:28:
         e8:4b:c8:46:8c:57:a1:2a:78:00:22:ac:70:19:57:92:e3:b9:
         5e:2e:a9:42:da:ef:bc:0b:68:67:c1:90:75:8d:0f:6b:18:81:
         d4:ee:7a:b9:8c:c4:0c:fd:0a:47:d0:2a:66:6b:ff:d9:1c:75:
         98:22:92:88:20:5c:d0:40:0e:57:0c:ba:35:0d:40:39:b8:a6:
         4b:fe:90:36:df:5f:5d:7b:c6:06:61:57:94:fd:5d:42:e6:09:
         86:55:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:48:11 2025 by rpki-client