Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa
File:                     34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa (raw, json)
Hash identifier:          z8L79EF/1TJLeSxK0b/uR0bQj30LqsFUSMK9Xe23HsM=
Subject key identifier:   D4:5E:71:3B:AF:D7:5B:E1:D7:C7:1A:2C:AE:77:31:F5:0C:9B:6A:88
Certificate issuer:       /CN=9799B170CE0588DDA475C42D0FB5765AB69AB649
Certificate serial:       4D7AD5D71DBA2D49ECED78071C7BA40B30491BD8
Authority key identifier: 97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa
Signing time:             Fri 09 Feb 2024 19:00:01 +0000
ROA not before:           Fri 09 Feb 2024 18:55:01 +0000
ROA not after:            Fri 07 Feb 2025 19:00:01 +0000
asID:                     269195
IP address blocks:        45.179.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7a:d5:d7:1d:ba:2d:49:ec:ed:78:07:1c:7b:a4:0b:30:49:1b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799B170CE0588DDA475C42D0FB5765AB69AB649
        Validity
            Not Before: Feb  9 18:55:01 2024 GMT
            Not After : Feb  7 19:00:01 2025 GMT
        Subject: CN=D45E713BAFD75BE1D7C71A2CAE7731F50C9B6A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:69:97:a4:58:0e:91:d5:b3:74:5a:92:1d:7c:
                    2f:8b:59:be:28:5e:4f:58:92:48:4c:69:78:02:1e:
                    46:f5:6e:3a:1b:31:ae:22:74:18:5b:21:34:61:e3:
                    f4:a3:08:f5:7f:f6:90:1e:1a:03:bd:ac:d9:d4:d8:
                    67:e5:1b:3e:f3:bc:ea:74:49:fa:41:f3:cb:1f:eb:
                    c8:e3:24:d1:b3:22:95:3e:6b:ce:bc:c8:ad:b2:00:
                    11:09:82:7d:35:2f:1d:cf:a6:82:a6:12:4d:cf:56:
                    81:32:1a:2a:ce:a1:3b:bd:64:8a:3c:57:36:7e:e7:
                    f6:94:f9:fd:17:8d:5d:83:e6:ff:76:e0:3d:da:29:
                    2c:43:3c:d6:08:71:86:84:86:5c:67:7f:9b:95:5e:
                    cb:0d:95:cb:8a:ef:7e:2b:0d:0a:f7:e4:1a:66:9c:
                    fd:15:21:8b:9d:a1:da:84:66:d4:9d:c5:9a:8b:d7:
                    27:31:b1:4b:a0:30:b0:ee:11:33:fd:dd:0a:f7:ec:
                    07:11:9d:bf:89:9f:3b:39:c9:7f:a0:2c:57:34:fd:
                    b7:e0:fb:73:d4:47:95:0c:84:c6:8f:98:d1:8e:8c:
                    77:d2:3b:02:91:79:f1:46:79:bf:47:1c:8f:90:8c:
                    ab:49:67:79:9e:6e:e6:99:c5:ca:1a:fd:db:5e:93:
                    2a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5E:71:3B:AF:D7:5B:E1:D7:C7:1A:2C:AE:77:31:F5:0C:9B:6A:88
            X509v3 Authority Key Identifier:
                keyid:97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:33:30:ce:69:0d:3d:93:a1:99:8a:b1:79:c0:98:4d:01:23:
         ff:49:4b:72:c0:d0:9b:c4:09:47:ed:a5:bd:cd:33:78:8b:ce:
         e1:c6:9d:58:82:83:68:56:fe:b1:f9:ff:16:1a:6c:84:67:d4:
         6b:25:ac:14:26:39:5d:5f:ea:84:86:56:4d:cb:72:a2:a2:e8:
         90:71:5b:75:72:d3:da:ed:f1:c2:96:1a:43:73:dc:1e:97:a8:
         7d:72:f6:53:b8:2c:35:2e:30:00:27:45:9d:19:4d:54:b4:04:
         c8:fd:de:8c:68:21:45:33:34:91:50:59:3d:e5:89:67:66:55:
         87:37:3a:2c:c4:88:cc:f3:50:70:95:43:eb:0e:e9:7c:25:30:
         fc:b4:2c:21:ed:99:47:fe:18:ae:35:26:ac:e6:6d:9f:4a:99:
         c8:47:c2:a4:93:48:ac:c6:ab:7c:b6:2b:70:03:f7:60:e8:83:
         56:fc:24:74:9e:42:af:a9:55:55:18:1e:6c:28:aa:c7:90:1a:
         fd:48:ed:e5:70:2e:30:f2:b7:11:a0:a9:cf:75:b1:09:2a:d2:
         88:23:a1:76:8e:d6:fa:7c:07:b2:ce:33:61:a6:b9:1b:56:38:
         77:ed:db:f9:fc:dc:6a:5d:76:93:ba:34:3e:03:02:60:24:49:
         b6:e7:b8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:24 2025 by rpki-client