Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3137302e302f32342d3234203d3e20323638353633.roa
File:                     34352e3136332e3137302e302f32342d3234203d3e20323638353633.roa (raw, json)
Hash identifier:          8tNeDbRu3hQ/7b4xB2AR/An3qE0RD/RcbpOUi4B3YfY=
Subject key identifier:   64:FA:3E:15:28:B0:9E:8F:4C:21:D9:4C:67:0F:90:B9:83:2E:15:33
Certificate issuer:       /CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
Certificate serial:       491C3ACF1EC80A343004B221A50C46968CA9E6AC
Authority key identifier: 34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3137302e302f32342d3234203d3e20323638353633.roa
Signing time:             Thu 11 Jul 2024 13:15:55 +0000
ROA not before:           Thu 11 Jul 2024 13:10:55 +0000
ROA not after:            Thu 10 Jul 2025 13:15:55 +0000
asID:                     268563
IP address blocks:        45.163.170.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1c:3a:cf:1e:c8:0a:34:30:04:b2:21:a5:0c:46:96:8c:a9:e6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
        Validity
            Not Before: Jul 11 13:10:55 2024 GMT
            Not After : Jul 10 13:15:55 2025 GMT
        Subject: CN=64FA3E1528B09E8F4C21D94C670F90B9832E1533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:42:b8:ab:8b:84:81:b9:22:c9:85:a1:b3:
                    52:4d:32:eb:05:2b:04:95:07:b7:94:f3:02:af:ce:
                    0a:22:a4:67:55:f1:c0:7a:62:28:2f:e7:6a:65:2f:
                    57:e4:67:a9:e5:a8:7b:8d:c9:0b:44:dc:7c:be:6d:
                    ba:48:e9:5d:ee:b4:c5:76:ed:f1:a1:31:66:69:c5:
                    c4:c9:20:3b:15:e6:73:ca:67:03:99:3f:7e:6f:a2:
                    cd:70:9e:48:af:60:cf:77:fd:09:cb:dc:d0:fb:82:
                    29:f3:4e:6b:ff:e0:4e:d6:8c:a7:83:2c:53:b0:6e:
                    e8:66:60:90:a8:74:8e:49:e6:47:55:7c:bc:fb:ef:
                    38:43:5e:75:06:b5:5e:64:57:de:27:a0:f5:9d:fc:
                    c1:85:3b:34:c0:24:e9:49:a3:f7:94:19:60:ca:a7:
                    84:75:45:20:9e:5d:7e:53:ae:98:61:19:b3:af:63:
                    e6:9f:c9:7d:07:1a:54:1e:39:d7:8b:6e:4d:7f:e2:
                    94:20:56:2c:1e:8d:6f:47:73:cc:3c:7d:d5:bd:f1:
                    66:d0:ac:bc:3b:d1:c7:bc:99:b5:be:df:1b:69:9a:
                    33:e0:b8:80:7a:d5:90:40:b9:62:63:a7:b9:95:56:
                    27:3b:8c:2f:cb:4c:09:4c:68:72:6b:4c:ce:fd:4c:
                    8e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FA:3E:15:28:B0:9E:8F:4C:21:D9:4C:67:0F:90:B9:83:2E:15:33
            X509v3 Authority Key Identifier:
                keyid:34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3137302e302f32342d3234203d3e20323638353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:82:ae:42:dc:88:26:06:a5:5a:0b:26:0d:95:83:e8:7b:ce:
         f6:56:96:d4:d9:24:cd:0d:40:6f:2b:e7:de:a3:cf:37:30:39:
         f1:bd:02:92:64:55:71:e6:a0:90:9b:23:15:85:1d:fc:f9:f3:
         0f:5e:69:37:42:2e:c2:67:11:eb:dd:be:fc:a1:01:2f:15:96:
         35:2e:c1:68:9b:cd:f5:fc:12:7d:2b:47:e0:a6:e5:e0:e7:f3:
         de:bd:af:87:cb:82:3b:ec:7b:42:e3:9d:1c:b6:2b:6d:0c:ba:
         ac:1e:d3:05:df:e8:0e:69:a2:37:80:3b:82:cc:a0:7c:44:47:
         e8:8f:4b:e2:40:4a:6f:5a:3d:57:ee:ec:8f:7e:7e:02:94:9c:
         29:44:77:49:3a:2f:cb:63:04:70:19:95:a3:e2:42:62:ff:dd:
         bc:f8:1e:62:62:b9:60:91:e7:01:1b:18:de:7b:f1:7c:8e:d7:
         f5:a2:48:a9:60:51:55:7f:4f:9c:3d:ad:63:a8:46:66:bc:d6:
         28:63:cf:3c:3a:b0:6f:84:ff:17:02:23:7b:17:cf:21:89:b0:
         5e:30:77:27:dd:8c:68:39:c0:51:a4:c4:ab:95:af:11:70:30:
         3a:c6:a6:cd:48:80:9a:93:bf:e4:11:4c:78:87:58:1b:84:28:
         3b:c1:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:18:43 2025 by rpki-client