Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3137312e302f32342d3234203d3e20323638353633.roa
File:                     34352e3136332e3137312e302f32342d3234203d3e20323638353633.roa (raw, json)
Hash identifier:          fS6BXETrfEalHO5Vu9ipHuVgm+frdXPRwTuFEycvsD8=
Subject key identifier:   85:5B:99:4F:DC:F5:CA:FD:BB:1B:89:57:9D:6C:34:CA:E4:2A:99:44
Certificate issuer:       /CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
Certificate serial:       536C16AB7F248F3746E7DD385642564A259FC552
Authority key identifier: 34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3137312e302f32342d3234203d3e20323638353633.roa
Signing time:             Thu 11 Jul 2024 13:15:56 +0000
ROA not before:           Thu 11 Jul 2024 13:10:56 +0000
ROA not after:            Thu 10 Jul 2025 13:15:56 +0000
asID:                     268563
IP address blocks:        45.163.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6c:16:ab:7f:24:8f:37:46:e7:dd:38:56:42:56:4a:25:9f:c5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
        Validity
            Not Before: Jul 11 13:10:56 2024 GMT
            Not After : Jul 10 13:15:56 2025 GMT
        Subject: CN=855B994FDCF5CAFDBB1B89579D6C34CAE42A9944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6e:be:8a:73:53:31:13:f9:ff:5e:be:e2:2e:
                    11:bf:00:24:f8:4c:9c:9a:34:3d:a3:4f:c5:3b:17:
                    db:58:24:db:e0:f6:77:31:3d:4d:b2:59:c2:0c:f6:
                    0c:e5:3e:b9:d7:2a:37:9c:8a:87:78:1b:83:87:1a:
                    35:5e:73:03:57:38:02:a0:ed:4d:ce:8d:f3:89:8a:
                    34:46:37:c8:f4:fc:35:63:b9:7d:a4:c4:ef:99:84:
                    a9:75:1d:c5:70:31:0b:eb:79:56:c3:c6:42:c7:ef:
                    af:80:9c:3c:1e:84:77:1b:ea:32:1a:2c:ae:47:2d:
                    07:df:ac:f5:f6:d9:d3:9f:7e:31:90:f0:92:1f:8a:
                    4d:34:6d:2b:0d:7c:a6:25:42:68:4b:78:c2:f9:2d:
                    6f:8b:d4:48:4e:3c:f9:76:44:67:33:c1:5e:b7:6f:
                    26:3a:bd:83:3b:11:0c:5e:97:24:27:a0:fd:8e:b6:
                    80:1a:fd:49:60:f6:8d:b7:bb:05:eb:c2:12:12:01:
                    12:6c:cc:2d:c9:1a:b1:78:bc:77:5b:f4:42:bb:da:
                    67:8b:ec:05:21:fe:9f:5f:01:44:0e:00:19:a6:61:
                    97:72:7d:c3:79:b4:8a:2a:50:70:4a:00:9a:9c:22:
                    9a:e5:7a:5d:43:78:f2:a9:6f:1f:0d:d9:49:3f:5f:
                    1f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5B:99:4F:DC:F5:CA:FD:BB:1B:89:57:9D:6C:34:CA:E4:2A:99:44
            X509v3 Authority Key Identifier:
                keyid:34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3137312e302f32342d3234203d3e20323638353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:10:bf:d8:42:a8:9d:c5:9f:b6:e0:35:9e:e4:23:bc:8f:45:
         e3:69:b9:e6:cb:52:d6:be:be:14:f0:19:06:3d:cd:34:3a:a5:
         52:65:6c:de:5a:14:bf:de:78:33:ad:e4:16:32:cd:05:d4:ce:
         1f:e7:0d:3c:d3:ce:25:e1:22:5e:1a:45:b2:99:0b:20:5b:6e:
         cf:80:89:3a:c2:f9:dc:98:04:69:35:ed:fa:57:b9:c1:4b:84:
         d4:de:39:90:04:db:68:d6:7b:5c:a9:bf:96:22:c7:26:18:74:
         f2:93:42:ae:e1:81:0b:e6:99:ce:89:e3:4e:d0:7c:4d:78:34:
         23:c0:13:92:95:4c:ef:87:c2:9b:b4:c6:49:fa:df:4e:47:52:
         76:93:54:9c:53:3c:3a:57:87:ab:ff:a7:6e:7b:79:78:37:69:
         b9:45:60:13:40:b9:f2:47:9e:42:07:65:98:16:f6:3e:dc:7a:
         6b:b2:d5:ce:d7:56:b4:b6:b3:16:6d:33:56:0e:be:6d:2f:c5:
         49:78:18:82:d1:2f:e8:85:b0:a5:19:2f:b8:45:87:21:12:5c:
         fd:cf:25:22:35:10:6f:73:be:55:2f:de:17:5a:e1:30:01:ff:
         b0:56:83:20:91:54:c8:79:00:35:e7:b9:64:c9:2c:d4:6f:34:
         c5:26:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:07:11 2025 by rpki-client