Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/34352e372e3232342e302f32322d3234203d3e20323636363135.roa
File:                     34352e372e3232342e302f32322d3234203d3e20323636363135.roa (raw, json)
Hash identifier:          w3sJfNR7aXvz+68pefKClxlGuB7BGpl5S8sGtP3XhAw=
Subject key identifier:   BB:71:1E:94:CD:0A:C3:87:76:16:4F:40:5B:10:B8:2A:FE:A8:AE:CD
Certificate issuer:       /CN=6BD4739E1EF64752F6C47E6066F4EE428D519B9D
Certificate serial:       528DAD65E01BA2FB7CB714531047E314FDD0A145
Authority key identifier: 6B:D4:73:9E:1E:F6:47:52:F6:C4:7E:60:66:F4:EE:42:8D:51:9B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD4739E1EF64752F6C47E6066F4EE428D519B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/34352e372e3232342e302f32322d3234203d3e20323636363135.roa
Signing time:             Thu 15 Feb 2024 23:45:59 +0000
ROA not before:           Thu 15 Feb 2024 23:40:59 +0000
ROA not after:            Thu 13 Feb 2025 23:45:59 +0000
asID:                     266615
IP address blocks:        45.7.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8d:ad:65:e0:1b:a2:fb:7c:b7:14:53:10:47:e3:14:fd:d0:a1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD4739E1EF64752F6C47E6066F4EE428D519B9D
        Validity
            Not Before: Feb 15 23:40:59 2024 GMT
            Not After : Feb 13 23:45:59 2025 GMT
        Subject: CN=BB711E94CD0AC38776164F405B10B82AFEA8AECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:c9:8b:13:77:4b:cf:ee:9e:ef:d0:59:28:
                    fd:93:ad:ab:fe:ff:e1:57:bd:79:9c:ec:e6:11:a2:
                    a2:f8:e4:73:f0:b5:79:b8:0e:7d:db:88:a6:8b:98:
                    40:04:c9:22:b7:6d:a1:46:36:d7:05:28:2b:74:5b:
                    49:53:10:49:7c:5d:a0:d2:ed:c0:52:f2:b3:f7:6a:
                    f5:8e:ed:df:a7:20:86:f8:4d:a9:92:b7:cf:41:72:
                    7f:38:0b:f3:2f:8a:7f:4f:6a:64:5a:44:cd:88:2e:
                    7c:7f:2a:2b:4d:9b:c1:c3:5a:3c:4a:56:5e:21:db:
                    01:41:43:6b:62:d7:0d:57:73:be:c8:33:8d:3b:3f:
                    9c:60:66:bd:45:b0:c8:ca:4f:05:66:b9:45:ea:dd:
                    6a:2e:4b:2a:81:10:c0:6f:a6:84:3b:a7:f1:aa:a9:
                    f1:76:ab:23:4c:e4:e8:21:90:34:ca:75:db:03:6f:
                    01:21:ed:aa:37:dd:e6:ab:6b:60:da:0c:23:49:a6:
                    e8:36:ca:13:80:fa:2f:2e:30:96:c3:c3:b4:19:f9:
                    4c:6d:39:52:e6:01:d4:cb:ca:02:05:71:8a:65:25:
                    5c:e1:36:f3:73:7b:8b:cb:d0:8c:18:c9:00:be:3a:
                    7a:7b:19:a0:7c:d4:53:a5:b3:2d:d1:0f:75:b3:ab:
                    6b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:71:1E:94:CD:0A:C3:87:76:16:4F:40:5B:10:B8:2A:FE:A8:AE:CD
            X509v3 Authority Key Identifier:
                keyid:6B:D4:73:9E:1E:F6:47:52:F6:C4:7E:60:66:F4:EE:42:8D:51:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/6BD4739E1EF64752F6C47E6066F4EE428D519B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD4739E1EF64752F6C47E6066F4EE428D519B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/34352e372e3232342e302f32322d3234203d3e20323636363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:37:5f:de:01:6e:22:56:d6:5c:0a:19:33:35:e1:11:8e:62:
         0e:ef:95:58:8d:7c:e2:ce:83:9b:d0:90:40:63:bd:4f:e6:0c:
         fc:57:c0:38:98:3b:8c:1e:ef:94:68:08:c6:cc:cc:52:b6:88:
         22:82:14:cf:86:c7:18:e6:a9:46:7e:8f:41:dc:1a:7f:30:3c:
         88:52:83:5a:90:df:e1:e0:01:f1:fc:88:cd:b5:32:c7:e5:b4:
         aa:98:82:6c:ed:f4:6a:8a:e2:28:f5:62:2f:95:57:68:9f:ad:
         0f:5b:27:ae:0a:12:94:b0:fe:1a:d3:40:ff:2f:c1:5f:b6:0a:
         88:9d:38:77:5c:b2:65:d5:b2:aa:5f:fc:23:c8:5b:69:24:d5:
         42:af:30:73:f1:7c:eb:57:a5:ab:ce:b0:5f:84:3e:c9:67:38:
         94:6e:4e:a2:e8:3b:7a:90:ac:65:5b:96:51:a9:80:7d:02:0d:
         50:07:ca:3c:3b:93:67:65:90:ae:89:a1:e1:6f:7d:c0:24:0a:
         11:51:19:a6:90:17:70:f1:b2:78:60:32:0b:e5:7e:5f:c9:92:
         37:70:f1:04:ae:e7:4f:6d:f0:d7:2c:e7:da:eb:6a:86:ee:9d:
         3d:1b:4b:8b:2e:ba:bb:14:1d:4b:a6:26:f0:f1:2b:fc:bb:28:
         73:bc:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:47 2025 by rpki-client