Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/34352e3136372e3234342e302f32342d3234203d3e20323638313139.roa
File:                     34352e3136372e3234342e302f32342d3234203d3e20323638313139.roa (raw, json)
Hash identifier:          9FgrE1SFCxalPr67nY6g4z4N449FAWZLQUneYOdVSvE=
Subject key identifier:   D3:F9:80:81:53:3C:F5:68:22:4D:C1:21:F7:B2:62:74:96:EE:B4:6A
Certificate issuer:       /CN=05F9FA82E6DC844616C6E65830AA93270618DA3A
Certificate serial:       78690E7DF7F007B869C3589142B378ECA61BD08E
Authority key identifier: 05:F9:FA:82:E6:DC:84:46:16:C6:E6:58:30:AA:93:27:06:18:DA:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F9FA82E6DC844616C6E65830AA93270618DA3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/34352e3136372e3234342e302f32342d3234203d3e20323638313139.roa
Signing time:             Wed 29 May 2024 14:37:59 +0000
ROA not before:           Wed 29 May 2024 14:32:59 +0000
ROA not after:            Wed 28 May 2025 14:37:59 +0000
asID:                     268119
IP address blocks:        45.167.244.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:69:0e:7d:f7:f0:07:b8:69:c3:58:91:42:b3:78:ec:a6:1b:d0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05F9FA82E6DC844616C6E65830AA93270618DA3A
        Validity
            Not Before: May 29 14:32:59 2024 GMT
            Not After : May 28 14:37:59 2025 GMT
        Subject: CN=D3F98081533CF568224DC121F7B2627496EEB46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:9c:70:d1:b6:62:19:97:76:fe:45:08:a2:
                    cc:75:c3:65:86:aa:6f:2e:57:9a:7a:da:72:1b:59:
                    a8:29:97:d6:82:5b:45:8a:c7:f9:88:73:0a:bd:a3:
                    18:7a:95:2a:b5:c0:36:19:ab:b4:d1:15:70:38:a6:
                    e3:e8:8f:d7:f3:ab:2f:70:b0:d0:d0:4b:c3:f3:72:
                    de:f8:d6:4b:5b:6a:6b:f0:52:f5:d3:a8:3c:b8:90:
                    00:be:dd:35:db:9f:10:07:ee:27:fd:80:b5:5b:a8:
                    fc:0e:64:bf:c9:c0:0b:bd:15:5d:8f:34:1f:39:ed:
                    2c:68:dc:66:06:5d:0b:95:fd:f9:d7:2e:2e:ed:1a:
                    3e:a3:c8:5b:a7:6d:71:29:da:e0:55:33:79:d3:89:
                    1d:47:86:b5:04:25:50:52:b6:ec:2d:5e:9f:86:7b:
                    ca:b6:57:86:93:63:a6:76:55:e6:42:ff:6c:d7:13:
                    0f:28:e0:4f:82:55:8d:49:08:69:7f:7c:30:f4:ff:
                    a6:7e:ea:cc:b9:07:99:6c:34:97:e7:9d:2f:a0:44:
                    24:73:82:f6:ab:15:f4:66:16:60:42:80:6d:7a:78:
                    04:3e:3f:0a:7f:0f:4b:e1:39:84:bd:96:f8:84:51:
                    36:00:fd:1e:c5:de:58:d0:8a:79:34:c3:7d:b8:03:
                    be:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F9:80:81:53:3C:F5:68:22:4D:C1:21:F7:B2:62:74:96:EE:B4:6A
            X509v3 Authority Key Identifier:
                keyid:05:F9:FA:82:E6:DC:84:46:16:C6:E6:58:30:AA:93:27:06:18:DA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/05F9FA82E6DC844616C6E65830AA93270618DA3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F9FA82E6DC844616C6E65830AA93270618DA3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/34352e3136372e3234342e302f32342d3234203d3e20323638313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:96:e7:09:a4:aa:8d:99:b2:16:11:46:f1:2f:a8:c9:e0:b0:
         1d:a8:65:b4:9b:c7:24:1f:b2:27:4f:ae:98:bf:b3:fc:28:ce:
         9a:16:6c:4e:05:fc:a7:e5:b9:9c:6c:6f:41:85:c3:84:f8:92:
         ca:5f:3e:ba:a1:32:32:54:92:48:da:dc:4a:c2:53:b0:b5:9f:
         6d:36:3a:0c:e8:3f:b5:bc:42:70:72:3c:61:56:7d:b2:6e:1a:
         9b:81:75:4d:32:98:64:aa:71:b5:25:f5:c3:6a:41:36:e4:7e:
         6d:1d:0a:7d:87:0d:3b:a6:eb:c1:92:4f:30:85:f5:24:f6:c8:
         d3:39:cd:a4:93:60:76:e6:a8:77:1c:6d:bb:09:d5:3b:9c:63:
         96:c4:fd:95:83:e8:75:78:d1:33:f0:82:b1:20:ea:59:a5:b9:
         46:f6:6d:19:0c:b5:c8:84:92:99:f9:24:8b:22:42:f6:8f:f2:
         43:ea:e5:05:0a:3b:23:f5:53:b1:95:23:f9:e6:54:90:1b:e2:
         46:14:7f:ba:2c:42:03:1b:ad:ca:b9:86:c0:15:38:85:73:3e:
         ce:df:ba:00:1a:bf:23:6f:4a:f9:4e:c2:fc:0b:03:81:04:75:
         1b:ac:62:5a:34:bb:52:b1:3d:2d:f1:95:a7:7b:37:18:ba:04:
         14:80:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:58 2025 by rpki-client