Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa
File:                     34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (raw, json)
Hash identifier:          3Lb70pCZAg3CmsYvFC5zAKOFNBBO7/RB51k+rEc3+lU=
Subject key identifier:   E9:0F:96:D7:E5:CA:2A:AD:16:1C:5C:FA:24:FE:2C:88:1D:38:C8:03
Certificate issuer:       /CN=F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9
Certificate serial:       70B143A4968872E26CF97E55101ECA9710A8A76D
Authority key identifier: F8:31:AC:ED:CB:64:1C:A6:73:1F:FE:1C:8B:4D:CC:89:5E:57:FD:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa
Signing time:             Tue 02 Apr 2024 19:00:00 +0000
ROA not before:           Tue 02 Apr 2024 18:55:00 +0000
ROA not after:            Tue 01 Apr 2025 19:00:00 +0000
asID:                     268254
IP address blocks:        45.236.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b1:43:a4:96:88:72:e2:6c:f9:7e:55:10:1e:ca:97:10:a8:a7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9
        Validity
            Not Before: Apr  2 18:55:00 2024 GMT
            Not After : Apr  1 19:00:00 2025 GMT
        Subject: CN=E90F96D7E5CA2AAD161C5CFA24FE2C881D38C803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:4e:df:7e:14:7f:e5:26:5e:c4:aa:69:63:
                    83:48:38:44:70:0d:97:c5:a9:1a:27:24:22:a0:d6:
                    b8:6a:44:50:c3:c1:38:72:5f:21:c1:15:da:3c:37:
                    2d:db:9d:0a:31:87:84:70:14:5f:0e:2f:6d:72:87:
                    a9:de:e1:77:9c:f4:ea:ea:50:f7:c8:29:e3:f3:d0:
                    76:b4:5c:1f:c0:23:8e:90:10:c4:91:3f:0b:45:94:
                    87:ea:c9:9f:9b:4f:1e:87:0b:0c:b0:db:11:63:bc:
                    40:ec:2e:ee:c0:49:dd:a1:6b:73:fd:8f:f5:2e:9e:
                    ec:00:8d:06:1c:52:94:0a:e3:80:c9:1b:cc:bc:11:
                    11:19:f0:0f:b8:f4:8a:ae:c8:2f:6c:1e:8c:d9:2d:
                    25:67:6f:7e:a6:d7:f6:38:f9:58:51:85:f7:d1:4d:
                    84:94:38:d8:e9:ac:f9:54:10:a7:ae:43:77:10:0c:
                    ff:94:20:73:ef:1c:bc:76:7a:57:1c:6c:ce:73:45:
                    45:ed:05:46:f1:53:d1:3d:2c:94:97:75:7e:99:6f:
                    89:83:82:30:56:87:a4:f5:e5:07:07:d9:96:b5:5c:
                    cc:9d:62:13:b2:9f:d9:a2:08:c3:6a:2e:00:52:fe:
                    bd:2a:fb:9c:a4:7a:a3:ed:71:af:b2:ad:82:b6:70:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0F:96:D7:E5:CA:2A:AD:16:1C:5C:FA:24:FE:2C:88:1D:38:C8:03
            X509v3 Authority Key Identifier:
                keyid:F8:31:AC:ED:CB:64:1C:A6:73:1F:FE:1C:8B:4D:CC:89:5E:57:FD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F831ACEDCB641CA6731FFE1C8B4DCC895E57FDA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/0/34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:15:91:dc:81:1d:df:d1:71:ee:86:e9:d0:45:a7:76:05:58:
         a3:9a:99:f6:6d:08:e6:9e:53:7e:01:ed:b1:24:7f:87:4d:3a:
         d4:ea:f0:cf:3f:f7:eb:27:33:0c:f7:63:42:dd:5c:4b:22:6a:
         e1:28:41:32:c2:aa:e2:42:da:7c:3a:73:48:47:fe:d4:9c:11:
         bf:1d:59:7b:d2:b4:c6:29:90:a7:79:99:6b:e7:ed:40:41:64:
         e1:6a:dd:2d:1d:2c:11:84:c4:9d:69:08:f7:e3:7f:b6:f9:21:
         bc:26:08:b0:a9:5d:a9:39:a2:8f:3e:c0:97:16:05:f5:4f:16:
         83:b5:15:e2:ec:44:51:08:45:cb:63:3b:1d:bc:68:a4:22:62:
         ab:6b:3a:69:0a:e5:e6:cc:c2:34:c8:30:16:bc:54:6a:83:a6:
         9f:b0:58:46:72:a7:3e:ec:a8:5d:dc:8d:ce:49:24:cb:db:fc:
         d3:7c:e1:ef:24:fd:e5:1d:f9:f3:1b:49:ea:ba:8d:b1:0f:f1:
         a5:60:a6:98:a0:09:57:5c:8e:65:5e:b1:92:1f:95:84:7e:63:
         5f:21:f1:6b:1c:f0:8e:6e:0f:0c:24:2d:7e:dd:38:41:c7:19:
         47:4e:61:37:4a:20:50:e0:ef:a5:da:2b:13:c3:06:72:17:a5:
         c5:88:a9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:48 2025 by rpki-client