Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32322d3232203d3e20323636323437.roa
File:                     34352e362e3231362e302f32322d3232203d3e20323636323437.roa (raw, json)
Hash identifier:          m+07EMFJo3auR0l4kaKD869OgUbHKn0qRbcyIoANAig=
Subject key identifier:   F5:A1:28:75:48:41:46:35:5D:FE:9F:DE:EF:63:71:55:FC:3D:49:5B
Certificate issuer:       /CN=0FF897150A721E543538D1FB1C6A7C5017A68480
Certificate serial:       7398925AE94F8DC4A3D7DEAFEA5D656C330D9A2B
Authority key identifier: 0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32322d3232203d3e20323636323437.roa
Signing time:             Sun 14 May 2023 17:10:44 +0000
ROA not before:           Sun 14 May 2023 17:05:44 +0000
ROA not after:            Sun 12 May 2024 17:10:44 +0000
asID:                     266247
IP address blocks:        45.6.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:98:92:5a:e9:4f:8d:c4:a3:d7:de:af:ea:5d:65:6c:33:0d:9a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF897150A721E543538D1FB1C6A7C5017A68480
        Validity
            Not Before: May 14 17:05:44 2023 GMT
            Not After : May 12 17:10:44 2024 GMT
        Subject: CN=F5A12875484146355DFE9FDEEF637155FC3D495B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9d:68:0f:70:1e:90:09:f7:98:51:32:14:b3:
                    80:64:24:39:64:f4:cf:3f:19:29:af:6e:4c:e3:07:
                    d0:b5:b3:41:65:47:a5:35:fd:57:7a:73:e7:2c:49:
                    61:02:81:7a:24:5a:f4:62:b6:63:82:0a:55:3e:de:
                    18:68:13:d9:7e:48:8c:78:7b:dc:f0:4b:a1:42:aa:
                    7d:b0:8a:c1:2d:f5:20:03:53:9b:71:14:9e:e2:c7:
                    60:24:03:ef:48:89:6b:cd:3b:51:1d:c0:40:92:a0:
                    36:ba:42:73:d2:9e:37:68:f6:8d:b9:fa:cc:52:15:
                    71:a0:62:40:d3:cd:e5:3a:0a:4a:a5:1f:36:8a:f4:
                    1c:87:05:03:bf:ba:28:27:b3:9a:8e:ba:15:aa:4f:
                    03:16:8f:a4:0d:09:d1:7c:5d:01:f1:c4:43:53:c6:
                    6a:ce:46:89:73:ec:e9:cd:60:97:96:bb:ed:7f:63:
                    a1:85:cd:58:76:b5:c5:41:11:04:96:9f:b6:59:68:
                    a8:82:de:9c:26:25:56:9b:0a:99:73:45:79:28:e0:
                    7c:b7:d0:32:3e:ba:c0:24:82:d4:30:f0:4b:fc:e1:
                    24:6d:85:47:de:d0:57:b0:4b:bd:e3:bb:1b:99:3d:
                    a1:0a:a9:0b:14:54:26:4c:a9:0e:e4:d0:1b:2b:e1:
                    c2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A1:28:75:48:41:46:35:5D:FE:9F:DE:EF:63:71:55:FC:3D:49:5B
            X509v3 Authority Key Identifier:
                keyid:0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/0FF897150A721E543538D1FB1C6A7C5017A68480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32322d3232203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:d9:79:ed:d7:7d:7f:22:44:f3:35:b5:46:2a:c3:4a:71:55:
         bd:b4:2b:76:f5:79:47:bc:33:36:ed:5a:7c:1b:f9:f0:80:04:
         8a:62:c2:ee:98:39:44:ef:50:36:e5:50:ba:a1:71:67:8d:e7:
         13:24:0f:20:3d:70:23:30:05:9e:1a:d3:7e:a1:23:dc:df:44:
         61:6a:20:94:0d:c0:ba:1b:10:cb:e0:84:7f:b3:e6:94:48:93:
         e0:50:f1:9f:c4:12:47:d5:9b:95:ac:fb:48:77:b3:ac:c7:c2:
         4e:fd:ca:8d:5e:09:58:a5:ee:62:b6:06:c6:eb:53:08:97:85:
         5f:1c:93:a0:98:fd:70:a3:6a:ff:c8:58:30:c6:a1:30:1c:88:
         14:91:95:68:47:00:35:34:bf:8e:a4:ce:89:97:b4:fd:4a:57:
         7d:57:d2:ec:36:14:79:02:0c:fa:e9:7c:72:9e:36:24:60:be:
         60:d6:6a:68:00:34:83:08:f4:f3:75:9b:54:36:44:e3:fe:35:
         40:48:2b:46:e8:5f:97:84:be:db:b2:36:ba:6f:14:ee:58:1a:
         8f:63:40:37:f6:fa:84:59:23:b1:37:df:ca:a2:df:de:7b:ca:
         22:2b:63:27:73:10:76:a5:be:5a:17:50:50:a8:f1:d6:4e:ed:
         f6:1c:de:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:09 2025 by rpki-client