Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231372e302f32342d3234203d3e20323636323437.roa
File:                     34352e362e3231372e302f32342d3234203d3e20323636323437.roa (raw, json)
Hash identifier:          RgBZ+vNv5jyys4AEVpoJMCspVU/3V92+BphqzTVyd9g=
Subject key identifier:   18:7F:B5:CA:C6:96:A6:44:FD:B7:7E:DA:BC:48:A8:DE:85:5C:A5:B8
Certificate issuer:       /CN=0FF897150A721E543538D1FB1C6A7C5017A68480
Certificate serial:       6CDBE86FA347E9548E0FBDEB6657835804B479FC
Authority key identifier: 0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231372e302f32342d3234203d3e20323636323437.roa
Signing time:             Mon 15 May 2023 17:11:12 +0000
ROA not before:           Mon 15 May 2023 17:06:12 +0000
ROA not after:            Mon 13 May 2024 17:11:12 +0000
asID:                     266247
IP address blocks:        45.6.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:db:e8:6f:a3:47:e9:54:8e:0f:bd:eb:66:57:83:58:04:b4:79:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF897150A721E543538D1FB1C6A7C5017A68480
        Validity
            Not Before: May 15 17:06:12 2023 GMT
            Not After : May 13 17:11:12 2024 GMT
        Subject: CN=187FB5CAC696A644FDB77EDABC48A8DE855CA5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:8b:7c:46:08:ac:d3:47:cd:4f:2f:13:6d:
                    33:71:d6:38:2f:fc:80:9f:fe:fc:9d:ce:11:78:98:
                    03:b9:8f:21:fe:7b:17:8c:bc:cc:78:a9:16:aa:f1:
                    7e:f8:e0:16:9b:84:12:ef:bf:fa:6e:1e:82:03:e5:
                    b0:e7:cf:04:7a:db:f7:ce:23:58:65:33:6c:3d:07:
                    70:69:de:27:5b:b1:b0:0f:8f:6e:69:27:ab:1f:b5:
                    64:e6:b4:bf:b3:26:e5:18:e0:fa:d9:b3:43:bc:01:
                    b0:5d:05:94:59:99:e1:f7:49:49:9f:61:cc:7f:29:
                    bb:84:bf:96:ce:89:79:20:ab:4b:c4:3b:f1:90:22:
                    95:73:22:9a:da:fa:7d:af:21:2c:2d:71:01:1d:06:
                    d6:24:d1:ef:9a:a6:8d:6f:2b:08:79:90:ff:14:2c:
                    ba:1f:ec:c4:1c:bb:95:ac:74:e1:dd:6b:17:f3:4f:
                    22:87:74:22:8b:69:ee:0b:ce:03:f6:8b:e4:72:51:
                    a8:b7:da:0f:73:09:bb:d8:fb:47:16:63:eb:3a:6e:
                    81:1c:15:ba:2b:f7:86:38:fc:84:4e:e2:d2:c2:6f:
                    29:1f:ed:c9:02:42:83:82:7a:5a:f8:96:e2:c3:c9:
                    64:5f:cd:54:2d:ef:d5:b4:a7:82:5b:13:ad:8a:7f:
                    a4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7F:B5:CA:C6:96:A6:44:FD:B7:7E:DA:BC:48:A8:DE:85:5C:A5:B8
            X509v3 Authority Key Identifier:
                keyid:0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/0FF897150A721E543538D1FB1C6A7C5017A68480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231372e302f32342d3234203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ab:bc:16:c9:7b:42:8a:fa:58:de:33:88:d5:e0:f5:9c:ba:
         f0:db:82:17:ba:84:27:90:c5:a3:f0:79:79:48:01:e6:e0:15:
         c0:45:f1:8e:f9:de:5c:69:31:33:af:72:06:ef:d3:5f:d2:92:
         05:23:44:db:40:94:45:6d:02:51:88:47:06:ba:bf:0b:77:38:
         21:23:c5:76:0b:ba:cd:07:d2:79:dd:12:9b:99:1b:ac:e5:02:
         90:35:18:08:b6:bb:7f:39:02:d5:b2:6c:45:3c:9f:d3:d6:b5:
         8a:e2:3b:ac:c7:78:87:2f:80:ab:ca:17:25:d7:d9:37:24:e9:
         a3:bc:9c:5b:b6:32:36:e1:39:a5:2b:87:cf:aa:cb:2e:9b:95:
         78:34:b6:92:6e:89:a1:72:46:82:ec:5e:1f:14:c9:e4:f6:e1:
         8f:0b:6e:1c:9d:63:97:39:98:66:4f:28:89:1f:6f:c9:15:4e:
         50:4d:43:47:9d:90:f3:9e:ef:b9:e9:bd:4f:32:d2:4e:e0:f5:
         5f:d4:6d:d8:fb:3d:18:fa:e6:8c:4c:82:4a:8a:de:f3:66:2c:
         ff:d9:32:0e:ba:0d:a5:63:9a:32:10:37:f7:84:40:13:42:ad:
         9e:36:c6:61:b2:e3:fd:fa:4f:73:86:56:2a:14:f3:d9:e0:4c:
         35:ad:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:09 2025 by rpki-client