Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231382e302f32342d3234203d3e20323636323437.roa
File:                     34352e362e3231382e302f32342d3234203d3e20323636323437.roa (raw, json)
Hash identifier:          1DgSBaE4iTapSyHJ9lmPGCqyJtTJhqsBc4k55qO2JiY=
Subject key identifier:   2B:B4:7A:33:D9:6F:4A:D2:39:A5:18:D4:4F:75:C7:90:66:BD:1D:B3
Certificate issuer:       /CN=0FF897150A721E543538D1FB1C6A7C5017A68480
Certificate serial:       1C4BF67A07EB49F166C1323174C51C2E6F996E7D
Authority key identifier: 0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231382e302f32342d3234203d3e20323636323437.roa
Signing time:             Sun 14 May 2023 17:10:45 +0000
ROA not before:           Sun 14 May 2023 17:05:45 +0000
ROA not after:            Sun 12 May 2024 17:10:45 +0000
asID:                     266247
IP address blocks:        45.6.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4b:f6:7a:07:eb:49:f1:66:c1:32:31:74:c5:1c:2e:6f:99:6e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF897150A721E543538D1FB1C6A7C5017A68480
        Validity
            Not Before: May 14 17:05:45 2023 GMT
            Not After : May 12 17:10:45 2024 GMT
        Subject: CN=2BB47A33D96F4AD239A518D44F75C79066BD1DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:0e:c5:7c:49:08:dd:a9:ff:64:39:ba:c4:
                    a6:8a:ab:47:a6:ec:fa:ce:6e:58:4e:bb:df:48:73:
                    c9:0f:e6:fc:25:5f:80:cf:36:60:ba:76:c4:a9:2e:
                    e5:10:d3:f1:5c:4f:ec:88:23:77:10:02:c3:e5:43:
                    fb:8e:24:04:a9:43:a8:fd:f4:25:78:19:2c:a7:39:
                    51:8a:96:58:0f:2e:11:29:49:19:f8:97:32:95:28:
                    c8:44:bb:87:55:ff:ef:ba:44:ad:c2:18:58:1c:f7:
                    7f:3c:a7:81:e7:c7:c8:93:7f:ac:78:a7:e4:dc:25:
                    aa:79:b1:a2:6c:c6:37:92:a4:3a:14:87:2b:aa:b3:
                    c1:72:40:e9:c7:5b:15:33:85:35:1f:54:ac:79:0f:
                    3c:23:5a:73:3f:dd:7b:2f:52:39:f2:85:fa:ec:44:
                    dd:b3:63:cf:aa:0f:2a:ea:59:ea:31:a9:ad:8c:56:
                    6e:1d:9a:d8:25:72:02:68:90:e6:d8:44:d3:ef:23:
                    89:a6:fc:7f:c1:0b:63:3f:0c:11:cc:a3:5b:a1:28:
                    7a:69:ed:26:2d:56:65:20:bd:32:0d:47:9e:8f:90:
                    9d:7b:d0:6a:9e:de:27:0a:38:cb:7e:c2:fd:03:cd:
                    c7:a2:93:6d:44:e5:a5:29:65:24:bc:5e:9d:a7:8c:
                    fa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B4:7A:33:D9:6F:4A:D2:39:A5:18:D4:4F:75:C7:90:66:BD:1D:B3
            X509v3 Authority Key Identifier:
                keyid:0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/0FF897150A721E543538D1FB1C6A7C5017A68480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231382e302f32342d3234203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:61:06:db:5f:1f:ea:1b:4a:72:1b:3a:09:fe:e2:e2:66:a6:
         d9:28:24:ec:5b:69:f1:34:52:a4:e0:44:b0:0e:28:c2:f0:31:
         12:53:72:b7:2b:bd:f3:a6:a9:93:56:d3:93:00:df:dc:9d:7e:
         cd:bd:a5:c2:16:1d:f5:8f:1e:57:1a:e0:f5:1d:d8:fd:2a:38:
         5f:c4:aa:35:d0:80:5b:4d:cb:d7:11:f8:f7:5e:b4:08:07:90:
         1f:42:2e:9d:cb:43:f0:31:3a:dc:24:9d:33:4c:82:d9:af:f0:
         e5:66:60:e8:65:0a:0c:87:3b:be:b1:8f:ec:34:e7:c7:0f:43:
         e8:c6:be:03:18:31:58:ef:03:bd:85:09:0d:d3:e1:78:4c:f6:
         c5:2b:1c:be:1e:4f:98:31:0b:8d:3d:3c:43:cc:a8:11:06:d6:
         6e:9d:61:18:2b:2a:c8:9b:c8:e5:08:a6:e2:d4:bd:8f:a2:fc:
         b8:bb:b0:e6:d0:ef:8c:fc:b9:a4:ad:71:df:0a:b3:15:e1:c5:
         66:56:4d:13:b3:17:3f:33:09:06:fb:1b:48:12:69:95:73:ea:
         7a:57:61:c2:8b:92:2e:0e:79:32:0d:0c:9b:6f:b3:a3:4d:c0:
         3a:a4:c5:fe:6a:94:f8:5f:4e:31:a8:53:80:ee:26:b4:4c:7a:
         a9:07:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:29 2025 by rpki-client