Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa
File:                     34352e3137302e37322e302f32342d3234203d3e20323638313533.roa (raw, json)
Hash identifier:          B8RxU6sybJzzR1lw1x6imyVPQIusPn6/BwCMc4UzjQU=
Subject key identifier:   4E:C4:45:30:AC:B8:14:3B:20:E6:2A:7E:7B:F0:D9:6A:0C:CF:F1:82
Certificate issuer:       /CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
Certificate serial:       3812373D095FDEC129FCCEAAF73CAD902D28390C
Authority key identifier: B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa
Signing time:             Fri 07 Jul 2023 16:24:51 +0000
ROA not before:           Fri 07 Jul 2023 16:19:51 +0000
ROA not after:            Fri 05 Jul 2024 16:24:51 +0000
asID:                     268153
IP address blocks:        45.170.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:12:37:3d:09:5f:de:c1:29:fc:ce:aa:f7:3c:ad:90:2d:28:39:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
        Validity
            Not Before: Jul  7 16:19:51 2023 GMT
            Not After : Jul  5 16:24:51 2024 GMT
        Subject: CN=4EC44530ACB8143B20E62A7E7BF0D96A0CCFF182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:a9:2d:72:6e:b2:2a:eb:ba:3e:59:6a:03:
                    ce:82:ac:a3:46:64:f0:23:d9:ef:a8:58:89:4e:46:
                    19:b6:75:41:a3:5d:32:1b:62:ca:ca:74:a6:1f:9b:
                    6c:e3:79:e6:e4:fa:67:8c:e5:5b:6e:99:f0:4d:67:
                    ac:f1:ff:07:ee:30:76:47:74:da:cb:8d:b7:e0:90:
                    45:ef:05:aa:ab:55:2e:06:cd:22:16:5b:14:d2:88:
                    d5:a3:40:bc:80:18:f0:c1:3a:f5:9c:81:b1:0a:0c:
                    54:13:8f:51:c6:7a:65:88:3e:f8:53:b1:24:5e:32:
                    b0:b8:b7:09:f3:df:ad:dc:90:39:e1:79:b7:16:fa:
                    3a:9e:8c:1c:8f:90:c9:dd:e5:a2:51:60:a1:db:44:
                    ca:fa:13:29:95:b8:34:a9:7e:d7:e6:75:23:5b:81:
                    8d:0e:37:ce:09:f3:20:5a:43:a8:2b:75:d6:ce:5d:
                    87:b0:f4:e2:fa:39:55:6f:e2:20:a6:49:9e:c0:2c:
                    cb:28:90:dd:33:82:3b:b2:60:1b:1c:39:5e:13:7d:
                    eb:e2:78:77:c1:02:78:a1:df:de:c1:27:a4:21:1a:
                    d4:62:e6:9b:1e:5b:76:8b:4e:15:b2:fb:ed:00:47:
                    3d:16:db:4a:f3:b8:76:f8:91:1e:d9:7c:5d:b3:1b:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C4:45:30:AC:B8:14:3B:20:E6:2A:7E:7B:F0:D9:6A:0C:CF:F1:82
            X509v3 Authority Key Identifier:
                keyid:B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/34352e3137302e37322e302f32342d3234203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c4:0b:2d:e2:2c:c7:46:32:72:7d:81:7c:e5:e4:1f:0f:db:
         26:ad:51:09:11:56:7d:84:21:0b:92:ad:f8:da:12:33:fb:04:
         3b:f9:1a:d9:19:e8:82:ec:61:47:3f:a9:5e:1e:92:95:30:51:
         a5:06:7d:5e:8e:71:c4:3c:62:ba:87:b9:09:c4:65:79:7a:11:
         ad:df:64:b8:69:43:04:72:b6:b5:e7:e4:2e:91:b6:ea:af:b5:
         ca:45:b4:43:b2:75:d9:6d:7b:ff:35:21:12:8a:04:cf:84:d8:
         65:53:9d:26:96:f3:34:a7:34:23:a7:43:89:33:b1:d8:e7:9c:
         5a:d7:2b:81:72:67:ee:32:26:5a:fb:48:68:2c:e7:cb:de:04:
         b4:bc:54:43:af:2e:1e:04:f4:e2:b0:ef:71:a6:82:43:4e:f6:
         3a:e4:94:3b:3d:6a:df:aa:92:2d:8b:1d:61:a3:33:91:00:96:
         c8:aa:58:cf:5c:3d:33:11:67:fa:df:05:8b:e5:39:47:02:8f:
         8e:57:6e:56:eb:75:20:29:3e:b2:a9:8e:c4:f1:ff:0e:2e:17:
         a0:94:5c:46:7d:0f:bd:42:b5:af:3f:8e:27:de:df:06:a3:44:
         c1:85:2c:ac:31:9c:02:8d:2c:10:d6:e2:80:29:81:09:1e:51:
         12:94:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:22 2025 by rpki-client