Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32342e302f32342d3234203d3e20323638313833.roa
File:                     34352e3137312e32342e302f32342d3234203d3e20323638313833.roa (raw, json)
Hash identifier:          R3fOdGP39en14jpdenl7jOuOD06BqY/KN98TgFnvIhk=
Subject key identifier:   20:94:BA:EA:61:F3:43:E7:5B:F9:8D:26:FB:FB:2C:3E:A3:54:EF:79
Certificate issuer:       /CN=86806D9BD12A677347ED32D286F9803B86B05A33
Certificate serial:       3346557B9CFBD4077E7EC3F998EBCA4C87FCBAC1
Authority key identifier: 86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32342e302f32342d3234203d3e20323638313833.roa
Signing time:             Mon 04 Mar 2024 22:25:29 +0000
ROA not before:           Mon 04 Mar 2024 22:20:29 +0000
ROA not after:            Mon 03 Mar 2025 22:25:29 +0000
asID:                     268183
IP address blocks:        45.171.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:46:55:7b:9c:fb:d4:07:7e:7e:c3:f9:98:eb:ca:4c:87:fc:ba:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86806D9BD12A677347ED32D286F9803B86B05A33
        Validity
            Not Before: Mar  4 22:20:29 2024 GMT
            Not After : Mar  3 22:25:29 2025 GMT
        Subject: CN=2094BAEA61F343E75BF98D26FBFB2C3EA354EF79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:7b:0f:ac:64:7a:47:08:ca:e4:36:24:bb:
                    65:88:7a:27:2e:c3:e8:6c:57:7c:bc:83:ea:87:1c:
                    7a:52:88:b5:22:f8:3b:a5:96:cb:3e:93:a2:17:4a:
                    ec:17:f1:ef:10:95:34:cb:32:ad:ac:db:42:11:53:
                    1e:9b:88:c6:d1:c0:ed:1d:24:51:e9:d4:6a:1a:b8:
                    9d:34:2f:35:67:6d:e5:e6:1e:90:0d:3c:06:e8:7f:
                    cb:c5:cd:42:34:a3:5b:46:09:7f:ce:c7:03:75:f0:
                    50:df:1b:22:0d:31:92:da:97:8c:99:93:8a:43:02:
                    69:4d:45:70:b0:3d:be:7c:35:c8:a8:b5:ec:60:f5:
                    5b:ad:4c:b2:e3:83:46:62:f8:96:03:8e:58:b5:5c:
                    18:00:a4:10:2f:3f:ee:c7:53:9c:49:e3:81:ce:71:
                    ac:68:ae:4a:09:fd:3d:dd:f2:2a:6a:ed:10:db:af:
                    1c:00:53:7a:24:9a:ae:44:8b:6b:04:ec:19:39:d6:
                    9a:0e:09:c5:db:fc:1a:16:32:34:c7:b1:cf:08:07:
                    a1:7c:a7:a9:22:98:e4:fe:9d:d1:19:16:8f:4c:a5:
                    b8:98:6e:98:e4:c9:1e:4a:2e:13:f9:68:73:a0:36:
                    e7:67:fa:d3:89:4e:ca:f3:a5:a4:9d:ff:e9:56:fc:
                    e1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:94:BA:EA:61:F3:43:E7:5B:F9:8D:26:FB:FB:2C:3E:A3:54:EF:79
            X509v3 Authority Key Identifier:
                keyid:86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/86806D9BD12A677347ED32D286F9803B86B05A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32342e302f32342d3234203d3e20323638313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:5d:50:b0:05:be:8d:01:72:56:49:aa:2e:2f:b2:3d:35:
         ba:ce:5e:eb:75:5d:b5:08:b6:c3:df:37:29:a5:b7:10:48:0e:
         6a:54:3d:51:9f:95:c9:4c:e4:24:3b:1e:f6:45:60:a6:45:2e:
         67:a4:6f:c8:46:73:c3:b4:84:d2:db:46:dc:d3:98:ca:6b:a9:
         82:b5:9c:31:c7:5f:5c:15:7c:d5:50:f7:de:70:8a:f9:5c:00:
         9e:b2:ab:4f:b5:46:ed:bc:77:16:e7:b7:7a:a9:96:ef:aa:5b:
         8d:76:5b:17:4e:61:93:64:d5:27:8e:16:b0:a8:35:2b:4c:83:
         7d:12:74:8d:25:75:27:23:c5:7a:8a:9f:00:6d:91:cf:40:92:
         ed:4b:37:ae:12:8e:b0:c0:f1:aa:7b:fb:6f:9d:e9:45:80:ec:
         32:70:0c:73:16:ac:59:69:7b:1d:0b:b2:8c:e7:c1:1b:e4:b3:
         14:f5:68:96:9e:08:db:e9:89:0e:a0:7a:8e:56:40:6e:f0:de:
         17:3f:72:f0:cb:a7:e6:d4:67:11:db:c9:82:a5:89:54:e4:b6:
         eb:c8:12:66:32:d0:62:9b:b1:8d:c0:cd:b5:1f:b2:be:8b:56:
         e1:58:7f:12:78:2f:15:e6:57:df:19:ec:2c:bc:c7:e7:83:6c:
         e7:e0:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:02:00 2025 by rpki-client