Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32352e302f32342d3234203d3e20323638313833.roa
File:                     34352e3137312e32352e302f32342d3234203d3e20323638313833.roa (raw, json)
Hash identifier:          LMJ3T5Pmg57exAqxP+l0JGt+jtwMSGAaKW46Jne3C20=
Subject key identifier:   80:8A:B3:E4:00:E2:68:FD:48:32:B3:E0:59:F6:14:46:F1:DB:C7:10
Certificate issuer:       /CN=86806D9BD12A677347ED32D286F9803B86B05A33
Certificate serial:       7A5E153F959CEA62FAD8DDE983D10AB4881EE82D
Authority key identifier: 86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32352e302f32342d3234203d3e20323638313833.roa
Signing time:             Mon 04 Mar 2024 22:25:32 +0000
ROA not before:           Mon 04 Mar 2024 22:20:32 +0000
ROA not after:            Mon 03 Mar 2025 22:25:32 +0000
asID:                     268183
IP address blocks:        45.171.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5e:15:3f:95:9c:ea:62:fa:d8:dd:e9:83:d1:0a:b4:88:1e:e8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86806D9BD12A677347ED32D286F9803B86B05A33
        Validity
            Not Before: Mar  4 22:20:32 2024 GMT
            Not After : Mar  3 22:25:32 2025 GMT
        Subject: CN=808AB3E400E268FD4832B3E059F61446F1DBC710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:0a:fe:47:39:1b:c1:b0:b1:37:88:7b:5b:
                    3b:4e:4c:77:2f:af:8e:44:f5:55:82:d9:d2:95:e1:
                    71:b3:c1:29:40:f9:54:51:77:84:b5:ff:3e:ca:d4:
                    8f:f0:ab:59:85:13:5e:d5:a0:ce:62:89:02:09:85:
                    e2:be:61:cd:ab:9b:22:43:d6:6d:2f:e5:6e:7f:08:
                    38:0c:7b:74:65:50:dc:bb:fa:80:df:23:41:ba:f2:
                    df:2d:b4:93:c8:1d:30:da:ae:e6:48:c2:f0:a9:07:
                    f3:73:9d:ff:06:1d:14:67:85:ac:62:10:c3:b2:42:
                    06:b2:ee:76:a4:ba:b2:1c:a7:9a:02:8f:37:9f:9b:
                    46:af:c1:b9:dd:2b:a8:0c:8b:65:d3:27:bf:65:42:
                    a7:9b:6d:fe:2b:73:cf:f4:6d:0f:cd:2c:e7:71:e5:
                    08:17:48:38:e4:76:74:73:8c:a4:53:61:2b:3c:ec:
                    07:e1:76:98:a4:2b:9d:5e:f0:84:fd:27:82:2f:6d:
                    35:24:3f:1e:92:27:67:cb:b7:0c:b2:3a:da:82:51:
                    43:6e:9e:23:18:11:76:31:dc:4f:d8:09:f0:8f:b9:
                    88:07:cc:46:8f:61:63:ef:5a:21:48:11:c2:a2:1f:
                    10:55:e5:1a:a0:30:19:e9:8f:e0:57:f3:45:9c:a5:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8A:B3:E4:00:E2:68:FD:48:32:B3:E0:59:F6:14:46:F1:DB:C7:10
            X509v3 Authority Key Identifier:
                keyid:86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/86806D9BD12A677347ED32D286F9803B86B05A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32352e302f32342d3234203d3e20323638313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e6:49:cd:8b:aa:87:4a:e7:6f:2a:93:c0:b9:7f:af:d4:c5:
         07:30:5b:8b:62:a2:de:44:ab:bb:06:76:bf:fd:65:3a:9a:67:
         a0:b9:55:81:a6:47:6c:80:4d:e1:34:ab:79:ef:8e:b4:a4:54:
         81:2a:de:20:1c:ec:20:e8:ca:57:6d:b5:75:02:9c:5c:c7:a5:
         b6:e8:4a:38:a1:7f:4c:a0:76:a4:15:76:d8:11:cf:a5:61:e6:
         7b:89:76:fc:65:29:59:9c:67:c3:34:9e:f2:54:c0:19:07:c9:
         e1:f0:cf:57:a7:3a:23:9a:f0:0e:ba:61:13:5c:9b:50:c3:d5:
         82:05:69:a7:7e:56:bc:1b:89:25:aa:3b:94:5e:3e:1b:09:38:
         93:4e:db:6b:05:33:1d:a9:b0:b4:e3:61:cd:29:17:7c:d9:6a:
         8f:2b:1d:db:f0:8e:56:40:b5:ff:4c:b5:59:d7:15:ce:34:b0:
         a1:1c:71:d6:a2:c6:6e:6a:95:99:c7:07:7c:d9:68:e7:fc:4a:
         6c:7e:e5:96:72:1d:fc:b1:3b:31:f7:b3:9d:05:74:45:d5:82:
         24:f9:5e:1b:4e:39:c6:33:23:e7:76:37:77:53:33:46:56:e1:
         70:2e:63:c0:5d:da:b4:a3:0d:32:19:61:db:d1:e0:26:95:de:
         23:6b:2e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:27 2025 by rpki-client