Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32372e302f32342d3234203d3e20323638313833.roa
File:                     34352e3137312e32372e302f32342d3234203d3e20323638313833.roa (raw, json)
Hash identifier:          JftqamG50NRn1o//ugja9YkFmhkp3B40l1dxs69YEd4=
Subject key identifier:   E2:34:8D:C0:CB:5F:BD:F7:CA:5E:00:6E:97:75:EE:9E:2C:16:05:34
Certificate issuer:       /CN=86806D9BD12A677347ED32D286F9803B86B05A33
Certificate serial:       40567D12C41B56C0F669FBAC4BCDC79155C658A1
Authority key identifier: 86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32372e302f32342d3234203d3e20323638313833.roa
Signing time:             Mon 04 Mar 2024 22:25:39 +0000
ROA not before:           Mon 04 Mar 2024 22:20:39 +0000
ROA not after:            Mon 03 Mar 2025 22:25:39 +0000
asID:                     268183
IP address blocks:        45.171.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:56:7d:12:c4:1b:56:c0:f6:69:fb:ac:4b:cd:c7:91:55:c6:58:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86806D9BD12A677347ED32D286F9803B86B05A33
        Validity
            Not Before: Mar  4 22:20:39 2024 GMT
            Not After : Mar  3 22:25:39 2025 GMT
        Subject: CN=E2348DC0CB5FBDF7CA5E006E9775EE9E2C160534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:5b:8d:8c:4e:e4:42:f3:ac:89:de:e7:6a:
                    bc:b3:1c:67:d5:08:c8:e6:6a:b2:be:00:b1:23:73:
                    88:22:45:2e:a5:0c:37:ee:fe:d5:4f:a7:5e:b2:37:
                    14:47:44:b3:83:61:c5:ab:0d:17:f0:fc:c1:f9:3b:
                    72:d7:a6:c1:8e:bf:3b:8a:8c:a7:33:26:ac:e9:74:
                    60:79:a6:ff:2f:fc:d9:b2:ca:30:c2:8e:be:a0:01:
                    97:94:5d:55:b6:b5:e1:b0:39:64:1a:03:7f:8f:c5:
                    4d:bc:48:b3:9e:fa:f1:f3:b3:70:f3:51:2e:39:a3:
                    fe:80:82:f5:98:ef:eb:ce:f2:9c:b7:6e:e7:fc:b8:
                    e4:3a:af:6e:e9:d7:ff:4e:47:0f:b3:64:26:c6:e4:
                    9b:19:7a:6c:9e:ff:42:1e:a3:7e:9b:6e:82:d1:eb:
                    79:1a:ef:b8:ba:b7:e7:67:01:e8:3c:4a:d0:ac:8b:
                    61:43:75:dc:22:76:49:88:a4:ce:60:c3:20:0a:e9:
                    7a:be:e8:0e:b7:4e:0b:37:95:88:3b:3c:63:b1:4e:
                    67:68:0c:61:ba:41:cf:2b:05:96:b1:22:4a:75:b9:
                    d3:2c:a2:35:bc:9f:10:2c:cb:36:4b:69:26:05:c4:
                    ed:79:2a:aa:9d:e6:37:ca:26:d9:fe:f3:5e:4f:cd:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:34:8D:C0:CB:5F:BD:F7:CA:5E:00:6E:97:75:EE:9E:2C:16:05:34
            X509v3 Authority Key Identifier:
                keyid:86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/86806D9BD12A677347ED32D286F9803B86B05A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32372e302f32342d3234203d3e20323638313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d4:42:32:92:f0:50:5b:82:d9:96:7d:df:80:57:14:5d:eb:
         23:78:42:d4:fe:84:25:6f:af:01:92:1a:fe:f4:53:22:59:5b:
         9e:87:1c:55:fc:c0:b3:27:ad:2d:1e:0d:61:a7:e4:54:8c:84:
         bd:6b:bd:d7:b5:00:8b:70:9a:83:ab:5b:72:2a:d3:d5:c8:b6:
         08:8c:99:ec:d1:73:4d:d8:e7:6d:5e:f1:c1:e5:22:d7:21:b1:
         b1:cc:0f:e4:77:6e:1e:02:f9:ca:87:7f:d1:15:91:1f:b3:8c:
         5a:80:a9:12:fd:4c:aa:c7:de:43:e2:53:fb:ca:7f:77:a6:52:
         2d:5d:ef:1f:e5:30:8d:8f:27:25:bc:ed:22:b7:42:30:e5:58:
         b1:c4:53:2a:9c:e1:b3:65:88:e1:1b:36:85:c6:e3:f5:d7:a2:
         a7:63:d5:a8:8a:e4:2f:59:42:cf:ca:86:f4:8c:3b:06:ff:67:
         75:38:3c:88:ee:22:93:15:d5:91:db:f7:74:94:2f:91:26:9e:
         e7:f0:a0:da:d5:6b:45:23:92:10:56:43:f9:e9:0b:0d:06:20:
         e6:98:cc:45:7b:42:6b:46:8b:e9:5a:08:9d:15:cb:ed:dd:2f:
         58:a7:5b:9c:a9:dd:f3:68:b3:a1:e9:25:55:b0:b2:20:52:98:
         10:a6:eb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:52:45 2025 by rpki-client