Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/34352e3136382e3138322e302f32332d3233203d3e20323638303638.roa
File:                     34352e3136382e3138322e302f32332d3233203d3e20323638303638.roa (raw, json)
Hash identifier:          FxrvB2+Dyp1BlS2+lU5HWt1BntZWY5nkPDv5/smQ/xQ=
Subject key identifier:   F5:82:39:E2:EB:DC:AD:F3:8F:5E:16:76:BB:48:4A:C9:D9:43:82:A8
Certificate issuer:       /CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
Certificate serial:       7D24315DD490643CBF9CBDD96E5681DA3F398F90
Authority key identifier: BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/34352e3136382e3138322e302f32332d3233203d3e20323638303638.roa
Signing time:             Wed 10 Apr 2024 13:48:45 +0000
ROA not before:           Wed 10 Apr 2024 13:43:45 +0000
ROA not after:            Wed 09 Apr 2025 13:48:45 +0000
asID:                     268068
IP address blocks:        45.168.182.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:24:31:5d:d4:90:64:3c:bf:9c:bd:d9:6e:56:81:da:3f:39:8f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
        Validity
            Not Before: Apr 10 13:43:45 2024 GMT
            Not After : Apr  9 13:48:45 2025 GMT
        Subject: CN=F58239E2EBDCADF38F5E1676BB484AC9D94382A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:9d:e8:95:74:93:bc:ee:cb:2a:cb:86:77:
                    9a:7c:32:8c:6b:de:93:8e:64:8e:15:d3:89:85:de:
                    64:57:f2:b9:2f:69:de:15:68:55:17:63:e5:8c:da:
                    6d:fb:c9:ff:bd:8a:83:ef:1c:bb:13:2b:74:4a:f6:
                    da:c3:53:2c:21:6f:5e:e3:f9:db:0f:69:b2:2f:94:
                    c4:cb:cf:30:92:f8:e2:8a:9e:e9:0f:2d:15:00:a6:
                    b4:9c:ae:7e:cd:12:ec:38:e1:f6:37:5e:df:08:b0:
                    3a:a2:51:fa:3c:8f:2b:e2:b9:b4:1e:b1:e3:62:5f:
                    2f:ae:96:0a:05:74:2f:2a:59:71:fe:0d:24:bd:94:
                    9f:4a:5f:33:50:47:87:07:b2:89:da:01:14:23:f6:
                    de:1b:ce:eb:ab:04:7f:e8:33:6a:dd:33:af:18:8c:
                    bb:c6:49:71:40:21:c9:ae:36:20:e1:16:cc:65:04:
                    cc:55:b3:77:64:8e:76:b1:78:4a:92:0a:03:6e:5c:
                    cd:80:5a:f9:6b:f9:51:67:c1:c6:29:bb:a6:7c:d3:
                    c6:fb:0e:58:4d:aa:be:db:12:40:67:9b:50:9e:ef:
                    d9:1c:fa:f0:dc:81:b9:0a:5d:7b:f5:6e:5b:1d:19:
                    0a:70:98:4f:68:93:ee:2f:a9:30:92:76:c0:9a:6d:
                    70:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:82:39:E2:EB:DC:AD:F3:8F:5E:16:76:BB:48:4A:C9:D9:43:82:A8
            X509v3 Authority Key Identifier:
                keyid:BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/34352e3136382e3138322e302f32332d3233203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:7e:0d:26:b6:c4:ec:9f:c8:1a:28:d3:7e:bf:82:ad:ca:36:
         da:65:1f:de:ef:16:3b:aa:f2:7f:a0:c4:ce:3a:fb:a8:9f:0b:
         a3:7b:06:e3:a1:bc:45:12:7a:6f:4a:44:28:3c:f8:53:03:94:
         95:ba:c5:3a:97:b2:a9:17:68:b5:84:d7:44:4e:45:2d:5e:74:
         c3:42:79:f4:12:18:38:5d:95:eb:e0:26:33:af:d4:08:65:c7:
         c7:7e:15:82:f2:47:8b:8e:d2:ab:fa:29:0c:19:15:dd:ab:f2:
         90:34:bf:73:35:28:14:b3:2d:1e:f4:9a:99:60:12:dc:de:ac:
         e4:83:53:55:69:a4:fc:e4:34:a7:35:1c:74:c6:d8:29:fb:6b:
         04:d2:1b:f7:fa:ee:1d:36:d9:f5:55:5a:9b:81:ef:50:ff:08:
         54:ab:af:64:09:7f:1b:cf:86:ce:05:73:4c:5f:d9:08:74:7a:
         71:0a:3e:66:e8:37:07:ac:10:60:aa:69:d8:5c:63:cd:9b:fc:
         64:1d:06:18:ec:11:53:2d:87:d3:82:16:46:8a:79:58:77:a3:
         7a:5b:0c:d6:c4:4d:df:88:26:99:b2:0c:3a:e3:dc:ab:8e:57:
         d4:9f:be:1d:77:74:84:fc:d9:4d:24:08:cd:b1:9b:99:de:92:
         5c:e6:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:08 2025 by rpki-client