Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139372e302f32342d3234203d3e20323637333935.roa
File:                     34352e3233332e3139372e302f32342d3234203d3e20323637333935.roa (raw, json)
Hash identifier:          EZquT9LEaC7XFYpaqpM36sL2LGIZE3NzLh31AZysuew=
Subject key identifier:   CD:D8:28:DE:30:A4:9A:5A:FC:AD:9D:3B:BB:41:D9:18:38:36:27:43
Certificate issuer:       /CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
Certificate serial:       0807DF200963F96AADF9C9791AA57CEF11840D03
Authority key identifier: 89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139372e302f32342d3234203d3e20323637333935.roa
Signing time:             Fri 23 Aug 2024 19:56:45 +0000
ROA not before:           Fri 23 Aug 2024 19:51:45 +0000
ROA not after:            Fri 22 Aug 2025 19:56:45 +0000
asID:                     267395
IP address blocks:        45.233.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:07:df:20:09:63:f9:6a:ad:f9:c9:79:1a:a5:7c:ef:11:84:0d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
        Validity
            Not Before: Aug 23 19:51:45 2024 GMT
            Not After : Aug 22 19:56:45 2025 GMT
        Subject: CN=CDD828DE30A49A5AFCAD9D3BBB41D91838362743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:85:ed:4d:e7:c8:be:1e:16:51:fc:e7:6a:
                    84:7e:4b:3b:14:81:57:eb:88:42:d8:b8:a8:1d:0a:
                    90:e0:62:90:0a:3e:b3:46:1d:18:9c:67:b8:9b:4c:
                    0b:a0:e2:94:2a:1e:3a:1f:45:5a:7d:3d:37:11:ce:
                    fa:93:07:54:12:f6:21:7a:79:ec:f1:4c:2e:73:76:
                    93:dc:7f:cb:f3:b3:e3:3c:28:db:65:9f:34:b5:72:
                    c4:94:77:9d:00:fd:ad:2d:dc:76:3f:f6:e6:93:c7:
                    61:72:56:8f:c9:d6:2e:7c:e3:44:22:b1:88:39:57:
                    ea:f8:f4:1c:50:06:37:33:19:12:9d:61:1d:b2:12:
                    9c:c5:c1:f9:39:24:0f:43:b0:23:7c:12:cb:ee:64:
                    fa:00:d4:e9:ea:31:f7:90:58:97:a6:f1:44:31:8f:
                    63:6b:cf:2d:85:2f:00:2b:6d:cf:53:9e:ea:83:02:
                    a1:fa:3f:d6:7f:c7:c1:a0:a7:d8:63:c6:05:dd:f8:
                    ef:41:24:d5:b0:84:0d:91:23:61:10:e5:18:01:e7:
                    9c:7e:16:ec:e6:eb:c6:4f:46:83:80:65:8a:ac:b6:
                    23:5e:9b:8e:7c:51:b1:fe:76:38:16:98:5f:60:fa:
                    3b:84:fb:a2:90:72:4a:2b:ca:be:0c:3e:75:e7:d3:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D8:28:DE:30:A4:9A:5A:FC:AD:9D:3B:BB:41:D9:18:38:36:27:43
            X509v3 Authority Key Identifier:
                keyid:89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139372e302f32342d3234203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:06:67:a0:ab:68:a1:47:ee:74:95:a9:5e:f6:8f:b5:85:a2:
         f9:b7:4b:41:67:25:8f:cb:01:ce:fd:f9:e3:51:a8:d0:bc:89:
         d1:0c:ef:6f:88:1b:33:2e:5d:4f:3f:fc:de:f3:47:13:7b:d9:
         36:0c:da:a9:fe:75:e4:00:5c:1b:1a:8e:3b:a8:31:68:9e:b1:
         39:c9:4a:93:32:7a:e7:98:80:77:3a:f0:35:68:c3:8a:86:65:
         a8:62:7e:66:57:bf:fd:d4:4a:e0:ee:2c:cf:8a:80:18:ac:fe:
         c9:c7:59:11:33:5d:8b:a6:23:a4:18:26:0f:8b:50:91:41:8a:
         17:6b:b7:0a:08:bc:1c:90:02:4f:0b:fe:4e:09:73:b8:27:2a:
         5f:fa:45:3c:d9:cb:35:ea:cc:58:dc:9d:6f:30:b3:d4:76:27:
         60:99:fb:15:31:35:0d:b4:01:10:e2:c0:fc:02:d0:ec:8d:ce:
         7a:ae:b3:00:bd:dd:66:36:8c:af:2f:ca:06:f1:2a:26:36:be:
         74:48:8c:69:cb:e7:f6:78:1c:8c:5e:16:3a:a4:82:66:56:5f:
         3b:d9:d4:09:10:9a:a5:45:9b:55:80:ff:f9:78:e4:bc:4c:dd:
         f7:dd:85:4b:43:ad:e0:60:3c:f3:7b:3b:96:bb:3c:68:44:87:
         f3:46:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:15 2025 by rpki-client