Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa
File:                     34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa (raw, json)
Hash identifier:          /6IEb6a5J3SjN4epre4ZxJjxMvUqrsz/fwHHxjbjoCM=
Subject key identifier:   D0:9F:7A:C5:79:93:71:6A:3E:F9:3B:63:5B:B6:58:10:AF:E0:79:23
Certificate issuer:       /CN=94E4D0AA03B0607D73B2212CED372F813315BAAC
Certificate serial:       30D1AB7FCD3C3AF1614B5CEF0DA15591A46D926E
Authority key identifier: 94:E4:D0:AA:03:B0:60:7D:73:B2:21:2C:ED:37:2F:81:33:15:BA:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa
Signing time:             Wed 17 May 2023 16:51:26 +0000
ROA not before:           Wed 17 May 2023 16:46:26 +0000
ROA not after:            Wed 15 May 2024 16:51:26 +0000
asID:                     268482
IP address blocks:        45.239.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d1:ab:7f:cd:3c:3a:f1:61:4b:5c:ef:0d:a1:55:91:a4:6d:92:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E4D0AA03B0607D73B2212CED372F813315BAAC
        Validity
            Not Before: May 17 16:46:26 2023 GMT
            Not After : May 15 16:51:26 2024 GMT
        Subject: CN=D09F7AC57993716A3EF93B635BB65810AFE07923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ce:ab:2f:3e:38:17:0f:dd:4c:96:6a:36:c0:
                    a3:ae:10:f3:af:77:07:d3:b5:36:62:ac:10:e4:40:
                    bd:87:8a:f6:4e:3d:15:ca:5a:82:c9:bf:89:65:71:
                    26:c3:65:f8:cb:36:44:1e:d3:f6:90:25:69:05:73:
                    ef:0a:df:9d:93:91:cd:f0:04:a3:ef:28:b0:9f:ea:
                    ba:c6:31:25:38:f0:22:8d:8a:72:45:58:93:90:82:
                    8e:fa:21:c7:ac:cd:a7:26:b9:48:be:8d:07:ef:89:
                    4a:2e:3d:1a:4d:47:bc:ff:3f:bf:49:e0:57:22:fd:
                    1b:10:61:ce:60:6b:d7:85:9c:37:f2:7a:27:cf:b9:
                    b6:84:22:c1:ff:d8:4b:5c:26:64:c7:30:44:c7:de:
                    f9:ca:23:1d:3b:f0:96:da:aa:9e:d3:51:ba:c9:50:
                    bc:59:6e:7b:db:04:b1:e4:80:cf:ee:4f:0a:54:a5:
                    6b:22:d3:e8:81:5a:67:0f:bd:65:c7:69:ab:52:14:
                    56:a0:3c:f3:20:6c:97:5e:dd:96:9d:1d:23:d8:2e:
                    d0:be:f5:04:c1:bd:b9:af:74:3c:f4:6d:bd:3b:6d:
                    a2:01:3f:e8:42:4e:3d:18:86:a1:ea:f3:f9:78:28:
                    c8:66:8d:3d:8d:d4:05:40:8e:91:7d:f4:94:ab:c8:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9F:7A:C5:79:93:71:6A:3E:F9:3B:63:5B:B6:58:10:AF:E0:79:23
            X509v3 Authority Key Identifier:
                keyid:94:E4:D0:AA:03:B0:60:7D:73:B2:21:2C:ED:37:2F:81:33:15:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:10:5f:52:b8:b5:fa:b0:a8:67:ca:fa:4f:1a:b3:18:6a:81:
         ac:4f:34:33:e0:49:07:81:43:27:56:50:11:cb:a6:89:e3:d7:
         24:b4:18:01:f6:34:af:ec:76:8e:5f:44:a2:c3:35:e0:0c:84:
         9b:09:92:92:36:33:82:dc:49:0e:9c:2a:aa:05:58:73:07:29:
         67:e1:16:f3:ed:3d:0f:cb:ba:e1:b9:22:d5:3d:db:b3:42:12:
         a1:f5:a7:ed:87:e1:fe:f9:0d:27:a0:1a:e0:7f:4d:60:9f:8a:
         89:ef:36:e3:c6:f7:49:b4:68:29:8a:5e:3f:d2:57:47:9e:2a:
         93:ce:28:d4:b7:58:b7:7b:a5:75:1e:5d:6a:c6:78:09:aa:1f:
         dc:be:ac:3f:bb:ea:3e:46:22:2e:c8:52:0f:17:6d:05:5d:19:
         96:a8:8c:71:f1:a4:a0:5c:34:87:b3:b4:5f:fa:e9:de:47:ec:
         80:32:f7:13:7d:ca:fc:94:a6:3a:82:68:b1:27:6b:92:fa:f5:
         a9:87:3f:4c:c4:53:1b:f3:92:30:c0:03:b6:47:bc:5b:14:12:
         46:83:f5:c5:70:18:2a:39:bf:e5:f1:59:0e:5c:24:14:1c:44:
         da:60:40:6d:cb:5d:65:d4:7f:78:bf:c0:91:77:b4:29:ad:4d:
         4e:a2:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:38 2025 by rpki-client