Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37362e302f32342d3234203d3e20323639373030.roa
File:                     34352e3139312e37362e302f32342d3234203d3e20323639373030.roa (raw, json)
Hash identifier:          ajkiJWuOU/pI8XjY+V6e5KsN9Z9CbB73/TUbcpJo8og=
Subject key identifier:   56:1B:75:9F:79:58:66:84:A4:66:C9:00:5C:BA:14:07:CE:9C:91:EF
Certificate issuer:       /CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
Certificate serial:       12631BD6E88FEC855254C152FE7376EA0E7B7FB2
Authority key identifier: F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37362e302f32342d3234203d3e20323639373030.roa
Signing time:             Sat 07 Oct 2023 18:00:00 +0000
ROA not before:           Sat 07 Oct 2023 17:55:00 +0000
ROA not after:            Sat 05 Oct 2024 18:00:00 +0000
asID:                     269700
IP address blocks:        45.191.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:63:1b:d6:e8:8f:ec:85:52:54:c1:52:fe:73:76:ea:0e:7b:7f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
        Validity
            Not Before: Oct  7 17:55:00 2023 GMT
            Not After : Oct  5 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:92:35:81:28:36:64:a0:42:d1:75:6a:81:89:
                    8c:e6:4d:58:47:80:ff:8f:19:b1:15:2f:9a:38:f4:
                    72:ae:42:55:90:e3:44:46:fc:6f:09:d8:b8:fd:44:
                    46:c2:fb:4e:af:80:9f:d5:75:c5:d4:a9:f2:1a:eb:
                    71:f6:5a:4d:f3:d2:70:27:cb:89:96:ec:79:11:19:
                    fa:35:0b:0a:bb:a5:fb:4e:c2:00:28:86:6d:4f:1e:
                    e0:d5:b6:83:d5:4e:29:b8:7c:21:1e:ec:80:72:d0:
                    ec:42:62:92:70:cc:28:c7:7e:76:7f:9c:b1:eb:ec:
                    a0:69:21:13:d9:68:87:dd:87:e9:5f:6e:69:75:3c:
                    dd:0d:0b:73:71:0a:a7:25:15:f7:98:10:79:cb:48:
                    77:b5:83:77:ad:5b:d7:28:d6:f2:12:f4:ee:75:15:
                    74:dc:7a:b5:e7:d8:d1:e7:e0:e6:76:10:c0:06:4f:
                    d9:37:21:3b:c3:a8:09:54:a6:0b:60:7e:73:ce:8e:
                    45:54:29:99:30:ea:d6:41:2d:7b:b4:7a:5f:7a:a2:
                    79:79:95:ef:b4:86:22:dc:d5:46:28:66:b7:66:ad:
                    5b:cc:56:8f:48:4e:b7:85:1a:f2:1f:1b:e6:ab:49:
                    3d:8a:1e:d1:5e:b4:3c:71:66:ce:75:db:7e:f6:dd:
                    59:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1B:75:9F:79:58:66:84:A4:66:C9:00:5C:BA:14:07:CE:9C:91:EF
            X509v3 Authority Key Identifier:
                keyid:F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37362e302f32342d3234203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:81:da:5f:f0:8a:a2:fc:38:c9:b5:af:ed:90:b0:89:1e:c3:
         7f:86:18:7d:4a:a8:4b:f6:66:a3:38:66:25:03:0d:4a:60:64:
         88:4e:1b:0b:58:bc:e5:a7:4a:b9:37:99:ed:d3:3b:5c:44:33:
         d3:8e:61:21:12:12:0f:70:70:bc:25:b8:31:7c:b1:c3:8d:36:
         c2:4c:83:6f:4c:3f:4f:e4:f3:8a:a6:7d:e6:1f:2a:28:81:f9:
         e4:6b:46:8f:70:4b:a0:e4:6a:aa:ca:70:51:37:f5:e6:8b:43:
         dd:41:ad:20:13:f8:48:cd:ee:4a:e6:b5:28:8c:64:a4:2c:bd:
         6f:8f:a6:a1:a2:eb:fa:32:b6:b5:14:2c:db:81:a0:81:a8:53:
         d6:88:12:00:47:3a:63:41:ab:a4:a3:81:84:dc:90:ca:25:87:
         7f:1b:7e:4a:2a:5c:1b:ff:20:0d:57:be:8f:f6:34:a8:c0:92:
         73:b6:b3:61:42:ac:11:05:5d:1f:38:01:9d:b2:31:ed:e7:e6:
         e1:a7:3b:d2:94:46:c7:6f:75:0a:ce:bb:93:3f:9e:b0:7b:64:
         c3:02:59:78:9b:88:70:f9:93:e1:b0:0b:16:ad:0b:e0:bb:68:
         c1:22:56:18:b7:da:c4:18:5d:9c:a3:ce:2c:a4:2c:ca:9c:03:
         9f:34:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:39 2025 by rpki-client