Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3138382e302f32332d3233203d3e20323637393837.roa
File:                     34352e3136362e3138382e302f32332d3233203d3e20323637393837.roa (raw, json)
Hash identifier:          FCOvMECu4+NWsE6YAhtQMs5oZM+A+1/KUyB4LN7eZm8=
Subject key identifier:   60:55:22:54:10:FF:6C:04:5B:B5:04:4D:AD:A4:C4:36:3A:BF:DD:59
Certificate issuer:       /CN=13520DAFF407052F1C2BFBEFFD2ED8571B8C2073
Certificate serial:       2121E52EE47210DEAB973619E6817CBA144D0EBE
Authority key identifier: 13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3138382e302f32332d3233203d3e20323637393837.roa
Signing time:             Thu 15 Feb 2024 20:47:08 +0000
ROA not before:           Thu 15 Feb 2024 20:42:08 +0000
ROA not after:            Thu 13 Feb 2025 20:47:08 +0000
asID:                     267987
IP address blocks:        45.166.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:21:e5:2e:e4:72:10:de:ab:97:36:19:e6:81:7c:ba:14:4d:0e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13520DAFF407052F1C2BFBEFFD2ED8571B8C2073
        Validity
            Not Before: Feb 15 20:42:08 2024 GMT
            Not After : Feb 13 20:47:08 2025 GMT
        Subject: CN=6055225410FF6C045BB5044DADA4C4363ABFDD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:d1:c9:15:6c:f0:11:b3:f3:5f:33:58:25:
                    a5:b7:eb:85:ad:20:ff:aa:c3:a1:e8:a6:c1:9b:44:
                    0f:a5:ce:95:65:bc:cc:f8:bc:3d:a1:ce:7b:a7:ac:
                    62:d3:30:6c:9e:68:86:35:0d:85:f5:3b:f0:3d:17:
                    ce:df:e5:65:e2:0e:48:c0:e1:80:9b:5f:ed:99:e7:
                    c0:7a:61:7f:10:90:3c:9a:1e:c1:b0:c6:43:1c:30:
                    f5:05:e7:68:71:00:5b:3f:09:72:fd:b2:60:53:dc:
                    92:54:13:d2:ca:1f:bf:7d:c3:78:b8:a1:e8:23:ac:
                    10:62:c8:ec:40:9b:13:db:d4:10:ae:5b:2a:7c:61:
                    4a:90:0d:8c:15:e4:a7:e6:43:e1:4a:b2:ce:a0:6b:
                    1b:35:6c:8a:01:cf:10:3d:0c:d6:77:74:02:35:94:
                    d9:1f:3f:3e:e1:11:da:37:08:ad:95:4d:c4:8a:34:
                    86:35:08:40:df:c0:65:56:dd:80:d9:76:ac:a2:a7:
                    ad:61:c9:32:ca:13:c5:a8:7f:32:ea:49:2c:5c:12:
                    55:a8:ce:5b:98:71:93:26:1b:21:c5:b1:78:ac:63:
                    6c:05:95:a3:36:07:17:76:46:ee:1e:ff:2f:96:db:
                    44:ab:a4:a7:c1:be:16:d2:f2:1f:a7:8c:b7:b7:46:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:55:22:54:10:FF:6C:04:5B:B5:04:4D:AD:A4:C4:36:3A:BF:DD:59
            X509v3 Authority Key Identifier:
                keyid:13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3138382e302f32332d3233203d3e20323637393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:d0:97:30:b6:18:63:21:d6:5b:fe:38:33:e7:7a:6b:bc:3e:
         08:57:a0:a1:41:45:42:e6:16:e8:a6:34:c5:d8:e7:47:d1:ce:
         93:c9:b6:c1:c7:b0:40:6b:38:ee:52:cd:7a:2f:79:e0:a7:08:
         ed:1d:e6:ec:2a:f2:fa:fa:c0:b8:95:ed:ae:de:9d:5a:f0:e7:
         ac:de:21:94:d0:47:e3:3d:90:3e:24:38:26:01:0e:57:00:bd:
         f0:a1:60:04:3d:6a:97:24:96:60:e0:57:04:79:aa:c7:e1:65:
         56:88:f2:d8:85:ee:03:49:8b:be:3c:79:bf:92:e4:58:da:53:
         19:1a:97:eb:71:5c:6f:32:8f:fa:a6:ee:c2:47:30:36:5c:0d:
         c0:e4:0f:bb:b2:f8:99:d9:6d:da:4e:92:f5:06:05:45:01:9b:
         8a:08:45:98:3d:65:62:b6:f0:e7:1a:36:8c:98:70:6d:ba:a8:
         11:5e:c9:60:aa:ed:bc:19:96:98:4e:f4:20:43:c3:9f:f1:cf:
         9d:95:e1:c3:9a:a5:a9:c0:e3:cc:06:a7:26:35:5e:77:26:ee:
         55:9e:ee:8e:17:39:f7:61:0c:0b:53:a5:f8:b3:ba:56:c7:c0:
         8b:cd:38:34:0e:d0:80:76:08:3b:e3:5a:30:ca:84:af:a3:a1:
         57:3c:c8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:02 2025 by rpki-client