Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31332e302f32342d3234203d3e20323638373739.roa
File:                     34352e3137322e31332e302f32342d3234203d3e20323638373739.roa (raw, json)
Hash identifier:          pMFbcx5l5eQDUqgFcvZ2wGd0S+r8C0hknFZ3VI9GLFs=
Subject key identifier:   28:EA:75:2E:52:FC:84:9E:99:2F:AD:B8:C8:06:2A:C7:03:91:B2:23
Certificate issuer:       /CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
Certificate serial:       583BE7705184E28F2718A14FF34C138CBC7E09E6
Authority key identifier: AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31332e302f32342d3234203d3e20323638373739.roa
Signing time:             Tue 02 Jan 2024 14:13:53 +0000
ROA not before:           Tue 02 Jan 2024 14:08:53 +0000
ROA not after:            Tue 31 Dec 2024 14:13:53 +0000
asID:                     268779
IP address blocks:        45.172.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3b:e7:70:51:84:e2:8f:27:18:a1:4f:f3:4c:13:8c:bc:7e:09:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
        Validity
            Not Before: Jan  2 14:08:53 2024 GMT
            Not After : Dec 31 14:13:53 2024 GMT
        Subject: CN=28EA752E52FC849E992FADB8C8062AC70391B223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:92:af:a7:f7:ab:78:5d:17:1c:53:64:75:
                    e7:c8:47:49:4e:fd:c0:59:95:5b:16:19:f9:59:54:
                    40:39:92:7e:a3:95:92:b3:64:10:69:de:2a:38:5a:
                    2a:35:24:3d:c3:45:50:09:1e:d9:59:37:66:22:d0:
                    55:01:83:a4:21:d1:31:35:36:b0:2c:2e:18:8b:58:
                    1a:93:8d:fe:06:d2:99:e3:8e:dc:d6:af:30:dc:ff:
                    64:74:68:67:90:13:b3:fb:b5:93:1b:13:ff:5a:37:
                    da:40:91:80:15:61:a7:55:f5:bc:9b:b5:fd:7d:81:
                    bb:57:c7:63:26:60:d8:eb:4b:c7:d2:76:89:b8:73:
                    10:ed:b1:e1:6e:3f:c1:fc:72:43:cf:b2:46:c5:c6:
                    87:36:55:b9:ab:fa:1b:7b:a4:c8:49:e7:16:33:b2:
                    fd:7b:56:3d:df:7d:63:18:98:d6:53:6b:ac:aa:9d:
                    31:3f:0a:cc:13:7d:8c:09:78:ea:fd:6b:41:b4:1e:
                    2d:ed:e4:7a:f4:ec:1a:46:74:31:eb:b4:10:24:a5:
                    66:b5:89:97:eb:a9:9e:95:63:97:65:43:0b:b6:43:
                    1a:d0:5e:81:a9:d6:91:f6:b5:f1:89:2d:96:f1:ba:
                    d4:a5:55:2d:46:22:e5:c9:12:24:3c:bb:f1:7d:93:
                    ea:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EA:75:2E:52:FC:84:9E:99:2F:AD:B8:C8:06:2A:C7:03:91:B2:23
            X509v3 Authority Key Identifier:
                keyid:AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31332e302f32342d3234203d3e20323638373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:b5:56:7f:1e:08:a7:b7:75:b2:4c:1a:f6:24:46:c5:fc:
         bf:c8:2e:cb:d7:c8:bf:54:90:79:a5:15:c6:21:03:60:a2:90:
         87:99:47:6e:2c:e3:5d:0a:57:35:01:6f:e5:70:18:95:25:f2:
         3e:39:6f:7f:85:45:e4:70:9e:c0:75:53:c2:c8:eb:07:d3:4a:
         67:fe:22:c5:2e:58:a2:c4:87:26:0d:1b:b7:ad:f3:e0:53:af:
         1f:88:c8:fa:77:d5:6f:6f:9c:c0:83:99:44:4f:a6:77:04:2b:
         dc:1e:4b:a0:93:d0:5a:b6:57:a3:68:d5:bf:9d:b3:bc:b0:e7:
         62:35:a2:c7:1e:5a:d3:a4:0b:cf:4f:92:f1:c7:a5:e4:88:8e:
         7a:57:38:1b:9b:49:ab:87:15:ac:ef:f1:78:19:f8:dd:cc:09:
         a6:29:c1:34:9d:d5:28:ef:84:36:6e:57:49:39:fe:7b:aa:6a:
         2d:3c:67:c9:fd:c3:f2:0e:a2:1b:d2:65:64:57:16:d0:8a:e7:
         97:cc:7f:9c:0b:a1:da:8a:33:d3:50:72:cf:6b:de:8a:d7:19:
         60:f5:f9:53:a3:70:75:55:d6:7e:e3:5f:de:59:e6:36:b0:f4:
         86:df:e6:5e:83:c4:5f:98:58:f4:fe:44:af:d3:54:a6:24:85:
         fd:f1:13:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:20:24 2025 by rpki-client