Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31342e302f32332d3233203d3e20323638373739.roa
File:                     34352e3137322e31342e302f32332d3233203d3e20323638373739.roa (raw, json)
Hash identifier:          jSf+a6eQwdCs0dD96StR74D4p2P2vg/d2A3o6BcRv8o=
Subject key identifier:   57:6C:4F:22:EE:4C:56:62:C2:64:A3:E6:B1:4E:92:10:1E:6E:C7:23
Certificate issuer:       /CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
Certificate serial:       4E88D2C08D0EFE7BAF7219F3F14F4DB61093A2FF
Authority key identifier: AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31342e302f32332d3233203d3e20323638373739.roa
Signing time:             Tue 02 Jan 2024 14:13:54 +0000
ROA not before:           Tue 02 Jan 2024 14:08:54 +0000
ROA not after:            Tue 31 Dec 2024 14:13:54 +0000
asID:                     268779
IP address blocks:        45.172.14.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:88:d2:c0:8d:0e:fe:7b:af:72:19:f3:f1:4f:4d:b6:10:93:a2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
        Validity
            Not Before: Jan  2 14:08:54 2024 GMT
            Not After : Dec 31 14:13:54 2024 GMT
        Subject: CN=576C4F22EE4C5662C264A3E6B14E92101E6EC723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:8e:12:41:19:1b:4c:e2:45:19:e2:ee:f0:
                    5d:86:9a:fc:62:3a:85:77:cf:2d:1b:e5:89:63:90:
                    3f:20:84:00:b5:74:27:46:f7:53:0d:d0:0e:c1:71:
                    a0:d8:f8:02:0e:24:60:5a:4c:ec:22:85:45:36:4a:
                    4c:92:80:1c:f0:4c:a5:52:94:0f:e6:be:77:b4:9b:
                    04:04:65:59:34:f7:05:6e:4c:77:2f:e4:36:4f:65:
                    55:79:a4:6b:0b:c1:17:9c:86:ad:3e:df:9a:6b:65:
                    28:50:8f:9e:2c:08:3d:8f:35:04:46:3c:27:98:e3:
                    1d:af:ff:05:6e:b0:26:fe:f9:99:87:28:04:40:4f:
                    6a:2a:53:0d:c3:ba:69:87:d6:94:4a:fe:54:5f:35:
                    4e:4e:ae:d6:80:03:fa:af:40:c3:8f:19:dc:72:d6:
                    e1:56:ea:92:1a:a9:c0:d8:de:db:ca:6f:87:c4:6c:
                    3b:e2:dc:b4:22:ea:21:30:56:16:82:8b:eb:d0:f1:
                    c3:a5:e3:11:5a:00:bd:8b:a3:ac:39:52:00:df:a8:
                    40:20:1e:05:9e:fb:75:c3:02:a0:c8:eb:59:21:b0:
                    75:c7:24:77:a7:9e:b1:0d:eb:61:b9:dc:92:41:96:
                    99:82:bd:f0:d9:06:df:ed:6b:58:8b:69:76:cf:b6:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6C:4F:22:EE:4C:56:62:C2:64:A3:E6:B1:4E:92:10:1E:6E:C7:23
            X509v3 Authority Key Identifier:
                keyid:AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31342e302f32332d3233203d3e20323638373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:35:16:27:82:00:30:50:aa:61:75:9d:d8:90:8d:70:61:e0:
         3f:57:68:29:21:d8:0f:6b:21:65:c2:6b:59:39:60:44:1c:45:
         5e:c3:4b:13:39:c6:6c:93:d8:34:a4:16:22:86:c7:0a:98:cd:
         77:30:1d:4a:ad:98:cf:50:8d:71:14:a5:69:e6:40:3b:3a:25:
         11:e1:35:97:72:d6:09:99:4f:f2:3e:85:f0:79:50:81:7d:63:
         8f:95:71:e6:25:a7:08:6b:7f:0a:29:11:f0:bf:37:29:69:c7:
         30:58:43:f7:96:da:21:d9:87:38:85:e8:81:e2:e8:7f:ac:d3:
         2a:e9:65:e4:ab:c6:f6:23:1a:af:0e:90:ea:73:61:c4:aa:43:
         56:92:4d:a6:e3:1e:06:fe:65:03:ec:f6:73:21:33:d1:fe:c2:
         80:b7:91:64:1c:55:af:0b:e8:98:3e:5a:77:15:e5:12:c9:a4:
         e0:f1:d1:3d:b9:e2:b3:3a:da:c5:ba:ba:2d:c3:73:91:31:d2:
         47:1c:de:7c:b9:4e:e1:bf:02:b6:a5:ad:e5:91:c0:1b:8a:ca:
         a0:9f:b9:4f:ef:da:9c:3f:f6:f5:d0:dd:ce:6e:f3:ac:9a:3b:
         35:03:3f:60:aa:f7:ee:cd:10:ed:fe:24:0f:f7:51:52:ea:0b:
         ce:e0:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:34:29 2025 by rpki-client