Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31342e302f32342d3234203d3e20323638373739.roa
File:                     34352e3137322e31342e302f32342d3234203d3e20323638373739.roa (raw, json)
Hash identifier:          zxJKI+QTlZ4K1Dez3v/exYUZa6wFsynpDG5qRQJsmc4=
Subject key identifier:   7B:89:06:49:FB:14:AC:66:3C:5E:CA:97:CB:17:E8:51:23:CF:E2:9F
Certificate issuer:       /CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
Certificate serial:       572E9AFA78878B9F872DCF98029C0FD5C3E45610
Authority key identifier: AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31342e302f32342d3234203d3e20323638373739.roa
Signing time:             Tue 02 Jan 2024 14:13:54 +0000
ROA not before:           Tue 02 Jan 2024 14:08:54 +0000
ROA not after:            Tue 31 Dec 2024 14:13:54 +0000
asID:                     268779
IP address blocks:        45.172.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2e:9a:fa:78:87:8b:9f:87:2d:cf:98:02:9c:0f:d5:c3:e4:56:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
        Validity
            Not Before: Jan  2 14:08:54 2024 GMT
            Not After : Dec 31 14:13:54 2024 GMT
        Subject: CN=7B890649FB14AC663C5ECA97CB17E85123CFE29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cd:08:27:6a:ad:9b:fe:72:dc:34:0f:46:6a:
                    cb:c3:a2:94:7c:5f:ee:d8:0a:72:49:82:33:6f:b0:
                    63:01:8b:80:74:af:ba:8c:51:a4:55:70:a5:21:24:
                    ec:f5:2c:a3:06:19:57:22:8b:92:71:df:be:be:9f:
                    9e:5a:b0:bb:f0:2f:66:8f:23:74:0a:c4:9f:78:7f:
                    e3:1a:7b:d9:4f:07:cb:d7:09:42:63:74:c5:13:59:
                    1a:15:be:b7:38:e5:03:a1:40:08:e1:8b:ff:5f:a2:
                    94:c9:44:b0:fb:ff:e3:82:c2:e3:26:56:63:da:f9:
                    9f:a8:98:4d:f8:86:eb:f2:8b:d2:13:6a:0a:19:18:
                    63:33:2e:0c:ec:f6:a8:7b:92:66:4e:17:2a:cc:3f:
                    d8:5c:71:7d:1a:d4:4a:fe:35:04:0a:c1:08:49:3a:
                    97:94:b9:7b:1d:51:13:0d:91:55:be:a6:97:3d:a5:
                    27:4c:26:3c:0e:61:f3:7d:7a:f1:3e:83:5c:a3:f9:
                    66:a4:e4:66:d7:af:4a:8e:e2:b4:01:10:99:3f:b2:
                    1e:6d:71:6a:74:79:8a:57:c4:ef:f8:b7:71:a9:24:
                    b7:2e:92:cf:12:db:93:d9:e5:6a:4e:b1:62:06:8f:
                    54:88:ae:7d:f8:b3:72:dc:16:9c:bd:77:9d:14:cc:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:89:06:49:FB:14:AC:66:3C:5E:CA:97:CB:17:E8:51:23:CF:E2:9F
            X509v3 Authority Key Identifier:
                keyid:AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31342e302f32342d3234203d3e20323638373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:d9:f9:13:2b:07:a5:17:fe:9b:fb:d3:a8:95:91:1d:7d:a1:
         89:34:31:4f:24:2d:67:32:c8:e7:6e:3b:0e:f4:a8:26:b4:24:
         bd:fa:c7:fb:bc:36:04:b3:e4:8a:9b:ac:ed:96:58:9c:72:ac:
         9c:b7:6e:a5:e8:6b:13:4a:88:69:d0:ce:56:5c:a3:ed:82:29:
         64:37:51:64:59:6e:ce:ba:f1:82:c4:67:29:78:51:0b:06:df:
         35:7a:07:bd:a7:b0:51:d6:c0:6e:b6:f2:bd:eb:cd:d5:a9:55:
         7e:51:ff:6d:01:dd:02:32:db:d9:e4:6a:cd:42:ec:ce:b6:dc:
         4c:69:7e:ef:10:74:e2:ce:b0:2b:f9:a4:76:b9:14:74:a5:a1:
         6d:58:1d:b3:e0:13:c3:6c:c6:ca:c6:f5:26:b7:1b:92:73:ac:
         2c:d1:b3:ae:8e:2a:3f:8c:68:82:3a:7c:11:1c:a6:e4:14:de:
         16:16:9c:af:56:1e:69:bc:92:cd:b2:71:23:84:71:17:ca:d9:
         b0:af:94:85:c8:ba:bf:6e:88:d0:6e:b3:8a:b4:ff:ac:bc:a7:
         1a:1d:d5:a8:3a:f3:b3:51:57:2b:ae:a2:03:30:39:e8:d3:90:
         69:38:03:00:c1:4e:d6:54:1d:32:fb:93:9d:b3:f0:eb:85:6e:
         66:12:3a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:18 2025 by rpki-client