Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e302e302f32322d3232203d3e20323639353032.roa
File:                     34352e3138362e302e302f32322d3232203d3e20323639353032.roa (raw, json)
Hash identifier:          CY6f8EM1RO6LDOW/kFkGvKXR1wmtILmInL2YTNS83EI=
Subject key identifier:   C9:4F:E1:91:62:F3:4D:BD:DE:57:A0:88:15:3C:B2:8E:40:29:B3:C7
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       1916AFF7F3C70F6D24E1BC5DF147E0FF4E119A3B
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e302e302f32322d3232203d3e20323639353032.roa
Signing time:             Tue 22 Aug 2023 18:04:46 +0000
ROA not before:           Tue 22 Aug 2023 17:59:46 +0000
ROA not after:            Tue 20 Aug 2024 18:04:46 +0000
asID:                     269502
IP address blocks:        45.186.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:16:af:f7:f3:c7:0f:6d:24:e1:bc:5d:f1:47:e0:ff:4e:11:9a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Aug 22 17:59:46 2023 GMT
            Not After : Aug 20 18:04:46 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:5a:06:71:37:36:75:fc:a1:67:bf:c4:fb:
                    37:eb:49:4e:5a:22:bc:ec:27:4e:26:89:18:8a:f0:
                    fd:dc:af:89:74:1d:8a:d9:dc:4a:c1:40:5c:67:79:
                    84:89:4a:4d:a3:e6:25:6e:f1:70:86:32:64:60:6b:
                    c1:2a:6b:ca:dd:bb:af:00:44:35:5b:24:f2:64:ce:
                    16:38:06:00:9b:dc:9c:14:e6:1d:9b:86:5b:9d:4f:
                    7f:4b:0d:37:9c:e1:28:f1:3a:09:4d:46:d6:3a:b3:
                    96:9d:72:bf:0a:0d:74:d6:fb:fa:16:7e:da:2f:b7:
                    c2:b9:a3:af:df:d7:ce:f9:39:c8:b1:b5:ce:90:65:
                    46:c1:e4:30:46:13:08:e3:05:e1:16:d5:bc:65:59:
                    46:1f:5a:2a:4b:33:4d:0f:55:52:1e:7e:9d:f6:41:
                    f0:85:64:17:f7:74:bb:52:49:64:1c:01:3a:fe:1f:
                    67:6b:d9:bf:4b:9b:11:a0:25:93:37:5b:09:e2:bc:
                    f6:6f:b0:88:6f:a1:9b:24:55:7e:62:84:ab:50:ba:
                    60:4a:95:54:de:6f:2e:60:a5:96:73:48:43:9c:49:
                    55:8e:34:ba:aa:bb:eb:c8:8d:81:5a:dc:1e:06:24:
                    de:4a:25:44:6b:97:8a:83:fd:27:28:3e:c2:de:e4:
                    87:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4F:E1:91:62:F3:4D:BD:DE:57:A0:88:15:3C:B2:8E:40:29:B3:C7
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e302e302f32322d3232203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:97:50:a1:32:3d:74:1a:5a:9c:16:2b:a9:36:04:63:a0:
         69:bf:8b:32:b9:f9:e2:9a:21:bb:de:45:b7:24:52:60:1f:9c:
         59:e7:d0:66:7c:35:71:b3:74:2b:ef:1c:86:42:7e:2c:9b:6b:
         03:7d:61:b2:00:c2:6a:03:cd:11:70:95:a8:e6:5f:18:f7:65:
         98:c6:7f:5d:85:b3:14:70:a9:5b:d8:fc:c6:55:06:5a:c8:3a:
         f6:d7:53:bc:83:c3:17:a6:bf:e4:55:d8:f3:fa:85:3a:f2:44:
         5d:77:bb:e9:78:4f:e6:da:80:f8:dd:a8:11:1c:1b:b6:87:c3:
         53:11:96:98:5b:cd:bc:80:32:08:6e:a4:f3:bc:9c:ff:6e:bb:
         41:2d:e6:3c:66:b6:3b:8c:fc:2f:39:5c:62:97:91:c7:cb:29:
         3f:53:66:f9:35:5d:8c:82:a5:78:89:16:6a:9e:f0:1b:bc:1f:
         2e:44:67:f1:39:ad:94:52:16:fe:95:a8:e4:5a:f2:85:70:a4:
         ea:5b:96:f1:a6:c8:90:09:c3:b1:6d:a9:be:7d:ec:ea:3b:2f:
         fa:8d:33:dc:0b:0a:e4:49:d3:f5:21:0a:52:01:6b:43:06:5c:
         16:a1:25:08:b7:cc:82:28:3e:58:29:8d:2b:93:dc:07:39:ca:
         92:d4:05:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:00 2025 by rpki-client