Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/34352e3136302e3232382e302f32342d3234203d3e20323638343238.roa
File:                     34352e3136302e3232382e302f32342d3234203d3e20323638343238.roa (raw, json)
Hash identifier:          BWHrwVdhUunoGkXccLxOUBBscuwQpCJsrie9icOYD18=
Subject key identifier:   0A:67:6C:2A:D8:E6:43:BA:C2:1C:D6:A2:9B:1B:91:95:15:A5:C7:66
Certificate issuer:       /CN=262C6CE74C100A1483572424ADFDBC4537675C65
Certificate serial:       408EE184DEFDA1CDFC7443C7B7A5C2EA6A39FD2C
Authority key identifier: 26:2C:6C:E7:4C:10:0A:14:83:57:24:24:AD:FD:BC:45:37:67:5C:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/262C6CE74C100A1483572424ADFDBC4537675C65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/34352e3136302e3232382e302f32342d3234203d3e20323638343238.roa
Signing time:             Mon 10 Jul 2023 19:01:03 +0000
ROA not before:           Mon 10 Jul 2023 18:56:03 +0000
ROA not after:            Mon 08 Jul 2024 19:01:03 +0000
asID:                     268428
IP address blocks:        45.160.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8e:e1:84:de:fd:a1:cd:fc:74:43:c7:b7:a5:c2:ea:6a:39:fd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262C6CE74C100A1483572424ADFDBC4537675C65
        Validity
            Not Before: Jul 10 18:56:03 2023 GMT
            Not After : Jul  8 19:01:03 2024 GMT
        Subject: CN=0A676C2AD8E643BAC21CD6A29B1B919515A5C766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:3f:27:b4:e1:b5:2a:77:fe:77:ed:bc:a0:
                    17:8f:63:1c:23:39:a2:eb:cf:8c:81:1b:af:3c:6b:
                    5c:22:57:e0:15:26:c3:31:27:b4:e3:33:05:c0:f8:
                    75:e3:bf:4d:3e:f8:6b:e0:4f:9d:f0:f1:e0:1d:7a:
                    27:1c:f6:bb:21:ae:6e:5f:76:3b:3d:2a:8f:67:8f:
                    bc:0d:c7:0f:90:4f:fe:6c:c0:c6:bb:30:c3:04:f2:
                    db:84:ba:e8:16:04:72:0c:dd:07:40:13:66:d6:3e:
                    82:60:0d:36:c2:0e:23:6a:fa:23:be:6a:c0:58:77:
                    77:04:51:51:7d:44:cf:ef:1d:19:e0:91:83:ba:84:
                    54:8f:84:9c:c0:b4:7e:64:cd:ef:62:88:48:51:e1:
                    33:82:60:10:ab:78:9f:2f:71:86:9f:c4:69:40:a9:
                    fd:92:f1:af:e1:50:3b:98:01:3e:b3:8e:28:5f:01:
                    2c:03:36:0d:e2:34:65:bb:b7:96:f9:29:e7:db:44:
                    2a:5d:fb:04:98:82:3f:49:e5:f5:cf:9f:53:ec:74:
                    df:48:6e:38:b7:9b:53:b7:88:4d:ca:b7:7a:f0:0e:
                    b8:0e:90:24:3d:1a:73:56:6b:20:4e:39:d1:70:ef:
                    af:10:13:c4:83:25:30:f8:81:fe:6d:83:c6:64:5a:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:67:6C:2A:D8:E6:43:BA:C2:1C:D6:A2:9B:1B:91:95:15:A5:C7:66
            X509v3 Authority Key Identifier:
                keyid:26:2C:6C:E7:4C:10:0A:14:83:57:24:24:AD:FD:BC:45:37:67:5C:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/262C6CE74C100A1483572424ADFDBC4537675C65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/262C6CE74C100A1483572424ADFDBC4537675C65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/34352e3136302e3232382e302f32342d3234203d3e20323638343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:42:38:4d:80:07:52:97:7d:d6:90:f7:a9:8d:3a:4b:d3:f5:
         7b:2a:50:70:d1:00:3c:9c:58:f6:29:22:1e:ab:61:d7:89:f7:
         0a:c0:95:a2:cf:5a:cd:5d:ca:24:82:9b:cc:a2:60:66:84:de:
         d7:2c:44:46:4c:c4:ef:38:fa:72:e8:9a:76:aa:73:52:8e:30:
         b4:f8:b3:cf:08:8d:54:e8:ce:6a:9b:36:19:87:5c:3a:d3:e9:
         56:35:fc:33:9c:97:71:ba:b2:0d:d7:1d:51:7f:e1:2f:0f:5f:
         e5:23:dd:3d:48:5d:31:3d:28:4a:ac:c4:54:e3:29:fd:83:de:
         a3:29:12:5e:13:6c:9c:c7:a2:f1:a7:35:d1:62:e9:71:55:b3:
         9e:5a:7d:25:e1:b3:63:e8:6b:f8:b5:21:0d:70:a0:cb:55:52:
         02:54:10:a8:87:1d:a1:7c:8a:43:a2:dc:ba:a9:44:61:10:99:
         13:cc:04:c6:00:f0:28:49:fc:ef:95:1f:6b:40:fb:fc:de:71:
         fe:38:9a:e3:30:2f:01:3f:4b:1a:6d:6d:fd:cb:f8:ff:5c:85:
         63:a8:70:82:f8:c3:b5:bf:d5:0b:c5:79:8d:6a:86:8e:76:67:
         5a:14:a1:0d:87:dd:e0:f9:ea:1a:6a:eb:de:b1:a2:3e:08:df:
         74:67:20:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:15 2025 by rpki-client