Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/34352e3136302e3232392e302f32342d3234203d3e20323638343238.roa
File:                     34352e3136302e3232392e302f32342d3234203d3e20323638343238.roa (raw, json)
Hash identifier:          jMhQSu2fE2PLTyOQsUXtbk4DX4v/zHR+l6D41kiGC3M=
Subject key identifier:   25:A1:C3:EC:06:21:4E:42:B2:9D:46:9D:B8:4F:30:56:2D:B1:2F:04
Certificate issuer:       /CN=262C6CE74C100A1483572424ADFDBC4537675C65
Certificate serial:       6E18BF6B2561B5B7486FDE3A9E678D37D8DE901E
Authority key identifier: 26:2C:6C:E7:4C:10:0A:14:83:57:24:24:AD:FD:BC:45:37:67:5C:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/262C6CE74C100A1483572424ADFDBC4537675C65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/34352e3136302e3232392e302f32342d3234203d3e20323638343238.roa
Signing time:             Mon 10 Jul 2023 19:01:17 +0000
ROA not before:           Mon 10 Jul 2023 18:56:17 +0000
ROA not after:            Mon 08 Jul 2024 19:01:17 +0000
asID:                     268428
IP address blocks:        45.160.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:18:bf:6b:25:61:b5:b7:48:6f:de:3a:9e:67:8d:37:d8:de:90:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262C6CE74C100A1483572424ADFDBC4537675C65
        Validity
            Not Before: Jul 10 18:56:17 2023 GMT
            Not After : Jul  8 19:01:17 2024 GMT
        Subject: CN=25A1C3EC06214E42B29D469DB84F30562DB12F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:f6:79:1b:54:d1:de:89:23:96:14:71:10:
                    b4:22:3c:c8:9f:64:ec:3f:ad:bd:2d:eb:e3:2c:a3:
                    bc:0f:36:51:61:92:28:d5:b0:c0:a9:da:5b:25:5a:
                    5b:96:ef:21:d3:b8:55:52:79:aa:b8:9d:bc:e0:81:
                    d1:6f:79:b2:e0:d4:40:c3:a9:05:74:3a:18:14:ff:
                    12:3c:c2:f1:f9:00:1c:41:cf:8c:70:c6:f4:4c:34:
                    15:68:aa:cf:86:1e:08:4d:30:df:d2:9d:72:e4:2d:
                    a7:37:fb:41:f7:ec:07:d7:d3:90:60:a6:a1:8f:d7:
                    3d:34:75:8c:8a:31:e9:e0:fd:b0:73:02:96:ba:0b:
                    1d:af:d4:af:96:17:0a:54:f2:72:31:91:1c:1a:dc:
                    2b:58:4b:01:3a:5d:29:02:5b:d5:c0:72:52:44:09:
                    bd:b6:9a:fb:c3:06:9f:c9:cb:01:59:db:54:78:cf:
                    d7:f7:46:a4:67:d8:82:3d:33:dc:73:34:a2:e4:2d:
                    a0:a8:ac:c8:31:9f:83:0a:da:59:8f:a3:c7:94:40:
                    e5:c6:3c:f7:13:e2:79:ba:66:02:44:8f:87:9c:37:
                    64:8e:17:44:12:66:4f:e7:8b:be:33:c1:a7:14:3d:
                    46:d3:e3:c7:62:b1:5c:a1:8e:72:0b:89:c0:d1:34:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A1:C3:EC:06:21:4E:42:B2:9D:46:9D:B8:4F:30:56:2D:B1:2F:04
            X509v3 Authority Key Identifier:
                keyid:26:2C:6C:E7:4C:10:0A:14:83:57:24:24:AD:FD:BC:45:37:67:5C:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/262C6CE74C100A1483572424ADFDBC4537675C65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/262C6CE74C100A1483572424ADFDBC4537675C65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/34352e3136302e3232392e302f32342d3234203d3e20323638343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:be:5f:89:02:f6:c9:68:44:4a:59:04:fc:a5:2f:43:7e:5e:
         aa:ff:6b:dd:4f:44:f9:42:19:47:b1:2b:09:5e:56:36:59:d1:
         fd:29:50:d9:fd:14:54:63:62:f8:b2:18:09:84:69:4d:3c:f6:
         28:02:a8:d6:7c:d1:1f:6f:0e:55:9e:4f:c6:f8:88:d2:41:b7:
         a0:bd:70:99:6f:cd:68:1d:73:d1:88:17:3b:ca:6f:6a:cb:17:
         64:3f:e0:7f:1e:7c:7c:80:3c:d3:31:f6:95:9f:a6:53:6e:e8:
         e7:ee:7b:cf:30:a3:e8:8c:06:66:39:a2:53:7c:9a:d3:53:6f:
         26:93:20:64:36:de:46:67:ff:e6:74:7f:19:53:ea:db:4a:d0:
         c8:e4:17:d9:19:6c:14:8f:b9:d2:23:7f:3f:24:ec:4d:e0:57:
         64:c1:7a:57:7d:ad:8f:5d:0e:81:4f:13:0d:4d:a5:50:62:54:
         c3:e2:b2:d5:83:b0:6b:87:bd:3e:87:60:20:3c:53:40:8c:0b:
         b9:5d:f0:0d:24:de:41:cf:31:f3:19:72:fd:20:d6:11:d1:8f:
         55:0a:39:72:c3:e4:64:2f:f1:d4:88:6c:c8:2b:b4:a9:25:67:
         83:76:15:be:30:8b:9b:62:b1:78:c5:f2:c0:8c:5c:79:22:d3:
         af:0c:0c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:51 2025 by rpki-client