Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/0/34352e3137332e34382e302f32322d3332203d3e20323638373933.roa
File:                     34352e3137332e34382e302f32322d3332203d3e20323638373933.roa (raw, json)
Hash identifier:          PCHfTBcaeJORtYOhRViURDYpAylNeqTdJ2Kwl0taoXE=
Subject key identifier:   24:15:7D:1B:93:25:23:79:F3:E3:4F:72:5E:9C:10:F8:13:3B:60:2E
Certificate issuer:       /CN=A8C8A12BAC95E84CB8A4E1A437B5BC564D508118
Certificate serial:       429227D8F89E6A9042942D8D53FFD60F3CA9A21B
Authority key identifier: A8:C8:A1:2B:AC:95:E8:4C:B8:A4:E1:A4:37:B5:BC:56:4D:50:81:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8C8A12BAC95E84CB8A4E1A437B5BC564D508118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/0/34352e3137332e34382e302f32322d3332203d3e20323638373933.roa
Signing time:             Mon 30 Jan 2023 18:08:01 +0000
ROA not before:           Mon 30 Jan 2023 18:03:01 +0000
ROA not after:            Mon 29 Jan 2024 18:08:01 +0000
asID:                     268793
IP address blocks:        45.173.48.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:92:27:d8:f8:9e:6a:90:42:94:2d:8d:53:ff:d6:0f:3c:a9:a2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C8A12BAC95E84CB8A4E1A437B5BC564D508118
        Validity
            Not Before: Jan 30 18:03:01 2023 GMT
            Not After : Jan 29 18:08:01 2024 GMT
        Subject: CN=24157D1B93252379F3E34F725E9C10F8133B602E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:c3:c4:0f:9b:46:25:a6:fe:eb:ff:b0:eb:
                    45:92:f0:c0:41:fd:b7:23:b9:82:57:45:97:fc:e6:
                    fb:a2:78:a5:45:ca:f5:b7:ee:6c:18:90:11:30:ba:
                    fc:3b:5f:4a:29:0e:0d:d5:22:41:06:2e:bb:c5:35:
                    09:b9:72:75:65:87:17:a8:94:f2:f3:72:94:41:40:
                    00:bb:49:82:01:20:a9:1e:5d:82:f0:e0:1c:8d:0d:
                    99:1c:72:95:55:f0:48:bf:b1:c5:3f:f0:b9:57:98:
                    7f:07:6a:45:c4:0a:fe:92:49:e6:74:8a:e2:83:41:
                    92:e9:45:fc:7b:c8:d6:b0:e9:4e:47:9c:65:36:89:
                    e4:27:65:ee:45:f8:d9:91:48:a9:36:f0:eb:ab:b5:
                    8e:66:77:b8:3b:69:d7:0f:b8:d7:c6:9e:0f:b6:68:
                    95:c4:b1:e5:f2:85:d7:7c:d2:24:08:0e:b6:43:80:
                    fc:c4:a0:26:ed:c0:63:6f:e7:6e:e8:8f:99:bb:1e:
                    96:29:4f:6f:d1:d1:bd:3b:0c:09:69:91:77:bf:44:
                    4f:ce:77:82:0c:ce:34:3b:1c:d8:94:a6:2f:bc:eb:
                    e7:4a:dd:24:ce:00:97:cb:96:a5:68:36:14:a3:81:
                    8c:05:ee:2e:03:57:b7:e7:69:e3:c1:36:ee:a1:99:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:15:7D:1B:93:25:23:79:F3:E3:4F:72:5E:9C:10:F8:13:3B:60:2E
            X509v3 Authority Key Identifier:
                keyid:A8:C8:A1:2B:AC:95:E8:4C:B8:A4:E1:A4:37:B5:BC:56:4D:50:81:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/0/A8C8A12BAC95E84CB8A4E1A437B5BC564D508118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8C8A12BAC95E84CB8A4E1A437B5BC564D508118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/0/34352e3137332e34382e302f32322d3332203d3e20323638373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:17:44:0f:59:d9:3b:0f:d4:63:6b:1b:93:2b:3c:eb:ea:27:
         3f:a1:fd:19:05:85:80:a1:e3:28:68:aa:40:da:32:4e:e9:a2:
         13:8f:a3:ad:34:01:00:cf:c5:99:3b:6a:a1:9f:1c:4b:22:98:
         b5:7f:6e:fa:5a:13:3c:a5:cf:fd:d8:e2:e9:90:db:49:bf:f6:
         1a:af:7d:31:22:da:03:44:8a:a3:de:e0:24:04:78:7e:1d:f4:
         cb:3d:d8:4e:b5:f7:9a:95:2e:e8:a7:f3:93:8d:fa:61:2e:83:
         ef:b2:0e:35:63:64:95:e5:53:ee:f4:dc:2e:6f:b2:36:63:be:
         ca:8a:e0:5c:fa:5f:52:9d:1e:09:2a:fa:43:e3:a6:31:74:af:
         13:c8:c2:67:fc:02:b9:45:ff:27:66:bd:ae:aa:d9:a5:7e:ba:
         2a:b8:f2:d9:65:97:aa:8b:e9:c2:af:5d:bc:1c:ae:e3:df:6f:
         57:27:7f:38:20:b8:a9:6f:50:7d:83:62:a1:91:80:f1:65:09:
         1d:67:03:02:93:26:48:ca:28:19:b1:4b:83:16:3d:47:23:8e:
         d9:33:79:ca:93:65:41:63:ff:a0:7e:3d:1d:33:63:b5:aa:1c:
         ce:aa:ff:bb:1a:91:5a:95:29:99:b6:9f:7e:7e:90:1d:d1:fa:
         00:13:93:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:25 2025 by rpki-client