Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/34352e3137362e32382e302f32322d3234203d3e20323638393237.roa
File:                     34352e3137362e32382e302f32322d3234203d3e20323638393237.roa (raw, json)
Hash identifier:          kAMKWjUUZc/njU1ugl7B0mZJijn39bP0XSjlDrygDCg=
Subject key identifier:   01:C9:45:E3:3C:4E:90:79:3B:BD:F1:84:75:69:E4:28:69:8D:7D:71
Certificate issuer:       /CN=9518DB67401F3F6D7340D8F2FF17FBE92644F4BC
Certificate serial:       26ED044B8DBA49E82E8FFB2A6D32EF75BB1BFE47
Authority key identifier: 95:18:DB:67:40:1F:3F:6D:73:40:D8:F2:FF:17:FB:E9:26:44:F4:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/34352e3137362e32382e302f32322d3234203d3e20323638393237.roa
Signing time:             Tue 04 Feb 2025 13:41:21 +0000
ROA not before:           Tue 04 Feb 2025 13:36:21 +0000
ROA not after:            Tue 03 Feb 2026 13:41:21 +0000
asID:                     268927
IP address blocks:        45.176.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ed:04:4b:8d:ba:49:e8:2e:8f:fb:2a:6d:32:ef:75:bb:1b:fe:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9518DB67401F3F6D7340D8F2FF17FBE92644F4BC
        Validity
            Not Before: Feb  4 13:36:21 2025 GMT
            Not After : Feb  3 13:41:21 2026 GMT
        Subject: CN=01C945E33C4E90793BBDF1847569E428698D7D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:05:7e:a1:1f:3c:82:04:90:5e:98:23:cf:
                    46:ca:3d:49:d9:0c:e6:e9:ca:f1:4c:be:1a:a5:9c:
                    4b:a1:75:9d:b4:af:0c:43:bf:89:ec:48:81:fc:ca:
                    b8:73:77:19:76:c0:15:4c:17:73:38:07:c8:cf:a4:
                    90:7f:1a:3b:3e:82:91:90:5d:cd:23:6b:f7:90:3c:
                    b0:c5:2a:95:64:e6:2b:17:81:9a:61:58:d4:0b:69:
                    0e:21:58:00:27:be:6a:e7:44:f5:d7:34:c8:b0:90:
                    09:0f:10:d2:bb:34:df:df:ed:f9:67:43:3d:57:a2:
                    6a:ba:d3:6e:bf:d6:dd:2d:d3:26:77:90:b2:5f:27:
                    58:be:c3:e6:1b:a8:56:6a:b5:55:b5:07:59:6a:52:
                    47:3c:a5:2c:6a:27:33:4d:ee:d1:e6:8f:ce:28:ce:
                    7b:ee:88:d4:d7:1f:c5:18:93:c5:c4:c5:2d:2f:d4:
                    0d:e7:be:d1:5e:c8:27:7e:b7:7b:dd:f1:80:78:80:
                    c4:b5:92:ca:50:87:8d:d2:74:0b:0c:43:bd:bf:cb:
                    86:c1:e8:28:dd:38:d1:0e:c6:bc:24:00:84:9f:1d:
                    e3:5c:59:12:6e:03:8e:83:d1:7b:2d:58:6e:0e:bb:
                    1b:8a:ab:b4:72:8a:dd:be:7f:59:4f:29:8e:d9:17:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C9:45:E3:3C:4E:90:79:3B:BD:F1:84:75:69:E4:28:69:8D:7D:71
            X509v3 Authority Key Identifier:
                keyid:95:18:DB:67:40:1F:3F:6D:73:40:D8:F2:FF:17:FB:E9:26:44:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/34352e3137362e32382e302f32322d3234203d3e20323638393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:10:27:43:52:36:19:93:03:68:9e:48:ca:e2:9c:2c:1e:e8:
         67:2d:63:8b:f1:16:19:a4:00:d7:ed:77:f7:34:dc:ed:3b:cb:
         89:d7:79:9a:42:03:22:2b:1f:76:3d:5a:59:83:3e:72:6b:5f:
         c2:a7:36:83:0a:7d:3b:55:52:c9:cc:bc:4a:0e:26:2f:63:81:
         1e:1a:05:c0:09:a2:d4:f6:02:0b:1d:87:66:05:cf:94:ba:29:
         09:14:ec:0f:13:58:9b:a8:03:c1:1d:00:89:df:93:c7:e0:51:
         bd:73:aa:6f:4b:e5:9a:e1:34:4d:d5:c5:37:c7:74:53:95:2b:
         ba:bf:b4:72:6a:b9:0d:82:c5:dd:57:85:da:d9:2d:47:93:47:
         fe:6b:4d:a9:9e:0b:2f:ed:df:4f:0b:c8:05:a7:34:f1:23:03:
         36:00:3b:23:33:38:75:0a:fb:c3:80:6c:2f:79:a5:48:67:06:
         52:e8:4d:40:e9:93:ec:5a:f2:98:b8:9c:0c:9d:a4:b3:4e:a6:
         72:75:db:1b:46:e3:33:a7:af:71:9f:8a:73:37:f5:a7:6b:c2:
         0f:84:d8:c9:20:8e:b4:f6:22:99:fa:ff:44:2d:b3:ec:40:fd:
         f6:8e:e6:38:4d:2b:41:27:67:24:4c:01:7d:99:c3:79:fa:9c:
         71:df:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:24 2025 by rpki-client