Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231342e302f32342d3234203d3e20323639323932.roa
File:                     34352e3138332e3231342e302f32342d3234203d3e20323639323932.roa (raw, json)
Hash identifier:          Kpu98ow6UyJ1i61zc8DAn1e2Hb3tOcmgB76/DdRnDfg=
Subject key identifier:   13:A6:C5:6F:B9:23:05:A1:EF:DA:3F:55:78:CE:0B:EF:B3:1D:2E:EF
Certificate issuer:       /CN=DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7
Certificate serial:       30B5F38211BC7DB3750F9237322EDAB0461137C3
Authority key identifier: DA:74:63:B0:6F:BF:78:6E:F5:A3:F0:4E:9A:D6:D9:3F:BF:28:5D:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231342e302f32342d3234203d3e20323639323932.roa
Signing time:             Sat 09 Dec 2023 15:26:38 +0000
ROA not before:           Sat 09 Dec 2023 15:21:38 +0000
ROA not after:            Sat 07 Dec 2024 15:26:38 +0000
asID:                     269292
IP address blocks:        45.183.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b5:f3:82:11:bc:7d:b3:75:0f:92:37:32:2e:da:b0:46:11:37:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7
        Validity
            Not Before: Dec  9 15:21:38 2023 GMT
            Not After : Dec  7 15:26:38 2024 GMT
        Subject: CN=13A6C56FB92305A1EFDA3F5578CE0BEFB31D2EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:47:ca:4d:09:03:2c:86:c8:fa:24:71:f9:
                    3a:cb:35:2d:61:83:b0:93:65:7a:36:c9:3c:21:6d:
                    e2:4a:d7:1e:fa:a1:85:d7:cc:c9:8f:d5:3e:20:0e:
                    8f:63:d0:3e:01:7a:44:ba:0a:82:2f:1e:fa:9a:21:
                    5e:f3:bf:30:14:84:50:0e:57:05:4e:4b:af:93:ca:
                    19:27:63:eb:3e:e4:83:9a:b7:d8:d9:85:d5:0a:47:
                    16:1d:7e:e8:95:27:a2:07:d4:c6:13:ca:74:c8:0a:
                    38:4c:04:5a:86:8a:4a:f9:29:c8:a2:cb:b8:8f:ec:
                    9d:80:a3:cc:8c:25:6a:54:f0:3d:75:c8:da:d6:2b:
                    f8:7e:0f:7b:c8:07:d6:c6:79:18:72:74:25:37:a4:
                    26:44:e5:92:b0:b0:4c:fe:5f:1e:51:9b:01:e1:24:
                    01:a5:f1:6d:67:39:71:21:b7:55:63:99:d0:b4:55:
                    4a:5b:1c:3e:b3:64:0d:d5:46:74:ef:01:7f:ff:b2:
                    52:73:96:fc:4c:3f:76:bc:46:9f:07:66:bc:50:c2:
                    5e:72:1f:87:7b:35:78:2c:a8:72:48:ea:c5:17:e9:
                    53:88:3e:b3:3a:8c:92:fa:d6:1d:3d:d3:d0:f8:2b:
                    09:77:95:5f:90:61:09:78:56:cb:7e:41:27:6e:62:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A6:C5:6F:B9:23:05:A1:EF:DA:3F:55:78:CE:0B:EF:B3:1D:2E:EF
            X509v3 Authority Key Identifier:
                keyid:DA:74:63:B0:6F:BF:78:6E:F5:A3:F0:4E:9A:D6:D9:3F:BF:28:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231342e302f32342d3234203d3e20323639323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:5a:2a:14:8a:a0:d1:24:03:8a:0e:db:bb:f0:67:9b:ab:
         9c:47:ba:da:8a:49:ea:bf:b1:38:2b:a1:ff:8b:49:60:b9:0e:
         ae:2c:71:eb:17:75:d9:1f:43:a3:05:85:07:75:56:10:8f:12:
         de:0e:91:10:43:d2:dd:47:34:c0:d6:97:94:50:4a:84:44:d6:
         4d:6b:e6:22:a0:c1:59:4d:31:5f:c4:80:3a:aa:c8:af:3c:7f:
         9b:b2:93:7b:5e:44:c5:23:5d:d8:9f:85:b2:98:78:ea:aa:9f:
         21:20:b7:a1:c3:c7:af:61:fa:c7:92:1f:61:49:03:96:0f:ba:
         7f:2f:18:1f:ee:fb:e4:89:20:ad:07:85:fa:5d:c0:99:8d:67:
         8e:48:91:ce:ce:e0:57:2c:59:f6:f9:22:27:b1:0a:7c:a3:04:
         8a:be:78:31:64:6d:17:10:b2:be:cb:c8:5b:34:9f:c5:68:e7:
         0c:73:69:4b:e6:09:0e:56:98:b8:45:13:be:61:46:0f:1b:c5:
         b1:a9:86:ad:08:84:0d:39:fc:21:05:a7:2d:ef:ab:f0:e9:f2:
         9b:85:e5:57:de:50:89:6e:83:0b:19:59:a1:08:6d:9a:03:d0:
         da:df:90:35:28:31:f0:b6:01:a8:45:2a:81:b2:72:2a:44:7b:
         27:64:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:56 2025 by rpki-client