Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232362e302f32342d3234203d3e20323638323931.roa
File:                     34352e3233372e3232362e302f32342d3234203d3e20323638323931.roa (raw, json)
Hash identifier:          uOZFPwvTaWdVZ485lkBwj8PQlEn1MyOaYUm0xgzovJQ=
Subject key identifier:   10:B1:8E:95:F6:51:A3:2F:57:32:29:DB:6D:60:03:F7:A0:A1:7C:25
Certificate issuer:       /CN=280D14903D50E598F2992FA0F6A628B2C1FB24B4
Certificate serial:       0ECEB09E15A397B532482523141859DDF0DC0107
Authority key identifier: 28:0D:14:90:3D:50:E5:98:F2:99:2F:A0:F6:A6:28:B2:C1:FB:24:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232362e302f32342d3234203d3e20323638323931.roa
Signing time:             Wed 06 Sep 2023 12:39:02 +0000
ROA not before:           Wed 06 Sep 2023 12:34:02 +0000
ROA not after:            Wed 04 Sep 2024 12:39:02 +0000
asID:                     268291
IP address blocks:        45.237.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ce:b0:9e:15:a3:97:b5:32:48:25:23:14:18:59:dd:f0:dc:01:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280D14903D50E598F2992FA0F6A628B2C1FB24B4
        Validity
            Not Before: Sep  6 12:34:02 2023 GMT
            Not After : Sep  4 12:39:02 2024 GMT
        Subject: CN=10B18E95F651A32F573229DB6D6003F7A0A17C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:72:22:4a:a4:3b:f0:85:78:ca:8e:f8:75:6d:
                    f6:4c:17:ef:1f:2c:7b:c1:15:80:fe:38:8b:d7:1f:
                    07:51:db:bc:45:d9:1f:32:71:fc:d2:34:2f:4e:b6:
                    7c:a4:d6:e4:c9:a4:61:33:26:8d:49:64:b9:66:f7:
                    46:9c:88:a8:08:f9:fc:33:a4:39:fd:52:2e:99:22:
                    28:1b:e1:a3:bf:97:00:a3:b0:8e:13:3f:4c:e0:cc:
                    0e:ad:fa:1a:0b:63:b9:81:88:84:ad:71:8b:03:b7:
                    a0:35:72:e1:5e:91:2f:0a:05:87:f1:3e:f3:51:f2:
                    29:fa:69:97:86:b7:08:82:35:d9:3d:ed:28:95:e3:
                    3d:64:9c:c8:e0:5f:8b:e1:2f:07:15:f2:93:14:f5:
                    16:67:27:8b:46:9a:f4:9b:0b:e1:a2:d9:75:9f:fa:
                    64:70:19:e1:b9:15:dc:05:87:d3:5b:1b:27:77:30:
                    dc:f4:86:a1:13:7c:2e:c6:e3:b9:9a:f5:aa:0d:25:
                    42:3e:34:a1:8b:3f:2b:5d:d9:86:f9:a6:1b:c1:c1:
                    39:1e:86:65:b4:ab:b9:33:a0:7e:cc:c2:21:18:7c:
                    76:f8:2b:51:71:0c:e2:cf:1f:e4:aa:9c:9e:9d:90:
                    ab:95:ec:eb:6d:7c:c4:32:33:39:65:a1:15:c2:60:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B1:8E:95:F6:51:A3:2F:57:32:29:DB:6D:60:03:F7:A0:A1:7C:25
            X509v3 Authority Key Identifier:
                keyid:28:0D:14:90:3D:50:E5:98:F2:99:2F:A0:F6:A6:28:B2:C1:FB:24:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/280D14903D50E598F2992FA0F6A628B2C1FB24B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232362e302f32342d3234203d3e20323638323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:2a:8f:8f:bc:ec:94:32:91:62:0e:d7:6d:10:d4:1a:d0:4d:
         13:c0:ae:ab:f1:e4:9d:e5:33:49:df:17:aa:5d:f6:75:1c:7f:
         1a:3b:f2:07:9c:d8:9b:8d:8f:c2:4d:c0:9a:c8:78:bc:09:9c:
         38:f9:05:0e:10:ab:f8:68:63:06:05:2d:e1:28:1a:3d:fb:f1:
         5f:bd:90:80:d2:dc:87:3e:f4:fb:7c:db:95:9c:b4:73:22:ac:
         c2:0d:87:30:c5:c5:fe:35:07:5b:8e:54:3f:70:b8:81:3d:2c:
         6e:59:15:68:8d:d9:00:4b:45:0c:42:ef:e7:a8:2f:68:f0:2d:
         89:69:8b:56:b0:e6:f2:89:e8:1a:dc:95:54:28:a0:e6:c5:c0:
         5b:70:89:0b:70:ec:72:72:cc:b5:32:91:4a:1b:b6:ca:8c:dc:
         c0:ab:d4:9b:26:32:03:50:29:3d:05:80:10:86:8f:ee:74:a5:
         90:0b:19:15:65:1b:5b:58:e5:da:59:10:36:ba:9b:6c:a9:9b:
         e6:1f:ba:2b:40:b5:14:17:ef:65:0f:b9:29:a5:93:1a:f1:ee:
         24:b5:0e:cf:32:8f:1d:58:38:ce:87:61:57:43:e6:54:02:60:
         c4:cd:20:5b:77:ab:58:7c:c0:68:0a:64:d2:47:95:c7:30:04:
         6d:b9:b8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:14 2025 by rpki-client