Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa
File:                     34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa (raw, json)
Hash identifier:          CpIrTYnxtrm4bFz02yTmlWLwXYd9hW54lDGHYgnEaJU=
Subject key identifier:   E8:FF:2A:E1:D8:25:97:F9:6C:CF:BE:63:BD:64:26:54:13:E9:9C:54
Certificate issuer:       /CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
Certificate serial:       17699B9C59417CD85B5676009632C74B54381D85
Authority key identifier: A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa
Signing time:             Mon 29 Jan 2024 20:00:01 +0000
ROA not before:           Mon 29 Jan 2024 19:55:01 +0000
ROA not after:            Mon 27 Jan 2025 20:00:01 +0000
asID:                     269192
IP address blocks:        45.181.148.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:69:9b:9c:59:41:7c:d8:5b:56:76:00:96:32:c7:4b:54:38:1d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
        Validity
            Not Before: Jan 29 19:55:01 2024 GMT
            Not After : Jan 27 20:00:01 2025 GMT
        Subject: CN=E8FF2AE1D82597F96CCFBE63BD64265413E99C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d4:bc:08:1d:5b:64:93:f3:87:62:a8:07:d3:
                    91:d4:e4:49:74:f8:3d:13:51:4d:88:28:a4:a5:ca:
                    76:48:bf:cb:04:d7:48:19:92:50:0e:f1:5c:d5:2b:
                    96:92:fe:36:82:82:38:00:49:d1:c0:06:b4:08:9d:
                    95:18:67:03:71:5a:d6:2d:14:06:1e:ab:e3:f6:e2:
                    d3:66:3c:3f:31:48:1e:b4:cd:d5:84:ee:68:86:47:
                    32:e6:29:41:03:df:76:e3:61:72:b9:a5:3f:2c:9f:
                    f4:83:a2:68:0f:5e:d6:63:e1:33:73:77:1b:97:9c:
                    a5:44:bd:59:90:2e:e1:36:8b:db:23:77:a6:e3:50:
                    7a:48:26:f6:e6:75:70:93:07:9c:46:0e:d6:6f:68:
                    ce:97:af:f6:fd:79:2c:a0:c7:25:e2:20:b4:2e:dd:
                    65:63:92:8b:58:11:ca:2f:21:71:5e:8d:d8:50:52:
                    7b:1f:74:31:0c:4d:fd:99:69:b5:02:61:58:79:9e:
                    9a:f3:ea:c6:f8:44:c3:eb:f4:b5:2d:b4:62:f3:87:
                    27:7c:88:66:7c:a2:9e:db:02:6c:c1:62:d9:b3:98:
                    ae:b5:11:34:2a:13:b5:a7:60:c5:61:77:e8:b3:69:
                    c2:03:47:28:09:35:b6:70:28:b0:88:17:13:1b:ee:
                    f7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FF:2A:E1:D8:25:97:F9:6C:CF:BE:63:BD:64:26:54:13:E9:9C:54
            X509v3 Authority Key Identifier:
                keyid:A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:53:8e:55:52:4a:a5:4d:88:1d:2f:02:23:6a:b5:c0:b1:f7:
         d4:28:1c:de:73:c8:8f:38:21:69:dd:44:43:a5:01:47:68:69:
         04:27:9e:b0:2a:d3:36:66:97:aa:67:f9:2d:07:3e:34:9e:20:
         ce:9e:21:21:e7:68:1e:5b:ce:f8:49:c0:f8:30:0f:5d:3e:4e:
         43:74:05:06:bb:1a:ba:a2:92:8b:1f:4e:dc:1a:be:a8:af:e4:
         db:aa:b7:01:ae:57:26:a0:13:41:6e:7c:f9:2f:36:09:12:e1:
         98:9a:af:d6:10:fe:09:e9:92:d6:79:3f:0b:89:0a:93:fb:07:
         29:ca:b8:10:79:1d:70:b8:6e:57:98:00:04:32:6b:5b:a7:a4:
         48:d6:6a:19:8e:8d:90:9d:ed:37:41:10:8b:f4:5d:96:df:bb:
         07:af:f9:99:12:db:da:7a:c8:d9:9f:b0:d9:b8:e0:0d:ab:7c:
         d9:34:93:81:15:fb:49:87:e8:5c:fc:39:7c:13:31:a5:92:f8:
         b5:8c:47:d4:3f:3c:93:94:7b:90:f3:9c:03:7a:cf:67:af:48:
         d4:05:32:ee:26:cc:10:f0:49:10:61:f1:80:13:f3:07:0f:fd:
         dc:73:52:c8:d8:bd:37:b1:0c:68:e4:9e:c1:91:ba:91:19:05:
         92:b5:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:09 2025 by rpki-client