Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39362e302f32332d3233203d3e20323639333732.roa
File:                     34352e3138352e39362e302f32332d3233203d3e20323639333732.roa (raw, json)
Hash identifier:          pi4JOMdbD36N6iSCLtEOqPxAzcvfZchdDMgkiprNjhE=
Subject key identifier:   88:9B:A8:38:EA:40:5E:9C:33:FF:5B:B2:1B:7D:D5:CA:8F:8A:A5:BC
Certificate issuer:       /CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
Certificate serial:       3AA4614D603B282DAF35EE392540EC121C834386
Authority key identifier: B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39362e302f32332d3233203d3e20323639333732.roa
Signing time:             Mon 18 Dec 2023 19:14:59 +0000
ROA not before:           Mon 18 Dec 2023 19:09:59 +0000
ROA not after:            Mon 16 Dec 2024 19:14:59 +0000
asID:                     269372
IP address blocks:        45.185.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a4:61:4d:60:3b:28:2d:af:35:ee:39:25:40:ec:12:1c:83:43:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
        Validity
            Not Before: Dec 18 19:09:59 2023 GMT
            Not After : Dec 16 19:14:59 2024 GMT
        Subject: CN=889BA838EA405E9C33FF5BB21B7DD5CA8F8AA5BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:82:f5:3c:5f:8d:65:71:c5:30:f2:c4:f3:
                    2a:6e:a5:74:ec:b9:b1:62:9a:6e:49:10:a9:2d:00:
                    48:9a:35:9d:2e:60:61:c2:3d:69:ce:7f:23:f6:75:
                    87:f9:b0:2f:84:f0:0f:d1:8f:fd:c6:bd:62:75:c3:
                    a9:51:00:30:0e:78:7e:e4:9e:e6:3c:78:0c:2d:6c:
                    bb:53:2b:90:2d:c0:4f:04:0e:27:a2:5a:81:dd:a5:
                    c5:98:22:db:17:02:0d:1c:91:f0:74:f6:9c:38:35:
                    59:88:1d:c0:86:e3:3f:ab:26:16:13:f9:20:21:45:
                    d2:43:35:a6:d0:71:65:0d:a2:11:dd:d8:bd:cd:fd:
                    90:06:6f:19:6d:dd:93:1b:b0:8f:16:61:ab:20:cc:
                    f2:60:07:58:28:0c:99:dc:b2:ec:0b:91:e7:c5:d9:
                    f3:39:eb:41:b2:50:6e:e7:bc:11:49:65:f0:8f:52:
                    d8:6f:93:58:ec:6e:28:82:d4:de:7a:f2:58:74:49:
                    d0:65:db:8e:cd:1f:40:1d:7e:f1:87:19:10:88:ac:
                    97:51:c2:f1:3e:da:1a:d0:c0:6b:ac:d9:a6:d3:f8:
                    90:61:23:8f:2c:be:e7:22:08:ef:39:bf:26:87:94:
                    34:91:73:18:6e:fd:b1:39:ba:e8:bc:7b:9e:56:54:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9B:A8:38:EA:40:5E:9C:33:FF:5B:B2:1B:7D:D5:CA:8F:8A:A5:BC
            X509v3 Authority Key Identifier:
                keyid:B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39362e302f32332d3233203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:4e:cd:5d:dd:64:25:07:ba:38:9e:90:75:81:f4:6d:8e:e2:
         9e:6b:8d:19:04:81:84:49:69:9b:a7:8e:d7:d9:70:be:f6:4d:
         bc:ce:9f:4a:53:ef:2b:69:a0:c6:0e:99:7c:cb:9a:ad:fa:e8:
         f4:02:7d:34:f6:98:e1:e1:75:a3:15:40:3a:97:fa:af:47:17:
         8c:07:3b:ad:37:29:29:fa:60:72:4c:24:4e:69:62:ac:1f:a6:
         39:9e:b6:cb:78:54:31:b9:35:60:08:bd:81:11:c8:4a:b7:eb:
         d2:e3:e9:ab:e0:f2:48:d9:5c:23:06:ab:8f:b8:24:97:d3:e0:
         a9:21:51:53:de:1e:33:e8:72:03:14:15:8a:fe:0f:8f:19:aa:
         17:80:43:35:8a:b2:33:9e:e1:4e:d8:6d:28:c6:75:e8:91:68:
         53:34:b7:f6:18:bd:de:7c:22:0a:5d:78:8e:10:ae:37:ee:26:
         96:11:b0:31:56:1a:da:84:2f:2a:67:9f:c4:02:16:fc:97:fc:
         e1:18:d7:6f:db:0c:a6:d6:20:70:a8:f9:f4:4c:11:c9:a4:83:
         83:cc:27:6a:fa:17:64:1d:83:3d:d6:e8:3a:f8:a1:97:9d:5c:
         25:38:ad:b6:bf:7c:61:13:51:0d:bf:83:30:cc:b9:95:4b:a2:
         5f:55:ea:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:14 2025 by rpki-client