Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39392e302f32342d3234203d3e20323639333732.roa
File:                     34352e3138352e39392e302f32342d3234203d3e20323639333732.roa (raw, json)
Hash identifier:          wfYGmP1CBxOzN9n4aV2yV2ZwV0tJUMxej0jZHz8xGRg=
Subject key identifier:   09:C2:76:12:E6:51:01:87:80:53:6C:07:FD:FD:CB:A1:48:16:FF:35
Certificate issuer:       /CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
Certificate serial:       16A64F010FC0499709FAD13CB7DD3422AD1E9244
Authority key identifier: B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39392e302f32342d3234203d3e20323639333732.roa
Signing time:             Mon 18 Dec 2023 19:14:59 +0000
ROA not before:           Mon 18 Dec 2023 19:09:59 +0000
ROA not after:            Mon 16 Dec 2024 19:14:59 +0000
asID:                     269372
IP address blocks:        45.185.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a6:4f:01:0f:c0:49:97:09:fa:d1:3c:b7:dd:34:22:ad:1e:92:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
        Validity
            Not Before: Dec 18 19:09:59 2023 GMT
            Not After : Dec 16 19:14:59 2024 GMT
        Subject: CN=09C27612E651018780536C07FDFDCBA14816FF35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fc:c8:3b:55:f7:67:ac:00:d9:4c:35:9e:13:
                    7d:8e:08:3d:2b:43:30:70:f7:01:a8:23:1b:9e:8b:
                    15:21:ed:7d:c7:17:2a:f7:b7:73:8e:be:5d:a5:0f:
                    37:67:d3:f6:21:48:c8:75:84:ff:19:0c:36:57:96:
                    71:f2:af:a8:d9:8d:28:bc:2b:55:4b:75:e3:e9:a6:
                    a7:f5:d1:82:cc:ca:fd:bd:dd:d1:b5:5b:74:b2:d2:
                    4a:02:f4:2c:75:27:24:22:3e:b1:47:a5:a4:b6:61:
                    96:0b:86:24:c1:f1:ac:78:dc:96:7a:4e:a8:55:5e:
                    98:60:97:71:74:aa:e3:b8:63:22:ec:fa:8d:56:2e:
                    32:f9:fe:37:17:68:ec:3c:1e:0b:b4:f3:c5:d6:e6:
                    df:f5:2a:ab:80:ba:4d:f3:f5:94:2a:18:37:e0:4e:
                    35:0a:3f:32:80:0a:6a:e9:84:bc:f6:e2:c6:43:37:
                    54:41:fc:e7:d8:9e:1a:c9:ae:27:19:29:ed:7b:81:
                    2b:7b:45:ba:eb:32:a4:10:f5:79:b5:6c:67:bf:62:
                    a4:1f:29:1d:c8:19:db:31:4f:6f:a1:fe:ed:dd:41:
                    7a:48:2b:5d:9b:29:54:95:48:81:d9:84:11:84:91:
                    71:ca:06:be:c2:d3:7a:65:f8:df:e3:cf:ad:00:2b:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C2:76:12:E6:51:01:87:80:53:6C:07:FD:FD:CB:A1:48:16:FF:35
            X509v3 Authority Key Identifier:
                keyid:B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39392e302f32342d3234203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:79:29:64:1a:4f:06:9a:10:9e:80:d0:af:16:e0:49:23:12:
         68:7c:23:e0:42:99:f7:6d:8f:89:58:d5:bd:a2:b3:94:44:f0:
         d1:b5:88:3e:a5:ca:16:9d:2b:0a:78:41:58:d6:a9:64:85:7e:
         f5:49:49:3a:58:af:b6:c7:94:bf:df:f1:e9:03:58:3a:f9:af:
         9a:e8:23:2c:07:28:47:c1:d3:e6:f5:a2:0b:1b:95:f6:34:6d:
         d2:c0:9f:0c:ba:d7:f1:3b:16:b0:9e:5d:9c:73:b6:27:c1:72:
         69:ad:45:b3:2b:00:af:8d:6c:6d:b2:b9:a3:3c:f7:c6:6c:29:
         72:71:75:3f:85:d3:4f:75:5f:38:7e:a2:50:a8:57:10:97:62:
         fc:a8:93:e2:31:4f:f8:ab:3d:4b:14:7c:4f:83:2a:21:98:ab:
         ab:cf:e2:35:b0:c5:9e:3a:1c:2e:cb:86:9f:ba:dd:c5:5b:b8:
         11:52:93:39:5d:7d:51:8a:7d:cb:c1:fd:ca:98:fa:66:04:d5:
         ee:0a:13:21:e6:a0:f9:e2:2d:e1:a4:82:22:1a:cb:82:12:c8:
         de:a4:55:a4:25:ed:8a:ea:48:9a:bb:69:41:55:7f:94:9a:7d:
         99:a0:43:4d:96:25:e1:45:66:55:fe:ca:c3:15:40:01:57:e3:
         ae:c6:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:44 2025 by rpki-client