Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130312e302f32342d3234203d3e20323638303838.roa
File:                     34352e3136382e3130312e302f32342d3234203d3e20323638303838.roa (raw, json)
Hash identifier:          geaYO1HAHApxKczKPqGyzkdoWpctprJ/T8OI3STU/ww=
Subject key identifier:   BF:BE:C5:62:3C:A5:BC:E3:E3:97:5C:6E:E0:C7:B8:9D:E7:F8:08:6B
Certificate issuer:       /CN=94A3DB62B012EF07C9AFE1762646CC714080A576
Certificate serial:       628867C92E11E7C59C82DED9CE1925AA73482643
Authority key identifier: 94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130312e302f32342d3234203d3e20323638303838.roa
Signing time:             Fri 27 Oct 2023 15:56:53 +0000
ROA not before:           Fri 27 Oct 2023 15:51:53 +0000
ROA not after:            Fri 25 Oct 2024 15:56:53 +0000
asID:                     268088
IP address blocks:        45.168.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:88:67:c9:2e:11:e7:c5:9c:82:de:d9:ce:19:25:aa:73:48:26:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A3DB62B012EF07C9AFE1762646CC714080A576
        Validity
            Not Before: Oct 27 15:51:53 2023 GMT
            Not After : Oct 25 15:56:53 2024 GMT
        Subject: CN=BFBEC5623CA5BCE3E3975C6EE0C7B89DE7F8086B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:a4:df:73:53:3c:67:82:ef:32:9f:24:8e:
                    1b:69:6e:de:b9:b9:14:20:6f:a9:eb:c1:7f:d2:e0:
                    1e:43:73:23:4e:84:7a:45:51:41:20:44:53:90:5a:
                    d6:84:61:52:23:3c:af:b9:fc:15:a5:9e:5e:c8:97:
                    de:0f:54:62:8c:be:02:73:d8:d7:4e:f9:3c:8d:3a:
                    6f:ff:00:66:d9:5b:65:3f:c8:97:c3:99:f0:46:6c:
                    c5:4b:08:e7:95:72:6b:03:aa:37:ed:4f:c9:2a:ea:
                    9d:0a:88:69:69:0c:b3:b4:6e:c0:7f:c6:23:51:80:
                    20:73:41:44:4e:bc:d7:c5:04:ad:f5:58:75:fb:f5:
                    b9:0a:f6:e2:12:85:8b:d4:33:1a:bb:b0:62:05:0f:
                    f5:57:da:ff:bd:12:0a:13:db:9c:0f:c0:fe:0c:f6:
                    cc:aa:23:de:56:31:9d:38:f0:1d:9b:0b:7f:7f:d1:
                    98:a7:e2:e1:ab:a4:7f:3f:4d:56:47:1d:34:c9:c3:
                    41:6d:ff:83:cb:e5:d8:17:ad:4e:c4:54:08:29:5b:
                    6a:6e:5a:1a:e2:27:4b:d3:3e:e0:f2:b9:f8:5e:e1:
                    99:75:3a:79:c2:fb:af:3b:e4:a8:2c:4a:92:b3:1e:
                    f3:db:59:4a:96:2a:40:57:2c:8e:40:08:d5:3e:fe:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BE:C5:62:3C:A5:BC:E3:E3:97:5C:6E:E0:C7:B8:9D:E7:F8:08:6B
            X509v3 Authority Key Identifier:
                keyid:94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/94A3DB62B012EF07C9AFE1762646CC714080A576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130312e302f32342d3234203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:7b:e4:68:4c:22:de:f1:99:aa:09:97:64:ee:ec:ec:59:88:
         95:4b:dc:5b:cc:00:ca:b7:e5:c9:12:a7:e1:25:81:87:90:2a:
         ee:17:d9:d5:2e:fa:3b:16:0b:01:be:f0:be:af:bf:13:2b:a4:
         e0:dc:41:1f:fa:58:5f:fd:06:eb:ae:02:e1:80:eb:e0:6b:5f:
         1b:3a:33:21:e8:58:71:8f:84:5c:73:31:8b:55:6e:31:4f:41:
         53:d4:be:60:2f:ec:76:cd:34:84:93:1e:47:d4:b8:ed:41:bb:
         31:49:4a:2b:14:d0:2d:83:f2:40:87:61:53:5f:20:f3:6e:ee:
         4c:49:70:82:36:ab:f0:a2:d6:b9:97:f0:3e:71:00:60:66:dd:
         8d:79:cb:e4:7c:65:8e:da:48:d5:74:8e:c6:b5:c8:90:e1:1c:
         5f:65:e0:95:60:04:b6:5d:9a:01:6c:85:63:64:d7:db:ec:2b:
         e4:59:0c:34:af:5f:f7:7c:24:04:40:23:43:41:91:0d:8c:d1:
         3a:ac:17:bf:d2:ae:d0:d5:84:1e:e4:4d:7c:4e:93:37:f0:97:
         73:f3:e9:21:6d:ec:bb:50:04:31:b7:35:15:66:0a:78:d8:fa:
         f8:60:1b:3e:08:cb:7a:75:4b:fc:c4:fb:ec:20:d6:d9:fa:f6:
         00:d1:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:02 2025 by rpki-client