Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132372e302f32342d3332203d3e20323732363434.roa
File:                     34352e3137312e3132372e302f32342d3332203d3e20323732363434.roa (raw, json)
Hash identifier:          g7eouQKDxMWFqSNKmQLw2R5jtlezsjILD8nvyomNQ60=
Subject key identifier:   AC:FF:85:68:BC:DB:A9:03:40:28:4F:3C:7B:F2:DB:82:07:18:4B:83
Certificate issuer:       /CN=2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13
Certificate serial:       6A70F1F3BAE9DBC8C209E72C9CDE46AD7AFF5238
Authority key identifier: 2F:0F:D6:0A:E6:B3:DF:EB:9F:5B:8F:4B:E0:D2:75:5E:CA:2E:3F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132372e302f32342d3332203d3e20323732363434.roa
Signing time:             Wed 22 May 2024 21:52:26 +0000
ROA not before:           Wed 22 May 2024 21:47:26 +0000
ROA not after:            Wed 21 May 2025 21:52:26 +0000
asID:                     272644
IP address blocks:        45.171.127.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:70:f1:f3:ba:e9:db:c8:c2:09:e7:2c:9c:de:46:ad:7a:ff:52:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13
        Validity
            Not Before: May 22 21:47:26 2024 GMT
            Not After : May 21 21:52:26 2025 GMT
        Subject: CN=ACFF8568BCDBA90340284F3C7BF2DB8207184B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:cb:f6:f9:14:71:6f:e6:fd:c2:17:19:78:
                    87:3d:e8:b0:e5:d6:36:40:12:e8:df:32:10:f6:aa:
                    df:36:31:d6:a1:1a:d4:d5:6b:27:88:8e:bd:44:07:
                    62:0e:04:b5:b1:a0:b6:d6:be:e3:28:a8:45:60:cc:
                    74:20:9c:98:11:43:3c:f4:25:79:00:fb:48:7d:f2:
                    63:fa:04:4c:7a:aa:ed:32:da:81:38:b3:2a:3b:a7:
                    62:59:e5:97:f8:05:87:23:8b:1d:00:aa:5d:98:66:
                    58:03:f9:97:ba:4a:c4:e2:c2:98:b9:1e:6d:cc:15:
                    22:c6:cf:01:87:12:91:2c:21:a3:90:a6:f9:26:b2:
                    61:c8:e6:b4:e5:ad:d4:79:f6:ab:59:1d:e6:79:04:
                    58:2d:75:17:b0:c6:24:6e:5e:da:21:9c:79:bc:84:
                    88:ba:5a:6e:d2:f9:da:f0:67:46:a2:a5:36:e1:80:
                    55:fe:d9:c3:37:e9:bb:35:d3:41:7f:83:dd:51:31:
                    9f:83:08:1e:15:bd:36:6d:7f:8f:99:9e:3c:49:c0:
                    6d:63:10:6e:e3:8d:f4:ba:b8:8a:fc:e2:4d:e5:6d:
                    f8:0a:9b:05:14:d4:b9:1d:be:ba:38:c8:95:4d:62:
                    2b:69:e4:6b:33:d7:6c:fe:4c:c1:0b:2d:f3:ff:4f:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FF:85:68:BC:DB:A9:03:40:28:4F:3C:7B:F2:DB:82:07:18:4B:83
            X509v3 Authority Key Identifier:
                keyid:2F:0F:D6:0A:E6:B3:DF:EB:9F:5B:8F:4B:E0:D2:75:5E:CA:2E:3F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132372e302f32342d3332203d3e20323732363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:42:70:a4:34:c4:53:ec:4c:78:0c:1a:3a:3d:7a:18:33:62:
         6d:7d:2a:55:f9:76:55:44:ab:23:f4:f6:4a:d0:43:3e:cf:56:
         3e:ed:80:d2:d6:d8:df:a0:0f:5b:ac:2a:23:5e:1a:c6:fa:9a:
         e8:98:42:8d:1d:d6:96:c6:62:96:f7:a8:02:36:91:fb:ef:86:
         1d:88:9e:39:9f:75:d6:1d:30:3c:72:4d:7b:bb:ee:58:d7:58:
         8b:58:9e:e1:5a:9e:e6:23:9f:f8:98:4a:6d:30:ba:cd:0e:94:
         af:a6:8c:2f:41:16:48:33:f7:9e:6e:21:92:c1:14:6a:3e:fa:
         25:36:6e:65:65:d8:5b:83:15:48:e7:60:53:7e:b3:b1:31:fe:
         87:97:4c:b7:7c:5b:0e:1a:e3:b7:c6:f8:8e:13:c5:db:47:4a:
         c4:6a:cf:5f:6b:3e:ec:8e:0f:53:72:6f:9d:df:13:92:6f:4f:
         35:22:25:15:e5:c8:9e:46:e7:07:2c:d8:ef:b3:4c:6f:11:d9:
         33:a4:bc:5a:25:13:48:7f:18:47:7f:65:ee:5e:fa:e9:2c:fd:
         25:c9:5f:09:61:55:fa:57:3e:da:e1:f0:f8:dd:90:49:79:5c:
         01:48:58:9c:cc:40:53:7d:2f:c7:7b:0c:de:72:d6:61:89:28:
         d1:52:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:44 2025 by rpki-client