Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESzYZKiQf4F16rPX3DiUugBQqzrtxFouZoNGGY9qSGLu/0/34352e3137362e3130322e302f32342d3234203d3e20323638393838.roa
File:                     34352e3137362e3130322e302f32342d3234203d3e20323638393838.roa (raw, json)
Hash identifier:          llb4Bo5TqHAxCrHC+CJrXGZOn7ELwLRGW35muOByiEM=
Subject key identifier:   E9:53:3E:35:61:3C:39:4E:D9:53:D6:35:BC:BF:8C:12:CF:19:64:30
Certificate issuer:       /CN=E7B737CB43B5BAEB8028EE93AF3CDC2D3ABB0EDC
Certificate serial:       088E594C238CB4083B3004A891DBFEA773FEC30B
Authority key identifier: E7:B7:37:CB:43:B5:BA:EB:80:28:EE:93:AF:3C:DC:2D:3A:BB:0E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7B737CB43B5BAEB8028EE93AF3CDC2D3ABB0EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESzYZKiQf4F16rPX3DiUugBQqzrtxFouZoNGGY9qSGLu/0/34352e3137362e3130322e302f32342d3234203d3e20323638393838.roa
Signing time:             Sat 17 Feb 2024 14:54:47 +0000
ROA not before:           Sat 17 Feb 2024 14:49:47 +0000
ROA not after:            Sat 15 Feb 2025 14:54:47 +0000
asID:                     268988
IP address blocks:        45.176.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8e:59:4c:23:8c:b4:08:3b:30:04:a8:91:db:fe:a7:73:fe:c3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7B737CB43B5BAEB8028EE93AF3CDC2D3ABB0EDC
        Validity
            Not Before: Feb 17 14:49:47 2024 GMT
            Not After : Feb 15 14:54:47 2025 GMT
        Subject: CN=E9533E35613C394ED953D635BCBF8C12CF196430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:2e:3f:50:22:22:d5:84:c2:e2:33:a3:e0:
                    da:51:38:11:b8:d3:31:31:9d:5a:ae:64:e5:3a:6d:
                    aa:28:e5:a7:71:b8:18:07:a3:9b:b4:b5:18:6d:6c:
                    fb:e1:8d:ae:f2:4e:9d:94:64:0c:c0:2e:83:9a:cf:
                    06:cf:b8:42:31:b0:06:06:0c:b7:95:44:59:4b:72:
                    12:04:51:c1:77:2b:b7:62:44:81:71:39:3a:03:59:
                    d1:02:40:59:42:85:a6:d2:09:bb:02:e9:61:a6:31:
                    e3:0c:62:ed:1b:b0:cb:2f:32:83:24:9c:51:96:0e:
                    ae:68:1e:82:03:4e:76:95:15:26:98:2a:db:b0:2c:
                    bf:ce:2e:eb:33:58:52:6b:31:39:3c:53:3c:42:6d:
                    9b:e4:c1:9c:0c:c5:87:a6:1d:e9:34:b3:f7:ff:31:
                    a0:99:69:46:06:3d:44:44:00:90:da:f1:0c:d0:b9:
                    9e:f9:9c:b4:95:c0:6c:a7:1b:5f:b2:12:23:1c:3b:
                    15:cb:c4:72:57:86:1b:d5:3f:b2:a0:1a:c6:ef:68:
                    c6:0a:0c:99:d8:44:27:75:f3:81:12:c8:9b:11:20:
                    0b:1c:b3:9b:0a:0a:cb:07:a7:b2:41:4b:e1:0a:bb:
                    9b:99:0f:90:8f:88:b7:f9:20:66:de:05:30:5d:74:
                    a5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:53:3E:35:61:3C:39:4E:D9:53:D6:35:BC:BF:8C:12:CF:19:64:30
            X509v3 Authority Key Identifier:
                keyid:E7:B7:37:CB:43:B5:BA:EB:80:28:EE:93:AF:3C:DC:2D:3A:BB:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESzYZKiQf4F16rPX3DiUugBQqzrtxFouZoNGGY9qSGLu/0/E7B737CB43B5BAEB8028EE93AF3CDC2D3ABB0EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7B737CB43B5BAEB8028EE93AF3CDC2D3ABB0EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESzYZKiQf4F16rPX3DiUugBQqzrtxFouZoNGGY9qSGLu/0/34352e3137362e3130322e302f32342d3234203d3e20323638393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e6:e3:02:c9:f6:f6:73:af:11:af:92:0d:bc:c0:79:b2:c7:
         93:43:c4:db:b5:46:ea:8c:73:3c:cd:0f:a1:dc:ff:de:3a:e5:
         82:05:45:ad:da:a9:53:37:29:a5:c3:13:d8:c3:9d:e2:2f:d8:
         bf:20:d2:94:ab:29:3a:1f:4f:fc:dd:54:4f:b5:93:97:4e:27:
         9b:f4:e2:c3:60:6e:ba:74:f5:61:e2:22:76:34:ef:72:7c:49:
         80:de:a1:0c:5f:02:ca:55:d4:07:78:7d:d2:56:09:24:e4:1f:
         95:da:85:83:01:6b:c0:be:8d:07:1e:3d:6b:7e:a8:47:21:fc:
         fa:fe:26:12:5e:fa:68:a4:c2:04:db:7b:ad:55:cf:12:47:6e:
         ef:f2:79:48:22:24:fd:6e:5e:b9:ef:e5:1f:e5:47:41:31:1d:
         f7:4f:e0:65:b3:4a:87:43:52:b8:e3:0a:82:7a:cb:14:72:70:
         d9:d3:1b:01:16:19:40:55:b8:23:bd:22:ef:15:2b:f1:cb:a8:
         9f:10:db:e1:56:44:35:5c:bd:b9:b3:0e:30:2d:b4:7a:ab:51:
         aa:2e:3b:60:15:a3:b8:56:4f:c0:c2:37:55:1f:fd:42:98:e5:
         98:91:d4:ad:70:d7:24:60:1e:15:92:f1:71:16:e3:bc:7e:80:
         c2:c1:d5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:58:02 2025 by rpki-client