Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/34352e3136322e32342e302f32342d3234203d3e20323638353235.roa
File:                     34352e3136322e32342e302f32342d3234203d3e20323638353235.roa (raw, json)
Hash identifier:          yk8tSyDE+GoAaJAm0kqh9P7+0Jtio0AcWFTPzZUsQKk=
Subject key identifier:   8F:E3:AE:74:C4:DE:4D:F7:66:4E:85:9C:CF:5E:24:AF:4B:27:74:34
Certificate issuer:       /CN=45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E
Certificate serial:       208677204AC2F816506A88529BEC37E2D811F2F2
Authority key identifier: 45:E5:1F:7A:FA:B4:62:AF:21:B2:4B:AF:B1:AA:33:B0:83:E3:DC:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/34352e3136322e32342e302f32342d3234203d3e20323638353235.roa
Signing time:             Tue 23 May 2023 16:40:00 +0000
ROA not before:           Tue 23 May 2023 16:35:00 +0000
ROA not after:            Tue 21 May 2024 16:40:00 +0000
asID:                     268525
IP address blocks:        45.162.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:86:77:20:4a:c2:f8:16:50:6a:88:52:9b:ec:37:e2:d8:11:f2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E
        Validity
            Not Before: May 23 16:35:00 2023 GMT
            Not After : May 21 16:40:00 2024 GMT
        Subject: CN=8FE3AE74C4DE4DF7664E859CCF5E24AF4B277434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:ec:3f:b1:b2:0c:ac:da:02:63:af:dd:98:
                    67:1e:2b:21:2d:d6:0e:a1:c0:7b:0b:8c:98:82:a8:
                    91:8b:00:d8:86:81:a7:d0:7e:82:dc:6b:8b:8d:f0:
                    18:0b:94:c9:e8:65:78:cb:0d:25:a1:e6:ab:0f:33:
                    df:df:97:a9:f4:1b:2d:55:2c:dd:32:e5:dc:60:a2:
                    ca:87:31:8f:4c:94:1d:88:a0:8c:eb:86:bc:99:43:
                    bc:3b:3d:46:aa:7e:5c:4f:1f:9a:0c:0c:2a:b8:c9:
                    a6:54:6c:3a:b6:99:c4:11:23:2e:bd:45:8f:5c:53:
                    82:07:3e:7d:e4:9b:6b:d1:b0:ea:88:a6:98:e6:a1:
                    d8:4b:48:c4:af:da:5f:05:62:00:d9:ed:f6:e9:5a:
                    cb:a7:b9:bc:b6:a4:d6:4a:a3:07:c0:25:79:19:1a:
                    16:8d:61:10:a9:69:20:e5:59:c8:ff:fc:b6:d4:f0:
                    11:54:05:37:8f:9a:25:b1:e2:32:c6:48:c8:0c:77:
                    6a:ab:af:0c:5b:b7:28:fe:32:2d:3e:5f:ce:67:11:
                    8c:9c:47:a5:59:f7:2c:57:ea:47:52:4c:67:74:02:
                    1d:75:16:b0:4d:6b:c7:cb:e4:f0:cf:c9:7b:a6:de:
                    ce:a2:a0:56:01:96:94:69:2d:53:fc:20:ba:53:88:
                    4f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E3:AE:74:C4:DE:4D:F7:66:4E:85:9C:CF:5E:24:AF:4B:27:74:34
            X509v3 Authority Key Identifier:
                keyid:45:E5:1F:7A:FA:B4:62:AF:21:B2:4B:AF:B1:AA:33:B0:83:E3:DC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/34352e3136322e32342e302f32342d3234203d3e20323638353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:0f:3d:83:19:83:75:1e:2d:e0:00:85:81:22:e6:a0:8d:
         03:3f:19:2a:dc:e7:5b:f0:44:c4:81:bc:de:95:e8:74:80:eb:
         39:86:34:1f:12:7c:3e:3a:bc:d4:ec:a9:0b:12:42:67:d6:6e:
         a5:c0:93:f5:dc:bf:f1:09:df:b3:0f:63:23:7c:65:12:5f:74:
         e0:01:c4:70:0d:30:8c:cb:1d:5a:d9:a8:f7:22:2f:86:0c:34:
         f3:65:af:41:f3:60:1a:70:44:4e:04:56:36:81:69:c8:12:ca:
         0d:0d:ed:65:5a:64:b2:2c:8a:ef:59:48:cd:cd:9b:d2:d9:fc:
         60:7f:27:19:99:f5:98:85:d4:30:af:ee:d4:da:85:69:f3:40:
         09:69:02:61:08:09:e7:69:47:4f:a2:01:21:dc:4c:2f:a1:9d:
         53:09:7d:56:7d:fc:ec:1f:3a:14:e9:e6:15:4e:c8:f1:b3:77:
         c6:5c:f3:c8:03:a4:6a:d8:e8:3d:a4:48:03:f7:3c:a7:4f:37:
         8e:42:2a:3a:d5:a3:d4:78:be:4c:81:7d:9d:8d:be:8c:9c:cb:
         eb:df:a9:41:14:38:90:dd:59:dd:6f:fe:58:74:10:a8:2e:f8:
         cf:ab:31:69:37:dc:62:2d:ed:7c:05:bd:f9:c6:07:dc:d5:44:
         3b:a7:41:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:36 2025 by rpki-client