Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130382e302f32332d3233203d3e20323638303537.roa
File:                     34352e3136382e3130382e302f32332d3233203d3e20323638303537.roa (raw, json)
Hash identifier:          PE8YJdT9ZPS2q/HEXxGKWuwA5ine3X2xkXL9EARZSA8=
Subject key identifier:   54:6A:FF:6A:F7:82:85:AF:C9:B9:8B:39:A7:4A:30:CB:15:B2:5A:DD
Certificate issuer:       /CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
Certificate serial:       55886BF126A30C32DBB62778E83195E8FFEDB2B9
Authority key identifier: FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130382e302f32332d3233203d3e20323638303537.roa
Signing time:             Sat 04 Feb 2023 11:01:53 +0000
ROA not before:           Sat 04 Feb 2023 10:56:53 +0000
ROA not after:            Sat 03 Feb 2024 11:01:53 +0000
asID:                     268057
IP address blocks:        45.168.108.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:88:6b:f1:26:a3:0c:32:db:b6:27:78:e8:31:95:e8:ff:ed:b2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
        Validity
            Not Before: Feb  4 10:56:53 2023 GMT
            Not After : Feb  3 11:01:53 2024 GMT
        Subject: CN=546AFF6AF78285AFC9B98B39A74A30CB15B25ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:29:69:d0:43:de:ed:a1:a6:ae:75:65:0f:
                    68:f5:aa:6d:89:43:c0:87:24:9c:c3:45:30:f5:f7:
                    f8:f7:31:03:48:c0:61:b7:b9:47:ba:14:7f:e7:f9:
                    74:e4:64:96:9c:cc:3b:15:cf:34:ba:f0:84:57:c8:
                    b7:46:8f:ce:86:a5:9c:c2:91:46:ef:7a:dc:3c:50:
                    0c:a0:3f:93:f9:22:49:73:c3:f2:5e:0c:6c:2a:42:
                    3c:f2:e8:cc:65:fb:46:6b:bc:4a:9e:09:da:b7:07:
                    b7:d3:d6:89:cc:92:2e:03:16:00:38:88:78:24:2c:
                    82:e9:fe:e2:04:0b:53:5e:d1:3a:bc:bb:cb:e7:0d:
                    92:17:3b:9f:96:50:6c:02:a9:83:01:ee:73:b8:6e:
                    22:7d:27:8c:68:1d:0d:83:95:c8:ad:c4:ad:3d:35:
                    51:f8:a8:c1:f2:63:15:09:4d:3c:29:30:82:b6:fe:
                    45:65:ec:a5:0c:d3:36:ef:72:04:95:09:fe:b3:d1:
                    90:07:c6:4f:93:58:33:80:f6:5e:16:91:a8:c4:43:
                    85:7e:ca:f1:a6:40:ec:77:40:75:c6:4b:88:32:39:
                    f9:8b:c4:75:44:a3:7d:78:f9:31:2b:3c:60:a6:8a:
                    59:74:14:80:56:ff:86:d7:2d:2c:f0:a5:1d:c4:c1:
                    df:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6A:FF:6A:F7:82:85:AF:C9:B9:8B:39:A7:4A:30:CB:15:B2:5A:DD
            X509v3 Authority Key Identifier:
                keyid:FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130382e302f32332d3233203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:60:46:94:a3:d0:11:00:9c:bb:99:5e:67:2c:ca:97:b8:89:
         b0:c1:91:b9:ea:90:bd:ee:7e:cf:32:cb:3d:e8:d3:c1:8e:0b:
         1d:96:2d:71:f0:e5:ce:58:dd:a3:9f:55:90:b8:74:09:74:6b:
         2e:e4:ed:57:fd:1a:40:95:5d:6d:3f:24:63:6c:2e:dc:75:68:
         fb:24:b3:76:48:22:5d:f6:30:c5:12:ad:37:2b:a9:be:a7:23:
         f0:6c:da:2c:34:d2:25:b5:aa:bf:7d:15:10:e5:c6:69:65:09:
         40:64:d9:fa:08:1d:85:c8:ac:55:1d:59:3c:80:2d:5f:66:5e:
         c1:68:f6:9f:b8:88:1f:9d:50:bc:43:d2:89:80:36:8c:1a:d3:
         f7:64:f4:95:78:68:a4:6e:89:5d:d4:0d:89:71:78:44:67:7d:
         3b:33:62:ca:18:ae:d5:a3:e3:4e:0e:c0:87:dd:6d:d9:e6:6b:
         81:7f:16:f7:a8:e4:eb:3e:da:4a:ce:71:30:ef:11:7b:38:77:
         20:7f:b6:78:d3:3a:19:06:b5:66:fe:22:18:68:75:54:e9:9b:
         e7:6e:3f:3c:c0:27:1b:a4:65:e6:86:d1:17:cb:5c:55:60:d2:
         7c:72:bd:54:7c:be:fe:7e:0d:44:23:3d:03:86:7d:53:24:70:
         ff:a4:9c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:34 2025 by rpki-client