Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/34352e3136312e3134362e302f32332d3233203d3e20323638353130.roa
File:                     34352e3136312e3134362e302f32332d3233203d3e20323638353130.roa (raw, json)
Hash identifier:          vwQ7BGlr3vzo404eH2tprEChXdncjAtpq7xWJ66XdZA=
Subject key identifier:   CF:D2:35:74:40:24:E1:B2:B2:6F:CB:D8:97:96:74:71:8C:B7:88:E9
Certificate issuer:       /CN=7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68
Certificate serial:       3BE4B50A61DBBE9CCB0B7AE9C8FC759BC0A930E2
Authority key identifier: 7E:60:45:AB:7A:15:F2:07:3A:2C:CE:34:ED:D7:C6:A6:EB:04:DC:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/34352e3136312e3134362e302f32332d3233203d3e20323638353130.roa
Signing time:             Fri 24 Mar 2023 01:47:11 +0000
ROA not before:           Fri 24 Mar 2023 01:42:11 +0000
ROA not after:            Fri 22 Mar 2024 01:47:11 +0000
asID:                     268510
IP address blocks:        45.161.146.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e4:b5:0a:61:db:be:9c:cb:0b:7a:e9:c8:fc:75:9b:c0:a9:30:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68
        Validity
            Not Before: Mar 24 01:42:11 2023 GMT
            Not After : Mar 22 01:47:11 2024 GMT
        Subject: CN=CFD235744024E1B2B26FCBD8979674718CB788E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:a1:35:c1:3d:5b:8d:d0:ea:d2:65:c1:1e:
                    f6:8f:fe:b7:56:b9:c6:1a:8a:a4:42:67:1f:3a:d6:
                    51:1a:19:c7:c5:dd:f6:40:37:a8:5c:5f:35:38:96:
                    e1:82:4e:4b:ec:93:18:9a:91:da:71:38:b8:5f:2c:
                    29:1a:8c:19:2f:9d:86:15:d2:d7:19:13:1e:17:e3:
                    2e:d9:da:48:9e:33:91:8e:fa:09:15:36:67:55:01:
                    66:45:1c:6a:a5:16:70:1d:05:ab:c6:cf:2f:35:e2:
                    ec:02:3e:72:80:83:f0:f0:98:49:ca:90:96:5f:50:
                    13:a0:9b:7b:b1:87:fa:46:1b:99:55:aa:7f:d0:4a:
                    dc:25:87:0f:9a:0a:0b:d3:45:18:ba:37:88:df:87:
                    1a:6d:35:45:14:97:5a:ca:f5:e6:2c:d6:bd:55:28:
                    0d:fa:b2:4d:95:cb:08:5f:0f:a7:85:9e:38:49:7b:
                    58:a6:7d:18:f2:c8:e1:09:4a:88:2f:4e:45:d0:ca:
                    6a:2c:0b:05:ca:40:dc:fa:14:3b:49:10:73:b2:b0:
                    33:01:c2:5c:4e:2b:11:bc:fa:06:8e:24:ec:7e:17:
                    47:74:a3:f5:2c:64:94:b1:c3:9f:4d:26:61:2c:ed:
                    65:e7:f3:0c:eb:80:3e:26:e0:76:1d:f6:80:b7:71:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D2:35:74:40:24:E1:B2:B2:6F:CB:D8:97:96:74:71:8C:B7:88:E9
            X509v3 Authority Key Identifier:
                keyid:7E:60:45:AB:7A:15:F2:07:3A:2C:CE:34:ED:D7:C6:A6:EB:04:DC:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/34352e3136312e3134362e302f32332d3233203d3e20323638353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:9d:02:0f:e6:76:58:88:0d:dc:bd:63:6f:ba:85:b7:1a:fe:
         ee:e1:c9:e4:14:b3:83:1e:5b:06:7f:76:e2:34:be:b6:82:9d:
         47:fa:03:09:e3:0d:f6:c1:b1:0b:40:0a:e7:31:c5:af:6b:6f:
         48:b9:c7:ca:3c:e4:a4:5e:dd:34:a1:56:4f:9b:ea:91:5d:5f:
         7a:9a:cb:e0:14:49:5d:86:39:1b:94:24:a0:10:ab:1e:26:a3:
         3f:c1:ee:1a:e7:af:bf:58:05:76:4d:0f:17:5d:85:17:db:64:
         41:77:a9:bb:21:96:be:07:4d:e4:08:d0:fa:0b:e1:a7:ff:d5:
         90:32:41:ec:26:e5:4e:19:4e:b0:16:a9:16:b9:ee:a4:ca:4c:
         be:aa:98:f1:3c:ef:3b:a4:c0:8a:e9:61:4f:09:fa:50:80:3b:
         10:a4:99:81:37:87:a5:4e:ab:e9:2c:2f:7b:ca:c4:9e:d7:7b:
         d0:34:fd:c6:a1:ea:20:fa:f3:27:5b:fd:35:09:01:12:81:92:
         00:10:4e:46:37:81:ff:bf:38:c9:a0:c6:11:5e:29:0e:d7:9d:
         57:07:86:77:48:71:95:b8:e3:e5:d0:e6:99:b5:3c:a7:8d:3b:
         48:93:48:df:70:51:d9:09:35:d1:27:d6:78:a7:0e:b1:ca:b8:
         0c:be:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:02 2025 by rpki-client