Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e372e39322e302f32322d3234203d3e20323638303835.roa
File:                     34352e372e39322e302f32322d3234203d3e20323638303835.roa (raw, json)
Hash identifier:          J3VwkCuaHahofh0nHIUuCOlOydH1Hiz5rFKr1KLvxbw=
Subject key identifier:   F8:FC:17:CA:71:34:FB:B9:50:6A:A1:58:79:1D:37:4F:6E:02:66:80
Certificate issuer:       /CN=F82D6F3392B95584EECA832E87C32189709E8DF5
Certificate serial:       44AFC84C5EAD1F3B2D0D67CBA6AEA678ACA11A80
Authority key identifier: F8:2D:6F:33:92:B9:55:84:EE:CA:83:2E:87:C3:21:89:70:9E:8D:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D6F3392B95584EECA832E87C32189709E8DF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e372e39322e302f32322d3234203d3e20323638303835.roa
Signing time:             Fri 29 Nov 2024 17:31:23 +0000
ROA not before:           Fri 29 Nov 2024 17:26:23 +0000
ROA not after:            Fri 28 Nov 2025 17:31:23 +0000
asID:                     268085
IP address blocks:        45.7.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:af:c8:4c:5e:ad:1f:3b:2d:0d:67:cb:a6:ae:a6:78:ac:a1:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F82D6F3392B95584EECA832E87C32189709E8DF5
        Validity
            Not Before: Nov 29 17:26:23 2024 GMT
            Not After : Nov 28 17:31:23 2025 GMT
        Subject: CN=F8FC17CA7134FBB9506AA158791D374F6E026680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:49:8a:47:2f:14:42:f3:c9:c8:32:df:27:
                    e3:29:63:f4:89:d3:31:c7:bb:6f:b6:99:84:3f:1d:
                    98:64:72:28:ff:17:17:47:81:98:4b:82:03:10:2b:
                    51:69:34:41:50:41:b7:b9:7f:d0:9b:8e:fc:39:1e:
                    16:e5:85:42:b8:10:6a:e1:ab:55:77:59:a7:a0:13:
                    ad:85:fc:e6:ac:6d:a8:af:a1:c4:84:63:bf:6f:e2:
                    48:07:85:62:a9:40:5e:82:f7:1b:11:c9:a8:3f:88:
                    cd:7f:b1:bb:cb:40:cf:64:43:a0:f3:f2:43:f8:a3:
                    50:ff:90:57:43:7a:32:02:ce:37:54:b6:89:4e:45:
                    28:e8:b0:a3:19:f3:e8:02:48:32:6c:a7:83:b1:b0:
                    b5:b1:19:84:30:d4:44:ed:d9:55:af:54:71:04:0f:
                    ad:40:74:c6:c3:bb:70:40:58:4a:51:04:6f:9d:a3:
                    46:bf:62:1a:b1:7a:d5:2a:71:e8:95:c2:ae:c7:d4:
                    24:b4:74:88:ff:d5:6f:db:a0:a5:8f:51:fa:70:56:
                    02:b3:e4:15:f0:2a:48:92:22:3b:5f:ea:91:49:15:
                    9e:be:25:1a:a7:0b:bd:c5:3b:80:69:32:1e:64:91:
                    4d:5b:c3:b9:2a:8e:6c:c7:ce:61:77:89:9f:8a:14:
                    1e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:17:CA:71:34:FB:B9:50:6A:A1:58:79:1D:37:4F:6E:02:66:80
            X509v3 Authority Key Identifier:
                keyid:F8:2D:6F:33:92:B9:55:84:EE:CA:83:2E:87:C3:21:89:70:9E:8D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/F82D6F3392B95584EECA832E87C32189709E8DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D6F3392B95584EECA832E87C32189709E8DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e372e39322e302f32322d3234203d3e20323638303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:28:13:8d:2c:55:ce:17:ce:09:7c:0e:c7:7b:c6:21:5f:f1:
         8a:1e:4c:a0:d4:a6:57:67:49:c0:bf:32:cb:a2:01:62:9d:af:
         25:5c:87:42:60:2c:d2:bd:7c:c3:f8:e8:71:3b:9e:70:1a:be:
         7d:52:16:39:64:31:2f:11:a9:31:82:73:21:44:07:e8:a9:51:
         a9:94:21:4d:73:be:47:a0:91:09:dd:d7:df:ed:65:d6:9e:dd:
         ab:84:c6:d1:52:c4:d7:98:cf:3a:7c:be:62:7b:f7:d1:70:72:
         e2:70:eb:f6:d1:a6:05:a9:df:0e:67:52:a3:9c:cc:33:a1:63:
         36:05:e5:04:91:db:83:ef:1a:8d:31:58:9b:d0:f2:7b:ff:7a:
         b3:1a:28:46:8f:cb:5f:a2:94:56:9c:ab:a6:7e:d8:0a:9e:54:
         8e:18:ad:12:00:bb:1e:78:4f:d8:37:4b:9c:90:08:86:cb:96:
         78:96:ba:c0:1f:79:40:33:a5:86:b9:04:c2:3f:78:ce:60:72:
         39:ff:54:b7:15:1d:a9:9d:20:11:b6:6d:9b:0f:34:53:f5:f3:
         2c:73:94:b1:d9:67:3e:dd:84:4f:67:e2:30:ec:b3:eb:ea:17:
         f6:4f:6a:e1:05:de:3f:08:3f:e8:ef:0f:e4:59:63:b7:56:6b:
         52:a5:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:50 2025 by rpki-client