Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e38382e302f32332d3234203d3e20323638363539.roa
File:                     34352e3136352e38382e302f32332d3234203d3e20323638363539.roa (raw, json)
Hash identifier:          TGjqtMeiD8FYifQBt+/rKWLUxxMcJwACAgItY6z+alE=
Subject key identifier:   2B:26:F3:25:14:6E:71:44:3F:42:8F:03:F3:0A:F5:FD:8E:88:1D:8A
Certificate issuer:       /CN=D2F3CF1154C37962C5D2AEB18040800B074D67A5
Certificate serial:       069A2752774DCCC890748C91858BE1FBDF3A1917
Authority key identifier: D2:F3:CF:11:54:C3:79:62:C5:D2:AE:B1:80:40:80:0B:07:4D:67:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F3CF1154C37962C5D2AEB18040800B074D67A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e38382e302f32332d3234203d3e20323638363539.roa
Signing time:             Thu 18 Aug 2022 03:11:40 +0000
ROA not before:           Thu 18 Aug 2022 03:06:40 +0000
ROA not after:            Thu 17 Aug 2023 03:11:40 +0000
asID:                     268659
IP address blocks:        45.165.88.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9a:27:52:77:4d:cc:c8:90:74:8c:91:85:8b:e1:fb:df:3a:19:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F3CF1154C37962C5D2AEB18040800B074D67A5
        Validity
            Not Before: Aug 18 03:06:40 2022 GMT
            Not After : Aug 17 03:11:40 2023 GMT
        Subject: CN=2B26F325146E71443F428F03F30AF5FD8E881D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:6c:01:7a:48:1e:63:78:39:75:6f:f6:09:
                    0d:26:57:42:57:03:a5:8e:ef:aa:6e:bc:02:42:f9:
                    42:7b:9c:1f:a4:33:b3:27:6c:13:19:cb:f5:43:18:
                    d9:d7:e0:e5:0e:e8:3c:2c:8f:9e:22:c3:20:77:4a:
                    47:bf:b9:12:7a:85:d1:0c:48:dd:a5:7e:28:0b:9d:
                    5a:45:23:5f:4b:1b:f9:d9:89:b1:0c:8b:eb:87:c0:
                    dd:9c:d0:ea:12:e6:4c:eb:47:c8:72:1d:91:ee:c2:
                    da:85:eb:dd:a1:18:ac:ee:88:9f:b8:1d:3c:3a:f7:
                    35:c6:ec:e3:07:27:c5:37:fc:d8:f7:f7:b6:24:a8:
                    e3:87:78:28:37:e0:cb:a5:0e:55:bb:79:ba:bf:8e:
                    a6:ac:39:9f:fa:6d:74:99:56:ac:ca:2e:70:0d:53:
                    93:dd:b6:ad:a7:bb:21:7f:12:f4:6f:56:86:d2:22:
                    60:e6:f1:2b:d6:7d:9b:35:c1:71:5e:c2:e4:a9:38:
                    2e:8e:84:5e:d3:51:17:bc:07:c0:95:5a:25:7f:c0:
                    2c:72:26:66:9e:3f:44:95:ca:7f:d8:7f:6c:81:1f:
                    89:d4:12:28:33:64:ee:0f:40:cc:fb:93:38:81:74:
                    e0:b8:4b:8a:43:23:4f:08:84:62:eb:94:ed:e4:b1:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:26:F3:25:14:6E:71:44:3F:42:8F:03:F3:0A:F5:FD:8E:88:1D:8A
            X509v3 Authority Key Identifier:
                keyid:D2:F3:CF:11:54:C3:79:62:C5:D2:AE:B1:80:40:80:0B:07:4D:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/D2F3CF1154C37962C5D2AEB18040800B074D67A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F3CF1154C37962C5D2AEB18040800B074D67A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/34352e3136352e38382e302f32332d3234203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:81:ab:c3:aa:e4:33:2c:67:61:80:9a:94:ad:7d:9d:6a:9a:
         81:8d:3a:22:d8:5c:ea:98:2b:84:50:87:32:2a:fc:ab:56:e8:
         16:b9:b3:e5:98:4d:76:2c:f7:c4:5c:37:47:01:c0:9a:ce:56:
         ca:f4:f3:da:ec:f4:75:7b:49:4f:1a:3f:87:86:53:cf:50:7c:
         d4:1e:8b:1c:0f:9c:59:80:1b:af:56:24:be:14:18:94:4e:79:
         1d:0f:4b:c4:57:4e:01:53:94:d9:3d:2c:38:cf:11:1f:28:b8:
         08:43:12:17:ab:69:9d:96:85:2b:58:ea:c4:ef:d0:19:97:6b:
         11:f2:d7:ff:bb:fe:cd:8c:6d:35:42:91:09:d9:ef:27:d8:95:
         86:75:9f:a8:73:9b:a5:cb:1e:5c:a3:d0:38:aa:c8:b6:2b:d6:
         ed:68:d7:22:4b:8b:d9:e3:3f:95:94:68:75:81:eb:fd:97:27:
         bd:b2:72:93:32:81:fb:64:1a:91:2a:f2:a6:ec:22:48:59:75:
         6b:06:1a:b5:c9:08:c1:07:1c:a9:75:ce:9c:c1:f2:f9:ee:c3:
         f3:4c:09:5c:22:e1:82:a3:03:38:00:2a:1c:6d:13:d5:4b:46:
         5e:78:79:dd:1b:b7:db:0d:c7:d7:cb:6e:d6:fd:ee:86:ce:20:
         f8:c7:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:52 2025 by rpki-client