Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/34352e3232342e3132302e302f32322d3234203d3e20323731333135.roa
File:                     34352e3232342e3132302e302f32322d3234203d3e20323731333135.roa (raw, json)
Hash identifier:          PPEpywqIZltaprLfln44NqRUZR5vPQuxgy1/E7zBw/4=
Subject key identifier:   8E:DF:51:A3:BF:8F:45:E0:46:53:2C:8E:C3:D8:12:D0:77:99:0B:C2
Certificate issuer:       /CN=8101163C7D4653C721943A4B9F030DCDE8717520
Certificate serial:       3F4B6471D4988C67A71024D793D503A433CC9400
Authority key identifier: 81:01:16:3C:7D:46:53:C7:21:94:3A:4B:9F:03:0D:CD:E8:71:75:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8101163C7D4653C721943A4B9F030DCDE8717520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/34352e3232342e3132302e302f32322d3234203d3e20323731333135.roa
Signing time:             Mon 11 Jul 2022 18:42:20 +0000
ROA not before:           Mon 11 Jul 2022 18:37:20 +0000
ROA not after:            Mon 10 Jul 2023 18:42:20 +0000
asID:                     271315
IP address blocks:        45.224.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4b:64:71:d4:98:8c:67:a7:10:24:d7:93:d5:03:a4:33:cc:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8101163C7D4653C721943A4B9F030DCDE8717520
        Validity
            Not Before: Jul 11 18:37:20 2022 GMT
            Not After : Jul 10 18:42:20 2023 GMT
        Subject: CN=8EDF51A3BF8F45E046532C8EC3D812D077990BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:4f:3c:b7:03:98:e7:af:84:69:5f:a3:01:
                    c5:e1:df:92:22:10:be:8e:91:34:7b:d6:51:6d:6d:
                    e8:ee:fe:f0:ed:79:e7:06:e4:de:ef:42:9c:0d:2a:
                    27:cf:ee:e1:ad:56:91:9e:67:e2:c9:1f:90:8c:a1:
                    b5:ad:6d:90:8a:1d:fe:f3:59:d1:a9:01:95:d5:bd:
                    8a:8c:af:c5:1e:06:3d:be:7c:8e:0f:d3:da:d7:fb:
                    91:3e:01:db:ea:e0:8d:82:23:47:59:7d:e6:01:49:
                    48:91:84:a6:cc:2f:32:1d:1d:fd:e4:8e:0f:8d:1f:
                    79:f1:9e:a7:28:e2:2e:1d:08:84:ca:cd:de:64:f3:
                    17:35:07:2d:bf:a4:97:dd:3d:19:89:6e:f6:4e:3e:
                    cc:28:c3:29:b4:6b:0f:b2:3b:37:26:c9:d1:1f:20:
                    a9:b3:6d:01:e2:35:62:7c:51:d6:f2:70:cc:c9:4d:
                    77:d8:84:9f:ae:f2:e7:a6:74:14:b0:7f:a1:d3:d8:
                    13:f8:b9:e1:72:b7:8e:74:88:d1:6b:17:a1:c5:af:
                    b8:00:a8:0d:d9:03:e8:c9:18:8b:66:49:5a:0a:11:
                    32:c1:2b:cf:8c:ab:48:2d:46:31:96:27:3c:5b:07:
                    0b:a9:39:e7:a9:61:ea:44:c5:51:83:d0:dc:ac:b8:
                    9b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DF:51:A3:BF:8F:45:E0:46:53:2C:8E:C3:D8:12:D0:77:99:0B:C2
            X509v3 Authority Key Identifier:
                keyid:81:01:16:3C:7D:46:53:C7:21:94:3A:4B:9F:03:0D:CD:E8:71:75:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/8101163C7D4653C721943A4B9F030DCDE8717520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8101163C7D4653C721943A4B9F030DCDE8717520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/34352e3232342e3132302e302f32322d3234203d3e20323731333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:49:33:9c:79:cd:14:a5:39:9a:35:59:bf:fa:15:21:03:0f:
         a8:79:9e:0d:ab:e9:65:40:f7:aa:03:c1:63:ec:d3:d6:0a:7c:
         d2:c3:69:f3:81:ac:44:eb:93:b6:f3:3c:79:de:bc:41:e4:5d:
         76:73:18:1d:80:aa:31:07:f2:fe:7e:91:ea:4a:c0:f2:a5:87:
         87:a8:f2:75:11:be:0b:af:0f:7f:5f:c7:d0:1a:e5:8b:59:02:
         08:a0:ce:88:52:4f:79:3a:1a:0d:1d:5c:58:0b:7f:9e:ed:81:
         8e:72:3f:bf:60:12:37:61:f2:5b:e8:38:a0:34:db:89:f5:d6:
         6e:37:d1:21:64:87:05:f5:c0:7c:9a:ab:6b:b5:27:f4:f9:50:
         fb:1d:2d:da:07:1c:67:2b:47:6f:39:1a:d9:28:b5:7e:eb:bf:
         d6:d7:1b:ca:ad:88:70:b8:4e:28:6f:13:81:7a:9c:21:27:2f:
         09:63:d7:2d:20:fe:7e:a9:4b:8a:fd:6a:eb:87:4f:a6:27:cf:
         67:e7:61:6f:84:aa:0c:79:6b:07:8b:27:6d:4c:a8:13:d5:7f:
         81:0a:71:80:62:f5:64:7b:32:cc:8a:60:db:d0:df:29:ef:f8:
         1d:a7:27:ac:f0:a9:be:1c:c9:02:21:77:09:5a:24:f8:df:72:
         84:66:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:43 2025 by rpki-client