Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/34352e352e3139392e302f32342d3234203d3e20323636313035.roa
File:                     34352e352e3139392e302f32342d3234203d3e20323636313035.roa (raw, json)
Hash identifier:          Nw13SOsWqJ0seg+GdqrgmJp0uSuJp7s1iPCUy6JEcGc=
Subject key identifier:   B2:B3:57:A1:50:83:83:44:AA:6F:02:99:E4:0C:0B:79:80:2C:A4:EC
Certificate issuer:       /CN=C6822FB9E5BC38D4B1DA40A1163F90BDC005D290
Certificate serial:       5ABD2A15C6DCD7A5FA586D52F0E173797D65819C
Authority key identifier: C6:82:2F:B9:E5:BC:38:D4:B1:DA:40:A1:16:3F:90:BD:C0:05:D2:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6822FB9E5BC38D4B1DA40A1163F90BDC005D290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/34352e352e3139392e302f32342d3234203d3e20323636313035.roa
Signing time:             Mon 15 Jan 2024 14:47:47 +0000
ROA not before:           Mon 15 Jan 2024 14:42:47 +0000
ROA not after:            Mon 13 Jan 2025 14:47:47 +0000
asID:                     266105
IP address blocks:        45.5.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bd:2a:15:c6:dc:d7:a5:fa:58:6d:52:f0:e1:73:79:7d:65:81:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6822FB9E5BC38D4B1DA40A1163F90BDC005D290
        Validity
            Not Before: Jan 15 14:42:47 2024 GMT
            Not After : Jan 13 14:47:47 2025 GMT
        Subject: CN=B2B357A150838344AA6F0299E40C0B79802CA4EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:23:39:c8:ee:72:6a:09:6a:49:27:77:04:
                    93:c0:23:ec:1e:91:d5:5b:e7:f5:ee:34:f2:ab:43:
                    34:85:c2:da:8f:09:7d:3a:bf:3a:0b:20:60:ee:26:
                    22:20:f0:76:00:c5:4d:c7:04:8c:ce:21:78:29:fa:
                    f7:02:9a:f9:d3:ba:b3:d1:23:93:f7:33:d5:dc:96:
                    dc:12:4f:b4:f5:13:d5:26:0b:88:bc:eb:60:89:45:
                    37:64:5c:cc:e2:e0:ad:17:ac:03:b7:ed:60:e1:1e:
                    50:88:fa:7a:5c:ef:d3:37:9a:5c:d3:5b:d6:92:98:
                    6d:f3:0a:9f:16:d0:8e:c5:03:68:f0:bf:de:f9:d3:
                    09:6f:40:68:64:e5:14:b3:7b:26:a0:53:7d:52:60:
                    f5:f8:9d:7a:1b:5b:56:fc:b8:7c:7f:ee:cd:03:fc:
                    94:f0:8b:41:24:7e:b3:68:a6:07:d5:88:c9:90:96:
                    c8:c3:5a:ae:31:65:e9:8e:02:22:50:97:71:5e:5d:
                    2f:6d:73:72:82:d0:a8:1c:36:f5:f7:90:15:13:e7:
                    90:2c:4b:0b:19:64:7f:91:58:a3:fb:8f:77:3f:88:
                    b6:77:79:c9:b3:93:74:b7:9a:26:5a:0f:bc:6f:3d:
                    03:99:89:3c:50:53:2a:31:fe:ed:92:a9:1a:2f:b6:
                    b2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B3:57:A1:50:83:83:44:AA:6F:02:99:E4:0C:0B:79:80:2C:A4:EC
            X509v3 Authority Key Identifier:
                keyid:C6:82:2F:B9:E5:BC:38:D4:B1:DA:40:A1:16:3F:90:BD:C0:05:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/C6822FB9E5BC38D4B1DA40A1163F90BDC005D290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6822FB9E5BC38D4B1DA40A1163F90BDC005D290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/34352e352e3139392e302f32342d3234203d3e20323636313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e2:15:c1:19:17:8b:4f:b7:b3:8f:12:b9:bf:68:97:0c:3d:
         44:a7:d0:e8:81:81:9e:cd:97:9a:50:6a:cf:9c:cb:b1:87:a9:
         12:28:8e:e6:31:3b:62:ab:f8:02:a5:9a:d6:c8:f3:d6:0d:b8:
         11:57:3e:13:9d:4c:47:90:ed:28:cd:fe:0a:94:05:3d:18:86:
         41:11:43:27:b3:67:8c:54:5a:3e:d9:47:a2:f0:dd:0f:96:a7:
         12:77:77:5b:dd:fc:51:ed:3f:ba:28:f6:d6:16:40:88:0d:e8:
         89:22:eb:4b:b2:2d:f3:6e:80:6d:8d:13:18:d2:2d:19:ce:43:
         32:74:56:70:60:6c:f6:78:4f:46:9f:6d:68:74:21:2c:71:ab:
         b0:e4:5a:6c:3f:46:66:b9:e2:7f:52:61:af:36:17:d0:8f:3b:
         48:9d:48:5e:b9:5a:f9:34:01:06:da:8f:db:17:74:ac:6b:85:
         ad:fa:d0:c5:3c:14:3c:1b:76:44:87:73:10:24:07:38:58:1d:
         c7:ed:77:fb:5a:01:94:d3:ba:d6:92:91:7f:c8:f9:6c:80:04:
         42:23:2c:98:71:2c:50:ab:19:61:15:6b:2f:94:c0:4c:23:a0:
         19:2b:79:92:35:16:6b:67:e7:12:4a:48:a4:ae:b8:37:cc:8f:
         1e:6d:6a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:16:46 2025 by rpki-client