Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32322d3234203d3e20323637393932.roa
File:                     34352e3136372e36382e302f32322d3234203d3e20323637393932.roa (raw, json)
Hash identifier:          NgTXG4rvMoBk3BfyU8kYzgc6WlFWQyeaewh72K0JPPc=
Subject key identifier:   E2:3C:56:67:D9:9E:1D:DC:D7:CD:77:D9:E6:56:E0:8D:1E:53:BF:55
Certificate issuer:       /CN=1410B18CCA337433B73CA0533F1F503FDBB64BA7
Certificate serial:       350F192863B820FC5E2388AFF6EB95F8DBC801AF
Authority key identifier: 14:10:B1:8C:CA:33:74:33:B7:3C:A0:53:3F:1F:50:3F:DB:B6:4B:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1410B18CCA337433B73CA0533F1F503FDBB64BA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32322d3234203d3e20323637393932.roa
Signing time:             Mon 17 Mar 2025 13:38:15 +0000
ROA not before:           Mon 17 Mar 2025 13:33:15 +0000
ROA not after:            Mon 16 Mar 2026 13:38:15 +0000
asID:                     267992
IP address blocks:        45.167.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0f:19:28:63:b8:20:fc:5e:23:88:af:f6:eb:95:f8:db:c8:01:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1410B18CCA337433B73CA0533F1F503FDBB64BA7
        Validity
            Not Before: Mar 17 13:33:15 2025 GMT
            Not After : Mar 16 13:38:15 2026 GMT
        Subject: CN=E23C5667D99E1DDCD7CD77D9E656E08D1E53BF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:3f:b6:6e:55:f2:4e:b6:be:ee:be:9e:c1:
                    d2:0b:01:e1:a8:52:d5:d4:1b:af:ae:d2:ae:b5:c1:
                    6f:57:e3:c3:ff:d0:d4:e9:fc:ba:09:e9:44:ba:02:
                    89:ea:80:21:18:a2:90:b2:e3:8c:36:8e:9c:0a:80:
                    a8:2e:c6:23:85:cd:e1:bb:19:23:25:9d:74:01:f2:
                    dd:ad:7e:b6:41:3e:16:b7:cc:6a:3c:f7:43:ff:6f:
                    01:04:bf:9e:fa:66:78:55:ca:fd:fb:ad:14:f9:6e:
                    90:1b:22:5a:ed:bc:59:f3:45:c0:3d:10:bc:9d:a8:
                    92:b8:ca:31:fa:b5:5e:45:51:2c:cf:c2:0a:00:18:
                    2c:58:11:be:9b:c4:53:2b:b1:e6:24:b8:3e:56:2c:
                    02:2b:08:a2:50:9d:b5:a1:53:91:18:ae:41:22:ce:
                    98:21:35:6a:a0:1f:2d:d1:df:c9:86:da:5a:2d:26:
                    fb:24:be:48:7f:3d:9b:3e:92:be:78:8e:9e:70:1f:
                    b9:89:5e:cb:c4:e1:f2:e9:2a:d4:91:39:8b:8b:61:
                    1d:1f:a4:c5:f1:ef:8f:49:57:3a:c8:48:e4:cf:5d:
                    47:dc:3f:f0:ea:3f:41:13:cc:ee:aa:a5:59:7e:2f:
                    52:ac:62:1b:66:e2:23:81:62:4f:44:b1:bb:da:14:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3C:56:67:D9:9E:1D:DC:D7:CD:77:D9:E6:56:E0:8D:1E:53:BF:55
            X509v3 Authority Key Identifier:
                keyid:14:10:B1:8C:CA:33:74:33:B7:3C:A0:53:3F:1F:50:3F:DB:B6:4B:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/1410B18CCA337433B73CA0533F1F503FDBB64BA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1410B18CCA337433B73CA0533F1F503FDBB64BA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32322d3234203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:d0:0f:15:6d:42:41:f8:df:a3:f2:c9:5b:9d:62:9b:17:b2:
         2a:1b:d6:49:99:26:a2:12:e0:31:43:f0:40:3a:64:90:4c:6e:
         7f:04:b6:3d:2d:60:a9:73:5e:c4:46:0b:05:de:d3:4a:65:4b:
         e0:21:90:3a:db:02:97:bf:b2:f4:67:be:bf:c6:34:48:a1:34:
         c3:1d:16:81:ab:20:a7:ee:ed:1a:f5:64:57:58:23:ee:55:95:
         b7:9e:bb:39:a0:06:db:a7:c7:c3:9a:ce:1b:3e:f6:ae:b0:59:
         a3:5d:50:39:a6:83:5c:25:78:36:d4:24:be:4e:1e:d7:17:29:
         01:93:c6:f8:1b:89:f4:d5:61:15:4c:59:07:79:99:b2:4c:b9:
         e7:69:a1:a2:14:4d:87:95:8b:1c:67:24:9a:76:46:cc:25:71:
         94:d5:e0:6d:aa:d7:b6:88:7f:18:5d:1d:99:9d:f7:43:80:9f:
         02:23:58:d3:a2:a1:c6:a7:fc:8b:0f:f6:2a:d2:e6:e3:21:2e:
         61:5d:cf:e2:12:54:4b:b8:01:15:d6:0d:39:40:dc:b3:a7:33:
         ec:25:a6:6f:ff:a7:5f:44:8c:c1:2f:33:37:a4:5f:eb:d0:92:
         14:13:0f:87:0b:33:0b:20:3c:90:48:9d:e7:80:90:ae:8b:91:
         71:a2:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:05:47 2025 by rpki-client