Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3137352e3131382e302f32332d3233203d3e20323632373737.roa
File:                     34352e3137352e3131382e302f32332d3233203d3e20323632373737.roa (raw, json)
Hash identifier:          mpHCFhfUlonzQ7LXrtIfgt2Fff+xNvIXOvi7N4U4C5o=
Subject key identifier:   D2:BA:20:E3:AC:9F:C2:CF:DD:25:0D:6F:32:6C:B3:49:8D:FB:13:98
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       3400618A644DB17849F679CB34E5CEFF475EFF80
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3137352e3131382e302f32332d3233203d3e20323632373737.roa
Signing time:             Fri 10 Mar 2023 12:02:26 +0000
ROA not before:           Fri 10 Mar 2023 11:57:26 +0000
ROA not after:            Fri 08 Mar 2024 12:02:26 +0000
asID:                     262777
IP address blocks:        45.175.118.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:00:61:8a:64:4d:b1:78:49:f6:79:cb:34:e5:ce:ff:47:5e:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: Mar 10 11:57:26 2023 GMT
            Not After : Mar  8 12:02:26 2024 GMT
        Subject: CN=D2BA20E3AC9FC2CFDD250D6F326CB3498DFB1398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:12:e3:04:fd:23:86:8a:14:5b:90:27:9a:
                    fe:ab:99:7b:89:09:94:91:52:67:1c:52:91:8c:ef:
                    dd:6f:00:c4:40:19:d4:93:bb:3b:3c:d8:05:5a:b5:
                    32:c3:c4:57:5f:d0:04:02:18:8f:0f:1b:4c:64:2d:
                    dd:33:1c:5a:88:11:e3:6f:12:94:00:27:fc:c1:cd:
                    8d:5f:ff:1f:eb:6c:ee:e4:b1:af:89:9e:d0:43:7d:
                    8d:ce:f9:07:91:68:0e:f2:8e:d1:4e:10:ce:ba:a7:
                    31:c9:ab:b8:91:f5:74:71:32:02:1a:82:1c:c6:b4:
                    15:39:27:0e:ea:69:65:1b:d0:f7:ec:cc:52:48:f9:
                    d5:a7:e7:ee:04:c2:9a:10:0a:c5:76:b7:1a:09:b5:
                    bb:be:24:d5:4d:c0:23:c9:e5:9c:83:8b:0a:f6:7c:
                    bb:4e:ca:5e:30:4f:9f:3a:6e:05:bd:e0:35:c1:1e:
                    92:11:ac:c1:cd:0c:68:0d:c8:8e:d6:9c:1f:45:3d:
                    cd:1d:3e:a6:5b:5b:73:bb:56:d0:b7:94:a9:e8:d7:
                    91:e1:61:23:3b:fd:8f:2a:d8:88:8a:cf:2d:3a:20:
                    de:0b:bd:d0:22:46:09:cd:dc:70:5d:ba:ad:db:17:
                    bb:bf:37:7c:ca:5d:34:6c:f1:85:5e:23:01:2a:c0:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BA:20:E3:AC:9F:C2:CF:DD:25:0D:6F:32:6C:B3:49:8D:FB:13:98
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3137352e3131382e302f32332d3233203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:d8:51:2e:35:6d:98:de:80:b1:63:4b:e2:f6:ea:62:53:
         d3:d4:0f:3f:3a:c3:e8:80:d5:1e:ce:db:7b:9b:4d:29:8b:93:
         ba:a6:dc:a1:83:10:ff:ec:85:59:20:2d:80:fc:8a:b9:61:a0:
         37:d8:a5:31:60:12:98:9e:83:63:b1:3c:38:18:52:46:27:ed:
         0f:9f:b8:b6:e4:f1:d4:a7:ad:71:77:85:27:d5:16:d1:6c:36:
         5a:51:f8:bf:a3:f5:91:6e:54:b4:00:ff:67:d8:00:87:15:ae:
         5a:71:84:64:51:b1:4e:6f:3d:c7:6b:01:51:92:64:bf:9d:88:
         a1:97:97:b2:7a:f8:52:ce:50:94:8b:3f:c8:4f:28:40:3e:4a:
         00:30:72:41:6b:11:03:6b:7a:6d:47:aa:ec:79:8d:b9:9e:3b:
         48:43:f1:9b:ff:7e:b1:49:6c:fa:45:69:6f:0b:9f:32:6b:7c:
         4b:eb:4b:c2:34:02:a9:93:9e:69:b4:c4:c7:54:8a:4f:83:e7:
         4b:42:c1:f7:11:5f:0f:31:6f:27:fd:6c:f5:08:45:ae:80:31:
         21:80:ce:8b:ef:2a:ff:d3:f8:23:e1:81:9d:13:43:8c:44:2b:
         51:de:ea:01:f3:28:56:8a:6f:76:d1:5e:4c:2b:e7:b5:71:80:
         6b:af:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:40 2025 by rpki-client