Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136312e302f32342d3234203d3e20323638383538.roa
File:                     34352e3137342e3136312e302f32342d3234203d3e20323638383538.roa (raw, json)
Hash identifier:          GBFtQdwhDT3fgdYy+7uyDitwbZ89VH50NdQkkF60iZk=
Subject key identifier:   A1:FA:FA:88:D1:46:5F:14:89:86:92:EF:47:D6:1F:D4:B4:52:60:C5
Certificate issuer:       /CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
Certificate serial:       37C2FAE213ED1EDBBF607687DE7CFF2D21E639BC
Authority key identifier: EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136312e302f32342d3234203d3e20323638383538.roa
Signing time:             Tue 03 Sep 2024 12:33:02 +0000
ROA not before:           Tue 03 Sep 2024 12:28:02 +0000
ROA not after:            Tue 02 Sep 2025 12:33:02 +0000
asID:                     268858
IP address blocks:        45.174.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c2:fa:e2:13:ed:1e:db:bf:60:76:87:de:7c:ff:2d:21:e6:39:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC898E59AFA51913FC6E858E5AF519E53687EE6
        Validity
            Not Before: Sep  3 12:28:02 2024 GMT
            Not After : Sep  2 12:33:02 2025 GMT
        Subject: CN=A1FAFA88D1465F14898692EF47D61FD4B45260C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:21:07:50:a3:3b:34:c9:f5:ab:cf:d5:be:
                    fc:b6:22:a8:fd:5e:6b:76:79:b9:c2:8a:50:f1:fc:
                    4f:dd:66:6c:b0:6a:b5:fc:20:8b:13:5e:16:28:20:
                    b5:33:58:29:9d:d7:d9:f0:41:63:86:4a:5d:b1:52:
                    40:6b:b9:ea:03:1a:2e:24:57:ea:08:d1:90:70:02:
                    fb:82:95:4f:fd:32:79:61:f6:e9:74:a0:b5:f0:fe:
                    96:79:98:ad:bf:e0:08:0f:39:bc:2b:97:e6:a5:c9:
                    bd:d8:c3:95:36:75:2f:9d:6f:30:0c:7f:12:97:98:
                    54:8e:9f:27:02:d2:80:00:9e:11:7e:51:61:f3:d1:
                    20:5a:47:66:87:de:a5:4d:7d:10:0c:e7:fb:13:b7:
                    63:e7:f3:dc:1c:2b:89:84:52:89:46:1a:5d:73:3d:
                    46:e8:cf:d2:fa:da:1b:41:4c:b2:d6:e8:fa:d9:c0:
                    d2:2b:d3:0c:e7:a6:8e:38:52:9f:f7:70:a6:43:08:
                    e9:75:b6:51:0f:6c:b9:4b:34:c1:6f:38:72:f0:d2:
                    8c:b2:b9:8b:be:4e:aa:de:9a:6c:e7:4a:ac:74:5f:
                    bb:3e:41:ed:2f:a7:4b:d4:16:9d:98:ad:64:81:99:
                    06:c7:34:52:f7:85:41:4f:90:7e:1d:d4:6e:2c:5a:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FA:FA:88:D1:46:5F:14:89:86:92:EF:47:D6:1F:D4:B4:52:60:C5
            X509v3 Authority Key Identifier:
                keyid:EA:C8:98:E5:9A:FA:51:91:3F:C6:E8:58:E5:AF:51:9E:53:68:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/EAC898E59AFA51913FC6E858E5AF519E53687EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC898E59AFA51913FC6E858E5AF519E53687EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/34352e3137342e3136312e302f32342d3234203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:b2:f8:fb:00:d8:5d:71:77:42:56:15:ec:74:a5:8a:ce:
         e3:60:d3:d2:6c:cf:f0:f0:7d:4e:81:07:a3:46:8b:4f:7b:72:
         27:2b:65:d7:71:d6:8c:75:8a:93:bd:56:2f:64:7a:f1:a3:12:
         b2:73:67:44:46:22:2c:58:6b:60:dd:27:d5:08:73:6b:0c:aa:
         53:db:e5:39:ac:20:a6:eb:50:f3:8d:7d:2a:60:28:33:f1:83:
         af:3e:cb:9a:9a:ee:c5:35:45:fd:74:48:b1:ff:70:5f:4d:4d:
         ad:fa:f5:27:83:93:62:03:30:42:02:20:c9:1b:02:8d:47:7e:
         90:2f:55:c0:22:b8:04:5f:49:da:f2:aa:2b:8d:db:7c:10:4f:
         ad:a5:a7:b3:d5:71:82:b4:b0:0c:bd:52:21:d4:0e:ca:5c:9c:
         23:7f:f8:2b:da:61:24:9d:bc:14:48:ca:c9:4d:14:c8:d2:ba:
         b4:ba:fb:34:f7:5f:a0:89:ae:42:04:23:a5:4e:44:46:32:d6:
         a1:48:e9:e3:cb:d8:a1:d8:9b:f6:50:00:48:f7:e3:ff:4e:c8:
         06:77:fa:59:07:13:ec:81:36:fc:17:ef:81:66:68:9e:e1:e6:
         0a:ba:da:e1:10:19:31:61:ca:0a:a8:47:63:e7:9e:68:f2:11:
         2a:07:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:16:47 2025 by rpki-client