Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32322d3232203d3e20323638303335.roa
File:                     34352e3136382e31322e302f32322d3232203d3e20323638303335.roa (raw, json)
Hash identifier:          cgH8ARI4wSiFyrYKIe08kMHc0Ic7xZMUS9Uxl8CgEfo=
Subject key identifier:   37:50:C5:77:97:1D:9E:CF:5A:46:A4:88:CE:09:D1:09:35:11:28:4E
Certificate issuer:       /CN=15D66C82385E07A46724C3074293F737D556F1B3
Certificate serial:       4CCB8B6B8700355D5B14FE28B2F4E6721B82F563
Authority key identifier: 15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32322d3232203d3e20323638303335.roa
Signing time:             Thu 14 Dec 2023 13:31:31 +0000
ROA not before:           Thu 14 Dec 2023 13:26:31 +0000
ROA not after:            Thu 12 Dec 2024 13:31:31 +0000
asID:                     268035
IP address blocks:        45.168.12.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:cb:8b:6b:87:00:35:5d:5b:14:fe:28:b2:f4:e6:72:1b:82:f5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D66C82385E07A46724C3074293F737D556F1B3
        Validity
            Not Before: Dec 14 13:26:31 2023 GMT
            Not After : Dec 12 13:31:31 2024 GMT
        Subject: CN=3750C577971D9ECF5A46A488CE09D1093511284E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cf:a1:c3:cd:c3:a1:a1:51:bb:3e:6f:a9:18:
                    ad:92:99:32:bc:50:69:05:9d:02:f9:f0:a0:4a:bc:
                    32:9d:a1:cd:68:17:97:a3:4d:63:96:be:5d:0f:96:
                    f6:1a:b2:ba:02:3a:c8:7c:7a:82:c7:33:0f:44:09:
                    39:e6:b7:42:39:66:07:86:72:a0:c4:3a:4f:f5:e0:
                    30:82:41:8b:e4:b4:b2:d6:11:ac:c4:f1:bc:bb:c2:
                    cd:75:51:45:95:11:0d:1e:8c:83:39:8a:de:08:c4:
                    52:2f:ed:8a:31:c3:d0:0a:ee:2a:c4:78:ba:90:83:
                    fc:10:87:e2:13:8d:d4:f8:1b:04:c4:e2:ca:03:47:
                    09:63:da:7d:96:72:e7:80:33:e4:b9:b7:c5:65:da:
                    01:00:71:72:f2:fa:4b:66:6d:bf:47:99:33:4c:c8:
                    9c:bf:ce:6f:d8:dc:8e:76:c5:81:f4:de:35:d9:4e:
                    d5:70:aa:13:6d:31:54:d2:dc:24:17:e7:aa:98:7a:
                    be:94:e8:d8:a2:87:8e:a6:65:50:7f:ab:b8:3c:09:
                    83:b5:36:91:b2:0a:49:76:6a:dc:81:37:03:a3:aa:
                    1c:f0:c3:2b:85:95:0b:ba:4f:91:d0:21:8d:b8:7f:
                    c8:14:80:cf:bc:04:c6:62:9f:89:a9:4d:f4:5c:16:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:50:C5:77:97:1D:9E:CF:5A:46:A4:88:CE:09:D1:09:35:11:28:4E
            X509v3 Authority Key Identifier:
                keyid:15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/15D66C82385E07A46724C3074293F737D556F1B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32322d3232203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a0:fe:be:7f:c6:f6:86:80:1e:73:64:f3:51:1a:79:48:0b:
         63:d7:3c:8c:1f:97:25:68:3f:94:8a:3e:d6:3c:94:18:95:6d:
         db:80:9f:00:d8:38:c9:6b:ee:22:3d:37:21:53:c6:4b:93:7e:
         b3:07:bf:0d:bc:38:bd:2a:6b:b4:61:23:f4:96:09:d2:19:11:
         6e:5f:10:a1:49:5e:a6:0f:35:01:0b:af:3f:ed:2f:f1:c4:53:
         49:00:cf:2e:47:3c:03:cd:4c:91:00:01:c4:b3:04:d7:e0:d3:
         32:41:5c:bd:87:da:81:17:4e:85:a5:88:a8:de:64:b0:61:75:
         30:86:90:b8:83:42:0d:80:b1:d0:f4:24:bf:fd:29:56:a2:cf:
         f6:8d:31:ca:4e:84:21:94:7a:4b:70:f1:34:7d:58:00:3d:f8:
         76:3a:aa:cf:34:51:22:d6:0c:2e:4d:b3:e6:08:9a:f3:ca:41:
         64:f1:42:0e:75:e6:0c:91:98:b6:0c:ec:98:f4:c0:00:84:cc:
         45:6f:b2:3d:94:83:70:cf:54:80:2e:6d:68:fd:fc:1c:e6:04:
         16:59:a1:90:6f:01:b0:8e:5c:15:33:4e:8f:6d:c5:4a:6c:68:
         eb:29:23:6a:db:6e:7c:54:e1:f8:46:8d:00:57:cd:0c:0c:31:
         99:5d:39:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:32 2025 by rpki-client