Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33342e302f32342d3234203d3e20323639363635.roa
File:                     34352e3139312e33342e302f32342d3234203d3e20323639363635.roa (raw, json)
Hash identifier:          Htl8AEPE5/NS8gIsKoXMxXYSlwP9ySotOa3Pu3t0dSk=
Subject key identifier:   F9:FB:DA:C2:56:38:07:F9:64:01:D2:FE:83:76:B5:5B:6B:28:6A:53
Certificate issuer:       /CN=01E1936D951009EDC365E2731189930C5096C583
Certificate serial:       0FA572156E0EA1006C1077CD8FAA841FCE9C42B5
Authority key identifier: 01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33342e302f32342d3234203d3e20323639363635.roa
Signing time:             Mon 04 Sep 2023 17:50:43 +0000
ROA not before:           Mon 04 Sep 2023 17:45:43 +0000
ROA not after:            Mon 02 Sep 2024 17:50:43 +0000
asID:                     269665
IP address blocks:        45.191.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a5:72:15:6e:0e:a1:00:6c:10:77:cd:8f:aa:84:1f:ce:9c:42:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E1936D951009EDC365E2731189930C5096C583
        Validity
            Not Before: Sep  4 17:45:43 2023 GMT
            Not After : Sep  2 17:50:43 2024 GMT
        Subject: CN=F9FBDAC2563807F96401D2FE8376B55B6B286A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:0e:40:01:50:d8:ba:67:96:0a:cc:34:7c:
                    de:04:3f:3e:34:e1:11:15:22:31:34:d7:3c:ba:f6:
                    ed:6f:b5:fc:ce:e8:0e:c8:3b:d3:c2:b5:39:b7:0c:
                    bd:be:1c:9b:f3:14:0f:b2:4d:65:4d:a3:0f:2c:5e:
                    68:81:bc:50:34:25:3c:26:13:e9:14:61:0f:5d:66:
                    77:12:2a:25:78:7b:e8:e8:7f:51:64:23:e3:2b:0d:
                    b1:f7:45:09:c0:d2:ad:e8:42:3b:d7:6f:36:ec:cf:
                    6a:b6:83:94:d2:b7:c6:ff:12:40:31:f7:d6:92:57:
                    c4:9d:21:a6:d7:a5:eb:8b:5f:cd:33:1b:fd:41:d6:
                    b5:90:a2:81:d9:1a:2a:c4:1e:a6:7d:f5:d0:b3:1d:
                    02:18:02:9a:a4:41:92:fb:d2:dc:15:c8:d0:26:16:
                    80:f0:b3:d7:1d:34:3d:f9:0b:79:15:97:fc:c3:86:
                    64:fd:dd:10:52:d3:b2:c7:81:b9:75:51:d5:c9:9d:
                    47:13:a3:0c:a7:f7:54:f1:4c:7b:90:b4:a8:96:84:
                    10:0a:3d:e4:f9:cc:af:3c:38:66:56:8e:1c:99:b7:
                    21:69:29:1e:ab:3e:37:80:1d:d0:5d:0c:6c:09:b3:
                    ab:86:b5:ed:48:98:cd:ac:92:d0:39:48:f1:be:fb:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FB:DA:C2:56:38:07:F9:64:01:D2:FE:83:76:B5:5B:6B:28:6A:53
            X509v3 Authority Key Identifier:
                keyid:01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/01E1936D951009EDC365E2731189930C5096C583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33342e302f32342d3234203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e6:0c:e6:9a:cf:47:3c:35:f0:9d:32:fc:dd:82:81:22:34:7a:
         90:1b:86:57:38:74:db:48:c2:c3:55:82:f7:09:fe:33:a5:38:
         9f:f8:9b:d0:cd:3d:f9:71:c8:b4:f2:b5:2e:bc:05:49:18:8e:
         1c:50:a2:55:c8:03:f2:9c:67:e5:1c:2a:26:39:74:20:98:a9:
         95:33:b1:b4:3a:c4:e9:d1:71:48:45:e4:07:8a:ec:27:69:e6:
         7c:5d:0e:e3:f3:16:31:95:e7:14:e1:ac:af:ed:35:0c:c4:0b:
         8b:99:a5:47:76:5b:95:70:84:92:b6:2c:62:93:37:74:7c:59:
         4c:e7:fa:19:fb:24:c3:b4:98:b8:88:91:bf:c2:35:9f:62:1b:
         47:14:6d:03:74:cc:f4:02:86:79:56:3a:2b:7a:d6:be:7a:84:
         b3:39:5c:84:48:80:88:93:40:67:79:20:63:0a:60:7e:6d:80:
         db:d8:7b:fc:59:0c:3c:0d:61:71:9c:25:ab:e7:a2:29:25:3e:
         f4:d3:3e:7f:1a:a5:a5:f9:00:b4:c6:c7:38:3a:c5:49:ca:c3:
         f5:cc:65:62:1f:5c:cd:dd:5b:c1:6d:f3:8e:53:d7:e9:10:c0:
         2d:7e:7c:07:da:bf:d8:5a:e9:39:75:9a:da:04:e3:27:4d:dc:
         5c:ac:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:36 2025 by rpki-client