Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230372e302f32342d3234203d3e20323638393231.roa
File:                     34352e3137352e3230372e302f32342d3234203d3e20323638393231.roa (raw, json)
Hash identifier:          vzqPZ85RQlWy4+Z/7UNQbL28imnmnINn0jEQkVy2bJU=
Subject key identifier:   09:02:5C:8A:77:BD:CC:99:F6:B0:03:BE:CE:7A:14:27:25:F2:11:6F
Certificate issuer:       /CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
Certificate serial:       5F34606FE0F0B80A991621E714098D8DA0704835
Authority key identifier: BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230372e302f32342d3234203d3e20323638393231.roa
Signing time:             Wed 28 Feb 2024 19:20:21 +0000
ROA not before:           Wed 28 Feb 2024 19:15:21 +0000
ROA not after:            Wed 26 Feb 2025 19:20:21 +0000
asID:                     268921
IP address blocks:        45.175.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:34:60:6f:e0:f0:b8:0a:99:16:21:e7:14:09:8d:8d:a0:70:48:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
        Validity
            Not Before: Feb 28 19:15:21 2024 GMT
            Not After : Feb 26 19:20:21 2025 GMT
        Subject: CN=09025C8A77BDCC99F6B003BECE7A142725F2116F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:59:83:88:33:57:58:20:62:e3:66:87:b0:
                    33:f3:2d:fe:d6:37:4b:8f:8d:c9:97:26:02:e6:4b:
                    a1:cf:da:95:b4:51:26:08:b6:7d:5d:ae:ef:06:f5:
                    a4:c2:1f:48:ab:cb:d0:8d:63:d5:40:8f:f1:48:3b:
                    4a:0e:7f:e7:c0:40:45:5b:d3:1c:af:8a:91:3e:4c:
                    6e:96:2c:97:aa:29:fe:6c:04:50:e7:e1:ce:e0:c4:
                    4b:1e:7a:ee:da:b4:de:b4:5a:83:0c:46:08:36:c2:
                    53:85:d1:15:82:11:f2:10:86:9f:c2:da:15:02:b3:
                    da:74:78:e5:38:06:ec:68:bd:a8:f0:26:f8:90:25:
                    cb:0e:c5:13:1c:d9:a3:51:74:4a:8d:ab:aa:33:bc:
                    c5:26:2e:6a:bb:a6:17:d3:18:89:00:dc:13:2c:5a:
                    bd:75:fb:31:89:0f:9f:6b:42:4d:00:37:7f:34:37:
                    de:7a:9a:04:5d:64:97:0a:56:ac:8b:f1:86:a8:12:
                    52:92:d1:a9:be:16:0b:0f:98:ca:fb:6f:3c:43:e8:
                    69:86:b4:9d:24:ec:44:1c:37:35:86:d7:d3:0a:52:
                    01:a2:6f:d7:28:d6:b7:4d:b2:b8:be:c5:7a:9e:20:
                    a3:9b:49:47:91:c3:72:a3:96:cb:0a:70:c5:40:28:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:02:5C:8A:77:BD:CC:99:F6:B0:03:BE:CE:7A:14:27:25:F2:11:6F
            X509v3 Authority Key Identifier:
                keyid:BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230372e302f32342d3234203d3e20323638393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:07:c9:9a:fd:36:3a:c3:f6:b4:d2:3b:4d:29:b9:7f:ce:d8:
         43:1a:7e:81:e1:d7:c3:98:32:0b:bf:d1:9f:7e:42:39:ca:a5:
         60:94:f3:c8:c2:c8:84:17:8e:8b:8e:a3:c5:d0:e2:97:c0:66:
         f6:cd:ea:22:41:9d:31:a0:43:7e:33:05:ba:fb:d9:45:21:47:
         c0:a4:d5:4c:b7:1c:98:8f:d8:e5:6b:59:06:fb:6e:7f:0a:b3:
         01:2d:5f:f4:23:ae:23:14:a5:1a:b8:1e:24:09:7d:30:d5:b1:
         27:5f:33:c6:c8:22:9f:ed:9a:57:4e:3c:1f:f9:e6:0a:26:f0:
         33:13:dd:56:6b:3f:af:7c:60:ff:85:6e:06:19:0e:1e:35:75:
         b0:e9:f8:23:ef:05:42:52:1b:de:cc:0b:57:6c:15:d5:05:7d:
         d9:aa:28:06:32:d7:f6:8f:54:0c:ed:a4:82:b6:6f:24:14:a2:
         6a:0c:a4:7c:ce:93:33:d2:35:2c:bb:fb:0a:af:40:b6:86:7b:
         1d:bd:ca:81:b2:ac:32:08:17:86:cd:b7:a5:e6:39:29:50:99:
         e7:24:1d:78:1a:cc:4d:06:32:e9:45:16:18:7a:5c:f2:12:1a:
         ae:a5:43:06:15:ac:83:98:c7:28:4e:0c:15:47:cf:c3:3e:14:
         8a:00:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:42:46 2025 by rpki-client