Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0/34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa
File:                     34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (raw, json)
Hash identifier:          0Z8WRZHuLwe0baTv6mkeTd0TrolCEzTQ31zPuxNZjzE=
Subject key identifier:   D7:4A:0B:00:2A:C8:3F:56:9A:11:0C:C1:6E:D3:50:DF:59:CA:81:1D
Certificate issuer:       /CN=7C0967496D9B879D984F400EFDAE9073C30F0EBD
Certificate serial:       1F07C88AEEBC9BB8940B20332E6D14066FFD2C49
Authority key identifier: 7C:09:67:49:6D:9B:87:9D:98:4F:40:0E:FD:AE:90:73:C3:0F:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C0967496D9B879D984F400EFDAE9073C30F0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0/34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa
Signing time:             Sat 17 Feb 2024 19:59:56 +0000
ROA not before:           Sat 17 Feb 2024 19:54:56 +0000
ROA not after:            Sat 15 Feb 2025 19:59:56 +0000
asID:                     268281
IP address blocks:        45.237.140.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:07:c8:8a:ee:bc:9b:b8:94:0b:20:33:2e:6d:14:06:6f:fd:2c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C0967496D9B879D984F400EFDAE9073C30F0EBD
        Validity
            Not Before: Feb 17 19:54:56 2024 GMT
            Not After : Feb 15 19:59:56 2025 GMT
        Subject: CN=D74A0B002AC83F569A110CC16ED350DF59CA811D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:b3:c1:af:c0:1a:b3:db:c2:a1:32:06:56:
                    e5:f5:c1:c1:53:8c:ab:07:48:aa:5e:14:d5:7a:ad:
                    af:75:d6:61:5e:2e:3b:c5:b2:a8:61:3e:81:36:d8:
                    11:72:d3:90:82:e0:95:a7:a2:d1:e4:6b:72:ed:97:
                    14:fd:f3:61:62:aa:33:33:eb:83:ca:68:0f:76:43:
                    69:92:d6:e1:17:94:fd:4e:48:ee:8c:5b:a4:0d:73:
                    d1:e0:7d:14:1d:50:e8:60:2f:f3:6c:60:9a:41:c6:
                    d4:6e:2f:ed:6f:68:46:75:c5:80:5b:f7:51:58:99:
                    96:a7:26:e4:60:49:4b:ee:e8:4c:59:5a:ef:f7:7c:
                    c6:5d:97:a6:39:ca:e6:18:0b:ed:cc:d3:99:b0:ba:
                    0b:a9:ad:1b:68:6a:7e:97:a1:24:1a:ba:63:6a:c1:
                    e6:a5:97:2d:8a:23:23:45:b9:42:65:15:ce:a0:21:
                    f2:a7:00:ff:5e:cc:64:51:0c:4e:40:50:c2:4b:9d:
                    d7:c7:c9:5b:76:ad:ae:90:de:de:84:a8:97:08:4b:
                    52:5b:41:38:47:80:48:a4:ea:9c:ce:fb:5c:8c:2c:
                    7c:d1:3c:b1:7a:c5:03:6f:93:e4:bf:cf:39:fc:a4:
                    38:ae:8e:d4:60:56:39:50:ec:e4:b8:fc:6b:bf:09:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4A:0B:00:2A:C8:3F:56:9A:11:0C:C1:6E:D3:50:DF:59:CA:81:1D
            X509v3 Authority Key Identifier:
                keyid:7C:09:67:49:6D:9B:87:9D:98:4F:40:0E:FD:AE:90:73:C3:0F:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0/7C0967496D9B879D984F400EFDAE9073C30F0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C0967496D9B879D984F400EFDAE9073C30F0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0/34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:92:07:e6:46:20:3f:d1:1f:0d:a3:17:94:c4:72:7f:6e:73:
         d5:3a:6e:af:3b:1e:54:03:e7:e5:b3:d3:f2:82:eb:7b:c7:73:
         0c:76:eb:1c:17:c6:93:e5:ce:0a:8c:6c:46:d9:6d:11:8d:1a:
         27:d8:ce:3f:73:fb:53:77:90:1a:7e:47:a2:d5:28:41:d0:0e:
         14:b8:e7:e5:fd:9a:50:ea:a6:a9:2e:db:89:6b:04:31:05:1e:
         f6:fd:cf:ba:54:70:13:7d:4f:f2:a8:2e:d3:ee:87:b7:78:93:
         5e:dd:5f:38:ca:2e:69:fb:3e:88:2c:39:2d:08:d8:55:4c:0b:
         bb:56:f2:d4:62:56:bf:90:52:8d:3d:1b:a5:fa:78:c5:2d:9d:
         ae:8d:3f:ca:2c:0f:17:f3:c6:73:e9:01:43:dd:42:5d:ee:b7:
         bb:7f:45:a8:2d:09:50:8b:ff:8c:e4:38:cf:b7:11:b1:31:e5:
         9f:7f:1f:66:67:0f:b5:62:5b:da:64:8e:8d:dc:20:05:62:69:
         9c:db:5d:40:04:11:9c:b5:f7:49:71:45:25:5c:f4:3b:39:8d:
         b4:31:49:e5:28:d7:42:5e:51:a6:97:7d:65:62:65:af:d4:4b:
         a2:c5:9b:67:e3:55:d7:40:2a:91:1a:86:cb:62:81:cb:41:58:
         85:cf:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:17:58 2025 by rpki-client