Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa
File:                     34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa (raw, json)
Hash identifier:          bi9SBiZ7agWyuh7LgZYaumkN0ID4/ghJIxJFH7NVsCg=
Subject key identifier:   4F:3B:86:EC:26:29:20:3B:C6:D7:BF:00:CE:1B:AA:B3:A3:1F:A1:DC
Certificate issuer:       /CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
Certificate serial:       610994BF70F2AB101572093CAC52BCD49A8A06CA
Authority key identifier: 0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa
Signing time:             Mon 04 Dec 2023 02:41:18 +0000
ROA not before:           Mon 04 Dec 2023 02:36:18 +0000
ROA not after:            Mon 02 Dec 2024 02:41:18 +0000
asID:                     269096
IP address blocks:        45.175.248.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:09:94:bf:70:f2:ab:10:15:72:09:3c:ac:52:bc:d4:9a:8a:06:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
        Validity
            Not Before: Dec  4 02:36:18 2023 GMT
            Not After : Dec  2 02:41:18 2024 GMT
        Subject: CN=4F3B86EC2629203BC6D7BF00CE1BAAB3A31FA1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:68:84:9a:70:ca:c5:9e:65:e6:69:e3:67:
                    67:be:d0:f0:4f:09:27:ef:74:4b:bd:b8:d1:be:ac:
                    36:a4:43:dd:69:64:69:aa:61:37:1d:9a:f7:76:16:
                    4a:a3:b6:aa:2a:07:cb:71:a6:52:2a:53:49:da:c7:
                    13:b4:f2:af:a6:aa:55:d1:20:49:41:c1:97:36:f0:
                    a8:bb:25:78:dd:9c:4e:6e:31:8a:f7:5c:d2:1c:10:
                    2c:04:81:f5:1b:6f:e9:d5:8b:98:8a:df:ec:11:40:
                    96:68:dc:52:64:1b:a1:0b:79:0f:df:60:7b:79:a2:
                    f2:c2:2e:55:61:89:2e:6a:4a:f5:0f:e7:0e:f4:ee:
                    a3:92:1d:94:a2:06:f6:cd:b3:f8:66:1f:eb:0e:be:
                    92:e9:c9:e1:e8:0a:fc:62:24:69:72:3b:e5:d8:88:
                    dd:1b:2f:99:20:78:76:1e:36:5b:02:e9:ad:b2:ad:
                    be:1c:3a:c1:58:58:18:fe:fa:27:7f:ce:62:55:30:
                    de:05:ee:e8:01:ba:e7:64:f8:92:f6:60:db:6d:ac:
                    07:bb:06:3a:d3:ee:57:22:65:eb:a6:2c:a4:2f:f0:
                    50:9e:3a:f0:04:14:e8:46:61:64:c7:a1:f6:f0:2c:
                    11:8a:01:ff:21:f1:48:c2:99:df:13:b4:b5:2a:a5:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3B:86:EC:26:29:20:3B:C6:D7:BF:00:CE:1B:AA:B3:A3:1F:A1:DC
            X509v3 Authority Key Identifier:
                keyid:0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:70:34:57:d1:fb:57:f1:0b:e2:81:b5:9a:2d:fe:73:a8:08:
         6d:02:c2:64:c9:83:eb:70:d9:db:a0:bc:0b:78:c2:5a:86:2e:
         34:fc:d7:3d:93:ba:65:1a:88:ee:5f:de:53:27:3a:87:fe:d1:
         67:e6:d0:be:2a:30:b3:71:9d:32:da:61:84:a8:44:30:f1:ae:
         f6:c8:ec:36:8f:76:89:7c:77:36:9a:c9:24:0a:6d:cc:d9:e5:
         41:a3:b8:a6:fb:11:b8:a3:55:c8:71:3b:75:ae:be:38:cc:fb:
         38:0d:50:ae:6e:ac:90:25:72:71:86:48:de:ba:a2:69:38:81:
         cd:ad:60:1c:b6:4e:95:9d:d1:dc:e3:16:21:e9:5d:79:c0:38:
         5a:35:5a:f8:9d:9f:ad:f5:26:61:e4:ce:ef:2f:d0:00:ec:78:
         f3:a9:60:f9:1d:17:80:9f:1e:67:88:41:8f:25:c0:f8:7c:16:
         3f:21:a2:45:ac:55:47:3a:90:76:f2:f9:39:e1:c5:25:c1:51:
         e6:ca:fa:9f:16:a2:40:de:ea:ce:83:46:b4:72:53:82:99:33:
         2a:af:9e:1d:32:d2:de:25:eb:e6:30:ac:92:f4:14:60:bd:e1:
         c6:58:92:42:b5:97:89:eb:11:e3:64:5c:83:46:67:e3:66:bf:
         07:02:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:55 2025 by rpki-client