Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa
File:                     34352e3136352e39312e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          YbXv0WT7u2N3fydqWKXlPW+B85+UABQPzeH47c8BA0U=
Subject key identifier:   F4:A5:35:61:84:74:C1:DF:C8:C6:90:6D:6E:94:B3:A5:48:B9:00:CA
Certificate issuer:       /CN=3225A9367BE412857B6DFF323F2D20F155EF273C
Certificate serial:       5ADFFBB577CE511308AFA755768BEB0D49407B8E
Authority key identifier: 32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa
Signing time:             Tue 05 Dec 2023 15:12:23 +0000
ROA not before:           Tue 05 Dec 2023 15:07:23 +0000
ROA not after:            Tue 03 Dec 2024 15:12:23 +0000
asID:                     264479
IP address blocks:        45.165.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:df:fb:b5:77:ce:51:13:08:af:a7:55:76:8b:eb:0d:49:40:7b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3225A9367BE412857B6DFF323F2D20F155EF273C
        Validity
            Not Before: Dec  5 15:07:23 2023 GMT
            Not After : Dec  3 15:12:23 2024 GMT
        Subject: CN=F4A535618474C1DFC8C6906D6E94B3A548B900CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:8f:87:74:83:93:d6:e9:5e:68:57:d2:fe:
                    e3:15:f0:22:59:44:75:76:9c:32:72:68:e0:a0:d9:
                    91:82:49:3a:92:dd:73:11:71:db:3b:c4:f9:e3:7c:
                    9f:80:d0:e6:09:ca:55:fd:19:3c:0f:e4:43:29:0c:
                    dc:e9:d1:af:1f:0b:7f:8a:88:ec:67:c1:57:fa:20:
                    4e:25:b5:2d:12:95:2d:fc:6a:8a:bd:3c:48:b9:8a:
                    06:ba:04:27:b5:73:d6:e2:d2:4f:bf:c8:9b:c7:e5:
                    bb:02:cf:5b:6b:08:ad:f3:a2:8a:cb:f9:c9:bb:bd:
                    66:5e:05:f7:9b:cc:70:61:26:20:28:cf:cc:b7:f1:
                    19:bd:c3:9d:88:a4:38:6c:d6:83:2c:95:60:c4:34:
                    0b:82:4a:b6:6f:17:09:56:bd:2c:a7:da:f3:19:1d:
                    07:f3:b5:7d:b8:da:74:3b:ce:92:12:ff:6b:2a:5a:
                    f3:55:b0:c4:92:f1:1d:4a:03:ff:1f:67:2d:fe:bd:
                    ec:c0:48:a4:4c:90:4c:00:f0:0b:fc:92:ff:d3:b2:
                    f1:40:83:fd:4a:7a:78:3f:94:aa:d6:10:22:c0:d3:
                    40:78:d2:dd:a6:20:4d:91:12:91:fe:3c:e8:f1:d8:
                    50:ae:6e:7a:e2:c3:69:59:3e:7e:96:cb:ec:e2:2b:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A5:35:61:84:74:C1:DF:C8:C6:90:6D:6E:94:B3:A5:48:B9:00:CA
            X509v3 Authority Key Identifier:
                keyid:32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3225A9367BE412857B6DFF323F2D20F155EF273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/34352e3136352e39312e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:27:08:3d:64:4d:d8:fc:04:a0:ba:74:24:45:b7:e7:6e:24:
         56:ac:5d:1d:8e:fa:b5:c0:5f:e0:f7:d9:72:bd:0f:3d:93:e5:
         c6:e1:20:1e:bf:07:16:cb:6e:69:6e:ab:22:43:00:e2:70:62:
         1d:f6:e3:70:22:8e:e1:cd:81:a0:37:29:83:0e:84:7b:a4:53:
         68:fc:05:6c:cc:4a:9a:34:1b:11:0f:a1:5f:33:1f:79:d8:4f:
         0a:ab:cb:7f:c7:f9:c7:f8:24:4d:97:c5:09:03:ea:70:6b:b5:
         d9:0c:a8:43:e2:3b:81:af:b4:f7:ff:d2:ba:82:13:22:3b:b1:
         ba:54:36:df:d1:df:30:2f:8c:80:b7:68:5a:5e:a5:ce:e9:1f:
         07:03:9c:5b:11:d5:8d:04:5a:7e:24:3f:c3:79:8c:c0:11:e2:
         c3:c7:89:63:32:4b:e6:6d:11:45:9a:1b:be:7f:ee:21:7b:a0:
         a0:8d:8c:99:93:84:0d:8b:86:b0:2d:b0:19:72:ab:c2:02:cf:
         3f:91:ec:06:27:b2:21:7e:10:5b:0b:01:5a:0b:c2:7d:ae:9a:
         8a:c6:3e:7e:ca:2f:b1:be:14:6f:b4:01:f2:c5:0e:43:7e:b3:
         28:ad:30:86:11:ae:ae:dc:89:5d:a1:27:ca:2e:1d:e6:3f:a5:
         8d:be:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:42 2025 by rpki-client