Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39322e302f32342d3234203d3e20323638353137.roa
File:                     34352e3136322e39322e302f32342d3234203d3e20323638353137.roa (raw, json)
Hash identifier:          p6/5/zPGzMCLy7LNJiGij8xKNbmn53nsw8r2EliP0jg=
Subject key identifier:   8A:3C:36:B2:39:D9:5C:D0:2F:BD:C0:45:3A:14:1E:96:D7:53:CF:C3
Certificate issuer:       /CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Certificate serial:       57EF923032EAC38C42576A271B936F1FCA541C01
Authority key identifier: D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39322e302f32342d3234203d3e20323638353137.roa
Signing time:             Thu 11 Apr 2024 01:29:39 +0000
ROA not before:           Thu 11 Apr 2024 01:24:39 +0000
ROA not after:            Thu 10 Apr 2025 01:29:39 +0000
asID:                     268517
IP address blocks:        45.162.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ef:92:30:32:ea:c3:8c:42:57:6a:27:1b:93:6f:1f:ca:54:1c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D029A3E7478998493D96D0D6B9C212CDC5530659
        Validity
            Not Before: Apr 11 01:24:39 2024 GMT
            Not After : Apr 10 01:29:39 2025 GMT
        Subject: CN=8A3C36B239D95CD02FBDC0453A141E96D753CFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:1a:a7:c8:ad:52:b9:25:2c:8d:42:15:56:
                    c6:b9:11:b6:f5:88:ba:91:96:91:f4:b1:79:25:a6:
                    f1:c3:a4:8e:04:5a:b0:bb:05:4f:18:51:03:f7:4c:
                    09:52:2b:79:44:ab:14:04:28:62:09:18:f9:33:a2:
                    57:70:e7:a5:08:9c:9e:10:75:bf:10:1c:70:98:ce:
                    2b:ee:a3:8c:5b:63:db:dc:4d:63:a2:ee:1e:13:3e:
                    e2:ee:93:72:f8:a0:2a:a6:a5:20:27:70:ec:d2:df:
                    6d:2a:a3:bf:7e:bb:33:35:35:f4:b1:f6:59:cb:e6:
                    7e:aa:6a:bf:2d:1a:83:4a:bf:10:37:89:b8:1a:89:
                    84:eb:3c:fb:c4:fb:52:48:8f:9e:b6:25:12:f0:9f:
                    ae:8b:65:af:ba:d1:2a:1e:dd:ca:a8:3a:69:88:8a:
                    fc:37:fb:2e:4a:43:85:84:9c:b6:1d:fd:8f:b2:4c:
                    26:8d:96:ab:d7:c2:e1:33:e3:74:dc:1b:91:0e:85:
                    35:9e:1b:ba:44:54:a3:7a:96:4b:2a:74:80:cf:40:
                    ad:40:57:71:de:ce:a6:af:a3:47:64:41:c6:0b:fb:
                    3f:3d:05:3f:d3:72:cf:70:45:ca:8c:84:bc:24:ce:
                    64:ef:4f:db:c5:c5:72:dd:d2:d4:61:61:5d:f5:67:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3C:36:B2:39:D9:5C:D0:2F:BD:C0:45:3A:14:1E:96:D7:53:CF:C3
            X509v3 Authority Key Identifier:
                keyid:D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/D029A3E7478998493D96D0D6B9C212CDC5530659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39322e302f32342d3234203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:87:cb:6c:05:d3:8d:bf:d1:e7:dd:a3:55:2f:53:65:90:ef:
         5f:35:1b:95:de:7f:b0:9e:22:a9:81:89:bc:c4:c0:54:c3:7f:
         9a:94:59:fa:e9:81:85:29:be:2f:6c:d6:a9:0a:ed:ad:b0:e2:
         5e:38:df:f9:c0:bb:6a:07:4b:3b:b2:fd:98:68:59:dc:45:49:
         b7:39:4c:d5:f5:53:91:44:45:a3:bb:96:ce:6f:c0:bd:5b:47:
         6e:d6:a9:8a:2a:ad:a8:4c:1d:96:72:dd:10:d9:fc:05:51:8e:
         fc:4a:37:b5:36:42:67:70:7c:b2:27:d5:20:67:b4:53:52:7a:
         1f:04:2d:c4:db:22:b8:73:7d:a4:f3:88:e0:48:7c:e7:ce:d9:
         6a:3a:01:f0:92:13:c5:9e:00:d9:a3:27:3a:1f:51:b5:d6:be:
         36:f3:e0:fe:1f:a0:67:67:bf:78:88:a9:d2:a6:b1:ea:e3:4b:
         0a:a4:8c:c6:99:dd:9d:3a:63:8e:36:a5:93:d5:2a:0d:0d:c3:
         5b:93:b5:48:c2:6a:80:da:c8:1f:05:26:fb:1a:20:5b:88:2f:
         9e:c8:51:f4:85:a3:ef:7c:14:5c:80:d6:a2:bc:f6:43:55:60:
         88:df:3d:1f:6b:c5:8e:4a:34:ff:e4:66:e3:e2:2d:1b:57:a7:
         51:cc:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:11 2025 by rpki-client