Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39342e302f32342d3234203d3e20323638353137.roa
File:                     34352e3136322e39342e302f32342d3234203d3e20323638353137.roa (raw, json)
Hash identifier:          FAN5bbZNbrOHmHSFATttwi1fwHIbgMylKEInxtTY0LI=
Subject key identifier:   FA:C2:D5:BB:BE:14:1A:1F:60:67:A1:19:EB:07:70:1D:0D:FE:39:88
Certificate issuer:       /CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Certificate serial:       654018040133283C5D82056A063BE8C9B3CCE08E
Authority key identifier: D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39342e302f32342d3234203d3e20323638353137.roa
Signing time:             Thu 11 Apr 2024 03:02:36 +0000
ROA not before:           Thu 11 Apr 2024 02:57:36 +0000
ROA not after:            Thu 10 Apr 2025 03:02:36 +0000
asID:                     268517
IP address blocks:        45.162.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:40:18:04:01:33:28:3c:5d:82:05:6a:06:3b:e8:c9:b3:cc:e0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D029A3E7478998493D96D0D6B9C212CDC5530659
        Validity
            Not Before: Apr 11 02:57:36 2024 GMT
            Not After : Apr 10 03:02:36 2025 GMT
        Subject: CN=FAC2D5BBBE141A1F6067A119EB07701D0DFE3988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b5:24:f0:b8:10:57:7f:dc:5a:b8:fe:ec:f1:
                    7e:6f:9c:77:18:dd:ac:82:dc:a8:7a:c6:cb:a1:0b:
                    89:0a:18:1f:d2:0c:64:fe:f5:a4:e2:b7:a3:60:0f:
                    b5:2c:69:7b:ce:5b:00:ce:f7:1a:75:89:c1:3d:bc:
                    f2:f3:aa:37:c3:96:6a:8f:fc:a7:0c:15:56:c2:ee:
                    c2:bc:4c:5a:27:6d:6a:bb:39:20:2e:fe:38:28:7f:
                    33:2b:6e:1e:a0:41:df:f7:50:a5:bc:2e:a6:43:db:
                    fb:f3:25:40:99:fd:92:86:97:a5:76:19:f0:2d:32:
                    26:1a:6b:75:11:9e:08:36:96:63:07:32:c6:60:c0:
                    be:58:69:dd:09:ea:ed:29:0f:95:2c:62:48:e2:a1:
                    7d:86:63:e9:1a:df:44:cb:c5:d7:26:aa:65:4f:f6:
                    af:bc:1e:f0:31:d5:85:be:53:1f:3d:e7:94:d0:ce:
                    ea:ac:cb:db:56:a1:25:6a:20:dd:7d:cf:34:76:bb:
                    ac:4e:91:6b:43:03:76:9a:47:23:7b:20:2b:3a:8d:
                    f5:21:03:00:70:06:0c:1b:e6:24:48:af:ec:d6:5c:
                    6e:56:0e:b9:c6:1f:47:ee:b9:6c:14:06:ca:6f:97:
                    de:f2:1c:4e:55:cf:d2:85:bb:1a:1b:73:d9:7a:ba:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C2:D5:BB:BE:14:1A:1F:60:67:A1:19:EB:07:70:1D:0D:FE:39:88
            X509v3 Authority Key Identifier:
                keyid:D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/D029A3E7478998493D96D0D6B9C212CDC5530659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39342e302f32342d3234203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:1c:eb:d0:88:7c:37:18:07:86:97:70:1a:69:bc:d9:de:9c:
         c6:43:91:e7:be:4a:be:e1:b7:a8:35:26:5e:f1:2c:68:c2:63:
         4a:3b:09:ce:fe:66:86:01:75:86:0f:82:13:3e:c4:1d:c2:ab:
         1e:aa:e0:8f:92:77:25:77:b8:11:c5:da:7a:85:6b:56:b8:44:
         25:9c:d5:9b:a0:0b:23:e0:52:ef:48:b7:39:b1:b0:16:4d:d0:
         c5:03:fe:83:5b:97:f7:9c:1b:28:41:f1:34:39:8f:70:fc:97:
         c3:50:6e:34:0f:fc:68:49:0a:da:6b:f0:83:d0:72:65:80:74:
         b8:04:1f:e5:ba:b2:5e:80:8a:42:4f:98:14:00:3c:1d:32:50:
         a3:d3:5a:73:bf:af:ec:b6:31:da:8f:9f:7a:3d:09:0f:6d:6d:
         5f:b2:a0:6a:db:ad:32:97:5c:34:b1:a7:6e:51:34:19:42:24:
         c9:27:e9:b1:91:91:a1:fb:b7:a3:5d:f1:e6:a2:e5:fc:80:af:
         bc:a0:49:70:aa:ac:cf:aa:27:e6:e9:9e:e0:11:86:3d:22:b3:
         3e:2a:df:2e:0c:68:bc:9e:8d:57:1b:3f:4f:1b:d2:81:5b:29:
         dd:30:e2:f2:04:e0:dc:fa:1e:d1:e4:d4:d3:01:b7:25:8b:26:
         77:34:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:28 2025 by rpki-client