Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e34392e302f32342d3234203d3e20323637393532.roa
File:                     34352e3136362e34392e302f32342d3234203d3e20323637393532.roa (raw, json)
Hash identifier:          iIZ3EIKBo5K1rugfC1yc9seKpr4JI6Ze3GvV04LbJtE=
Subject key identifier:   43:5F:68:63:05:EE:91:88:BA:02:A5:E2:D2:F3:94:87:7C:55:23:5D
Certificate issuer:       /CN=1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332
Certificate serial:       7B9F5F083D9BC57200C2EE35BDEA2F55BF645902
Authority key identifier: 1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e34392e302f32342d3234203d3e20323637393532.roa
Signing time:             Thu 04 Apr 2024 03:00:19 +0000
ROA not before:           Thu 04 Apr 2024 02:55:19 +0000
ROA not after:            Thu 03 Apr 2025 03:00:19 +0000
asID:                     267952
IP address blocks:        45.166.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9f:5f:08:3d:9b:c5:72:00:c2:ee:35:bd:ea:2f:55:bf:64:59:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332
        Validity
            Not Before: Apr  4 02:55:19 2024 GMT
            Not After : Apr  3 03:00:19 2025 GMT
        Subject: CN=435F686305EE9188BA02A5E2D2F394877C55235D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:04:c9:17:a7:1d:56:a8:f4:a9:8a:ae:75:35:
                    ab:98:b5:52:04:d2:53:5e:bb:c2:04:96:2f:2d:2b:
                    4f:54:41:36:99:6d:bc:a2:bb:12:c2:7a:cb:8e:68:
                    f6:f4:b0:65:50:e3:3d:bc:5a:91:80:1d:dc:91:f3:
                    46:3c:27:76:f6:23:fe:a2:1a:a8:2a:b7:da:1f:07:
                    e1:32:53:ea:11:ad:99:00:3e:91:e8:8a:d1:d1:c2:
                    e3:ed:57:13:8b:fc:ed:3b:40:5b:a6:8c:dd:b1:0e:
                    35:b2:a9:f8:2d:ec:95:84:13:2b:43:46:dc:7a:7c:
                    09:07:97:5c:0b:47:24:fc:d6:e4:99:55:7a:45:6c:
                    d7:a0:06:7c:af:ff:8b:bd:5d:35:23:d1:2f:2d:db:
                    f3:9e:4c:8b:bc:6c:ad:f2:0a:2e:88:4e:e5:ea:ea:
                    3f:b1:11:fb:34:1c:b4:0f:0d:71:b8:f5:3f:68:70:
                    ae:44:59:32:70:e8:d4:a2:0c:55:5f:af:b6:59:7c:
                    04:ee:b5:ee:7d:e5:de:a7:ec:3b:2c:e0:a3:ba:0d:
                    e1:e3:6f:0a:7d:e6:fe:08:99:6d:31:8f:4d:67:68:
                    d2:aa:18:e3:f5:db:a1:ab:af:dd:b7:81:19:5f:b2:
                    0e:2b:b9:ee:a2:17:a2:6d:7e:ab:23:f4:ee:4f:e7:
                    8d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5F:68:63:05:EE:91:88:BA:02:A5:E2:D2:F3:94:87:7C:55:23:5D
            X509v3 Authority Key Identifier:
                keyid:1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e34392e302f32342d3234203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:68:81:ac:c3:7f:60:df:eb:bf:01:0c:9a:a3:bd:57:75:3d:
         e2:e1:57:a9:98:0d:27:c8:d6:cf:57:65:fa:b4:be:6d:c4:48:
         43:a7:b9:c2:03:4f:c4:8f:fe:3d:c3:4c:3d:74:ef:61:ab:2f:
         22:be:b4:58:f2:45:34:ba:66:76:24:fb:6e:d7:4b:52:d0:b1:
         64:7f:ca:59:45:cd:f3:87:1d:91:ca:b3:31:f8:59:30:b0:87:
         2a:50:74:84:44:bf:30:e0:62:fd:52:2e:f4:72:84:73:0e:32:
         d9:cc:83:67:9a:89:5e:3d:0a:fd:a8:c3:80:2a:a8:6c:7a:f3:
         aa:2f:b5:3a:0a:9a:25:e2:34:aa:3a:1d:fe:d3:92:86:c3:13:
         c5:85:84:9c:ca:d2:d9:81:a1:c6:ca:fe:15:5a:b8:c5:f7:94:
         80:83:99:69:c8:a6:06:d8:fe:51:21:75:14:09:c4:ea:31:b2:
         71:20:2d:35:34:e6:b6:ad:29:99:f0:b7:3b:91:b9:98:04:bc:
         52:ea:0d:8f:89:3f:91:23:0c:da:25:78:a7:99:20:67:3e:68:
         05:74:e6:8a:a3:02:9b:3e:a8:21:47:e8:c8:fd:6e:0c:d0:78:
         60:24:60:bb:26:85:55:a8:a8:a7:32:33:d5:7a:98:29:ac:8a:
         ff:4a:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:04 2025 by rpki-client