Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e35302e302f32342d3234203d3e20323637393532.roa
File:                     34352e3136362e35302e302f32342d3234203d3e20323637393532.roa (raw, json)
Hash identifier:          brCTQO0s7jNtFhn6BhML4kjzfnABVt5noQdvxUp2gHw=
Subject key identifier:   2A:54:DA:4A:8D:9F:E8:31:8F:15:9A:09:4C:9E:DE:49:E4:1B:CD:48
Certificate issuer:       /CN=1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332
Certificate serial:       23A0FF4A725E21289BDE36C5083D0694ECBD76A0
Authority key identifier: 1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e35302e302f32342d3234203d3e20323637393532.roa
Signing time:             Thu 04 Apr 2024 03:00:19 +0000
ROA not before:           Thu 04 Apr 2024 02:55:19 +0000
ROA not after:            Thu 03 Apr 2025 03:00:19 +0000
asID:                     267952
IP address blocks:        45.166.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a0:ff:4a:72:5e:21:28:9b:de:36:c5:08:3d:06:94:ec:bd:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332
        Validity
            Not Before: Apr  4 02:55:19 2024 GMT
            Not After : Apr  3 03:00:19 2025 GMT
        Subject: CN=2A54DA4A8D9FE8318F159A094C9EDE49E41BCD48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:84:6a:33:58:8d:12:bd:57:5f:8e:a5:9d:4b:
                    30:38:6e:e7:36:de:a6:ee:7d:8d:68:68:58:81:10:
                    1d:45:e7:c6:b9:cf:d9:59:96:3a:29:61:af:32:a5:
                    6d:66:28:fa:9d:4b:9a:2b:83:06:e6:2f:08:6d:c8:
                    dc:12:01:b5:f8:3b:2e:53:3a:0d:07:11:86:75:29:
                    21:45:be:33:a7:a2:eb:fa:2d:13:34:41:f6:d2:56:
                    4b:50:24:ce:62:4c:c9:48:27:55:5e:eb:bb:93:da:
                    1e:84:51:22:06:62:c5:05:e0:f6:a0:87:28:9e:1c:
                    36:87:40:9c:b7:f8:9d:cf:f7:01:95:b5:2a:89:b7:
                    ea:4c:fd:b1:1b:b7:e6:1f:31:12:a1:1d:ad:53:02:
                    60:b8:b8:fa:c9:70:05:64:3b:ba:42:de:ad:13:06:
                    8a:50:57:07:43:2f:74:72:2f:d8:0c:06:5d:b8:dd:
                    31:ae:27:92:9e:c7:22:20:3a:21:be:45:59:ce:76:
                    07:85:6a:83:8a:39:b4:4e:12:e8:09:80:5a:2d:22:
                    e1:4c:30:32:bd:29:3b:6f:c2:4b:44:5b:5c:c3:3b:
                    6f:1c:db:57:89:d8:95:0b:6b:99:10:e4:68:ff:84:
                    75:3b:56:89:9e:a9:2a:99:50:d3:c5:4a:c2:04:d8:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:54:DA:4A:8D:9F:E8:31:8F:15:9A:09:4C:9E:DE:49:E4:1B:CD:48
            X509v3 Authority Key Identifier:
                keyid:1B:CF:2B:03:81:F2:F2:C4:6F:0C:7F:24:ED:F7:CC:18:24:8A:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BCF2B0381F2F2C46F0C7F24EDF7CC18248AC332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/1/34352e3136362e35302e302f32342d3234203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:52:de:74:cc:bb:08:83:85:75:73:23:5a:4f:76:db:c2:14:
         16:5e:37:69:e6:8d:b9:f7:6f:b3:c8:03:97:93:19:ee:9f:e1:
         70:a6:ed:59:5e:8a:63:2b:53:a1:73:f5:66:aa:cb:17:cb:aa:
         29:65:e1:33:f8:35:01:39:fa:46:35:fe:c4:9f:bb:0c:eb:fb:
         65:c8:0b:79:6f:65:e5:ff:57:90:76:45:80:d0:f0:59:76:77:
         c0:cd:83:0b:7c:73:4b:ab:02:b0:79:bf:09:26:a9:1f:d6:8f:
         36:4d:ea:c3:89:ac:08:fc:38:95:45:02:9f:bc:0e:de:33:a1:
         3f:e9:9b:6b:97:94:61:b3:7d:28:28:c9:53:ed:98:87:36:27:
         d1:9c:a4:dd:13:4b:66:76:21:05:bc:13:bf:ee:84:01:2a:a7:
         b4:47:71:6e:8c:9f:34:76:f3:89:74:24:22:c8:06:94:3f:36:
         94:f4:12:33:d5:33:e8:20:a5:80:88:3f:e9:3b:aa:65:1a:c2:
         15:39:4e:43:43:03:cd:64:9e:1c:88:01:3d:25:60:6f:8f:2f:
         fa:fd:e8:12:ac:c9:fa:c6:3a:8c:e7:c5:c0:16:34:f6:71:7f:
         67:02:d0:61:7c:5c:ff:68:e2:1b:cc:b0:2c:e0:a5:3c:94:54:
         7f:23:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:25 2025 by rpki-client