Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/34352e3137332e3234302e302f32332d3233203d3e20323638383435.roa
File:                     34352e3137332e3234302e302f32332d3233203d3e20323638383435.roa (raw, json)
Hash identifier:          PTs+yfciuM9h1jXAPoZ25Ip93E4fwmF/Bg9lvinNeWs=
Subject key identifier:   67:BC:54:B1:72:85:F8:0A:BB:DE:97:51:C3:0C:AF:27:6C:61:59:EA
Certificate issuer:       /CN=7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69
Certificate serial:       4CE3BC53AF20CA59A97E2A769D642C1462EEDCF0
Authority key identifier: 7D:8A:95:31:07:6B:16:11:BA:99:C6:F0:DE:67:D1:C2:3D:9D:4D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/34352e3137332e3234302e302f32332d3233203d3e20323638383435.roa
Signing time:             Tue 25 Oct 2022 14:00:00 +0000
ROA not before:           Tue 25 Oct 2022 13:55:00 +0000
ROA not after:            Tue 24 Oct 2023 14:00:00 +0000
asID:                     268845
IP address blocks:        45.173.240.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e3:bc:53:af:20:ca:59:a9:7e:2a:76:9d:64:2c:14:62:ee:dc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69
        Validity
            Not Before: Oct 25 13:55:00 2022 GMT
            Not After : Oct 24 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:4f:a9:91:b9:fc:f3:2d:b0:08:64:27:b7:
                    4f:ce:a3:73:b1:83:e3:a9:a0:62:25:6d:6e:85:67:
                    53:ce:1c:24:aa:d4:4b:4d:27:96:62:67:20:91:67:
                    46:68:ff:0e:61:2b:f7:89:c5:d3:43:cf:95:36:d5:
                    2f:f1:31:5e:06:03:63:0e:23:b3:9f:96:3c:84:15:
                    8b:fa:7b:6e:7e:56:1e:69:b2:6a:3b:1c:6b:a6:15:
                    31:6c:8b:8d:52:41:8f:fa:9f:28:24:64:ef:21:c4:
                    8f:40:4b:1f:d9:c5:96:71:3b:99:47:d4:0b:b9:c8:
                    b3:64:f3:e1:38:74:f2:bd:f2:86:7f:66:13:d8:e2:
                    e2:b4:7a:ed:f1:93:3f:ce:c7:25:f1:78:ae:d1:d5:
                    25:a9:d7:6b:7c:46:ed:4b:73:21:b7:a4:0d:30:18:
                    74:fb:ab:93:a2:6c:fa:ef:6e:a4:2e:17:7b:a5:e3:
                    57:d1:5c:e7:e5:d5:95:c3:1b:84:2c:56:ae:72:f1:
                    18:53:84:63:aa:ca:c4:b0:85:e1:f0:c1:49:78:81:
                    45:d0:c6:c4:7b:1e:d5:28:e2:80:8f:66:53:b0:7c:
                    73:68:ba:7e:1f:4c:93:9d:f5:36:76:74:88:22:96:
                    67:32:fd:9d:d9:3e:49:77:d5:0d:5c:fb:8a:16:2d:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BC:54:B1:72:85:F8:0A:BB:DE:97:51:C3:0C:AF:27:6C:61:59:EA
            X509v3 Authority Key Identifier:
                keyid:7D:8A:95:31:07:6B:16:11:BA:99:C6:F0:DE:67:D1:C2:3D:9D:4D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/34352e3137332e3234302e302f32332d3233203d3e20323638383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:6d:2a:d3:f9:72:db:e4:fa:44:84:4a:d2:9a:b7:0d:ae:e3:
         c6:83:f1:06:63:47:7e:5d:2f:c9:70:71:b3:0c:3a:53:e2:29:
         19:c5:2c:a0:84:b8:32:8e:1f:e1:2b:4e:63:bf:ed:b8:4f:52:
         4a:f4:6c:e1:03:28:da:48:53:fa:ec:22:75:53:b0:6e:24:5e:
         38:2c:9e:e3:c5:4d:6b:27:6f:6b:3d:d5:82:ea:48:5f:42:cd:
         f6:d1:54:d4:8c:b2:32:f5:bb:4e:87:3c:5b:aa:90:70:e1:8f:
         1d:41:0a:42:d4:ad:e0:44:5e:22:0c:1f:db:0f:7d:5e:e5:ef:
         e4:a5:95:af:ef:2a:4a:af:56:21:ee:7d:64:e8:1f:ca:7c:0f:
         2b:1e:2f:4e:48:ad:de:55:eb:5c:65:89:98:48:75:62:fc:72:
         49:67:a8:1e:6f:b4:eb:ff:ab:0f:a2:1b:70:55:c7:03:eb:a3:
         2b:d2:39:8d:7a:2a:54:ca:7e:e9:42:f1:4a:59:79:e0:b2:73:
         d1:32:ac:e8:ba:9a:7e:55:99:20:75:62:8d:c8:4c:bd:2f:be:
         96:59:3c:3b:7a:ca:31:47:00:0f:cb:c9:46:16:58:6d:b9:db:
         05:7a:09:ef:cc:13:03:27:0d:4c:66:9e:c7:f5:56:54:9c:8f:
         dc:cf:a2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:10 2025 by rpki-client