Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32332d3233203d3e203631363231.roa
File:                     34352e3233352e3136302e302f32332d3233203d3e203631363231.roa (raw, json)
Hash identifier:          O7Lr+//KumugcIO4Ba58EGLYrE4WhD8+exQNNMKOvAw=
Subject key identifier:   24:E7:D6:81:E9:FC:09:86:0D:4F:92:D2:47:BB:61:06:5E:09:25:96
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       4E7C004446B9E5DF745D88AE6D0AE80371DF406E
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32332d3233203d3e203631363231.roa
Signing time:             Wed 20 Nov 2024 01:09:13 +0000
ROA not before:           Wed 20 Nov 2024 01:04:13 +0000
ROA not after:            Wed 19 Nov 2025 01:09:13 +0000
asID:                     61621
IP address blocks:        45.235.160.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7c:00:44:46:b9:e5:df:74:5d:88:ae:6d:0a:e8:03:71:df:40:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 20 01:04:13 2024 GMT
            Not After : Nov 19 01:09:13 2025 GMT
        Subject: CN=24E7D681E9FC09860D4F92D247BB61065E092596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:b2:96:e7:7c:9a:8b:42:8d:70:12:16:1b:
                    ab:30:4c:d0:ca:76:ec:10:c0:8a:f7:cc:af:64:bf:
                    e2:bd:78:e1:66:05:4d:78:6f:c7:f9:33:8a:f1:ac:
                    49:fa:23:38:b1:2c:9b:e5:28:9a:f0:d1:2c:ac:50:
                    a9:93:42:d2:8d:3e:0d:f0:42:5a:0d:2c:09:6c:b6:
                    bc:15:f7:bf:9c:58:33:d4:f2:13:45:9f:85:24:43:
                    f0:74:ff:ca:e1:e2:8b:0b:39:47:77:f4:59:c7:66:
                    7a:d8:a6:e4:0b:97:4e:70:51:03:8a:8d:fe:f3:8b:
                    eb:c8:14:3b:0e:f7:ef:69:62:af:58:b0:24:fe:8b:
                    9b:53:ab:e7:9c:31:57:26:0d:12:e4:e0:e9:00:cb:
                    59:7d:85:d7:d7:f4:64:7c:50:ed:9f:23:e6:14:be:
                    9c:46:45:21:f2:78:69:f3:89:9b:e5:84:d9:1e:36:
                    54:ce:d4:40:79:e5:2f:1d:fd:87:ff:9c:69:6d:4e:
                    8d:cc:cb:1f:a4:33:64:68:58:82:53:50:b6:c2:9e:
                    aa:12:4e:40:3c:ad:49:cd:69:5c:5c:36:f7:6f:f6:
                    1a:00:db:f1:25:3e:7b:2e:95:2b:9e:fe:74:d1:0a:
                    65:fe:59:14:77:09:eb:0d:93:f0:08:ee:f9:a4:cf:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E7:D6:81:E9:FC:09:86:0D:4F:92:D2:47:BB:61:06:5E:09:25:96
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136302e302f32332d3233203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:66:76:f3:29:70:dd:e6:52:9e:ab:3f:09:68:bb:b9:d9:d9:
         a0:09:db:02:ca:81:23:d7:9d:53:bc:68:2c:28:83:32:1b:d6:
         b3:a3:8a:ff:6e:f8:ef:d4:f0:72:e5:0e:da:ca:29:c5:82:fb:
         cb:5e:ac:c7:e7:d1:d7:17:53:ee:0c:f3:fd:3f:d0:2c:f7:e1:
         a4:65:64:ff:74:2b:b5:54:55:77:e9:00:13:b6:24:98:42:6a:
         2a:23:36:44:8a:ac:93:49:e8:a2:d5:0e:d8:cf:c3:84:4d:d0:
         5c:25:a5:41:ae:3e:3c:ca:38:0b:5d:1b:19:fa:74:08:d1:0e:
         d8:ec:71:a6:95:05:eb:a6:a8:c0:fe:b2:8f:f5:5f:af:ec:ef:
         e1:ab:68:6a:5a:3e:5e:d1:09:0f:07:91:99:b0:d1:91:d7:84:
         19:f7:2a:5b:91:88:42:a3:f4:e9:ea:1c:f2:e7:b2:c1:00:b7:
         84:95:33:de:66:6b:1e:be:40:3d:d0:f1:0f:67:de:35:d8:d1:
         19:82:42:30:59:f3:7c:ab:26:dc:71:19:64:bc:25:56:55:e3:
         9c:56:cd:7f:b7:8d:03:19:6e:98:21:55:30:68:2c:df:95:34:
         bc:51:8e:ee:0c:80:9a:ad:56:3c:19:0b:c0:4f:72:56:d3:a5:
         70:80:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:54 2025 by rpki-client