Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136312e302f32342d3234203d3e20323637343230.roa
File:                     34352e3233352e3136312e302f32342d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          d7xxBYB2Fn/GHSzNJBxrtl89CY+Dp1E2u5UTTaT5J68=
Subject key identifier:   67:23:F8:B7:A7:20:7C:7E:1F:EA:CD:C8:6B:2C:30:10:16:8E:CC:FF
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       7087BE775CA418EB43CEE13858B4238786F776E0
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136312e302f32342d3234203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:59:04 +0000
ROA not before:           Wed 28 Feb 2024 13:54:04 +0000
ROA not after:            Wed 26 Feb 2025 13:59:04 +0000
asID:                     267420
IP address blocks:        45.235.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:87:be:77:5c:a4:18:eb:43:ce:e1:38:58:b4:23:87:86:f7:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:54:04 2024 GMT
            Not After : Feb 26 13:59:04 2025 GMT
        Subject: CN=6723F8B7A7207C7E1FEACDC86B2C3010168ECCFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:ec:c0:0a:7c:05:ff:bc:f1:c6:03:b9:ef:
                    0d:26:e1:5b:a3:69:c8:ea:94:7a:19:95:41:85:c9:
                    09:5b:03:7c:89:83:b3:bf:07:1e:0d:f5:3b:c1:38:
                    e9:e1:d8:04:66:f7:51:9d:d1:af:ad:0a:24:1a:fa:
                    8e:a0:61:94:21:9a:6f:ba:12:e2:20:78:8b:75:df:
                    fd:2e:85:b7:5c:5b:f1:54:5b:96:24:b8:0f:0f:b6:
                    d4:ee:ff:f2:70:9a:ca:6a:94:f0:b0:89:df:95:b9:
                    c3:13:b4:6d:c1:60:54:6d:e0:d9:fb:b4:25:77:cb:
                    65:ff:d4:e2:9b:14:d4:97:9c:3a:30:2f:29:73:20:
                    3c:58:6e:8d:b1:1e:79:99:53:7e:92:4a:6a:43:cc:
                    b9:75:1b:a7:b4:b7:69:6a:07:3f:fd:d6:94:4e:7f:
                    9d:9e:c3:b7:fb:7c:9e:a9:d4:2f:31:26:8a:6e:c7:
                    92:dc:a8:30:17:21:a9:6e:a1:f2:e3:69:4e:23:86:
                    51:db:91:01:a3:48:a5:12:73:f3:9e:60:e6:e5:34:
                    46:82:82:77:f7:ee:fa:78:5b:0a:4b:68:28:bc:4a:
                    2b:00:01:89:ea:83:bb:80:93:7a:bd:f0:79:62:ed:
                    b5:d0:96:77:36:ff:cb:6e:c4:69:fc:21:ab:41:45:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:23:F8:B7:A7:20:7C:7E:1F:EA:CD:C8:6B:2C:30:10:16:8E:CC:FF
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/34352e3233352e3136312e302f32342d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:e0:35:d9:cf:50:e0:4d:c2:4a:0c:0b:ec:11:ec:66:94:24:
         34:74:e2:76:b8:89:08:b2:72:52:65:68:6a:c1:33:78:71:94:
         94:8f:e7:a1:81:7d:84:f2:0f:89:11:e2:bd:84:1d:68:5e:e7:
         29:5e:56:6b:d7:3b:f1:8a:4c:cc:0d:64:4d:a5:be:1f:10:49:
         cd:42:39:d2:9e:49:68:0c:12:7d:45:ae:b1:5a:fa:b7:07:5d:
         a3:e5:55:a8:64:88:aa:a6:43:f5:83:ae:de:cd:37:c1:06:c5:
         5e:4e:8a:83:9a:fb:a1:8d:02:a9:b1:1a:9a:91:34:f2:81:9c:
         56:d9:9f:38:ca:a0:f6:33:56:a7:b7:f2:b5:b8:e9:98:66:13:
         1b:b3:55:cc:44:46:1a:05:51:4d:31:94:21:2a:4c:33:d9:1f:
         ef:df:47:a3:4c:c3:ad:8e:c5:1e:17:8f:5a:2b:03:57:b9:bb:
         65:ae:e5:0a:ff:2e:75:22:a7:3f:5f:63:04:24:5c:5a:0e:a9:
         7e:bb:83:c3:5e:28:af:67:d3:a9:5d:ae:d4:ca:c3:ad:c3:a8:
         e7:95:b4:87:8a:7d:a3:f1:b1:09:c9:4d:91:fd:89:b4:45:19:
         73:64:07:dd:d3:e3:03:63:1d:62:91:2e:17:da:ef:41:9f:d5:
         39:54:dc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:56 2025 by rpki-client