Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsLUrYSiDhy15zV6nUPkwSv4hHDY8nifxKgfSQxXd1vB/0/34352e3232372e3133362e302f32322d3232203d3e20323637303137.roa
File:                     34352e3232372e3133362e302f32322d3232203d3e20323637303137.roa (raw, json)
Hash identifier:          Ro9dRYsihYGBFW/Nxyf5X1S6CtL4c8Vn6++Ch+Bg/fc=
Subject key identifier:   E2:A4:8F:BC:F7:AB:3A:08:E5:EE:33:D5:AA:31:30:68:8B:FC:73:57
Certificate issuer:       /CN=B0ED029775A8BE3227E02E6FCFDD3E72385EBEBB
Certificate serial:       3DB3128AE38EECABD03ECE4387510AFF9D10CD67
Authority key identifier: B0:ED:02:97:75:A8:BE:32:27:E0:2E:6F:CF:DD:3E:72:38:5E:BE:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0ED029775A8BE3227E02E6FCFDD3E72385EBEBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsLUrYSiDhy15zV6nUPkwSv4hHDY8nifxKgfSQxXd1vB/0/34352e3232372e3133362e302f32322d3232203d3e20323637303137.roa
Signing time:             Tue 07 Nov 2023 20:37:55 +0000
ROA not before:           Tue 07 Nov 2023 20:32:55 +0000
ROA not after:            Tue 05 Nov 2024 20:37:55 +0000
asID:                     267017
IP address blocks:        45.227.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b3:12:8a:e3:8e:ec:ab:d0:3e:ce:43:87:51:0a:ff:9d:10:cd:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0ED029775A8BE3227E02E6FCFDD3E72385EBEBB
        Validity
            Not Before: Nov  7 20:32:55 2023 GMT
            Not After : Nov  5 20:37:55 2024 GMT
        Subject: CN=E2A48FBCF7AB3A08E5EE33D5AA3130688BFC7357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7e:7e:a2:96:84:53:ac:f3:04:08:8a:16:9d:
                    bb:40:51:19:d6:54:7b:21:e1:9a:14:a3:83:2b:ec:
                    0c:97:8d:b9:a4:46:ce:b3:ea:27:07:37:a8:7e:f7:
                    75:86:d9:d4:18:84:8e:04:84:e9:ba:7d:64:51:a8:
                    ab:8b:f2:64:8a:b9:f6:bd:bc:a4:89:b4:a6:87:04:
                    e6:fe:ad:b6:cd:b6:a7:40:07:b4:ca:82:87:63:f9:
                    aa:2b:45:d4:06:4a:86:d3:58:13:9b:ad:09:d4:7f:
                    76:fd:98:e9:ae:3e:7f:11:cd:91:81:e4:d9:f3:5e:
                    b7:76:f3:ef:37:79:77:49:2f:3f:2c:d6:5d:13:4d:
                    9e:2b:9f:20:5c:39:f3:4c:ec:42:16:95:4f:e4:d6:
                    f1:24:95:97:9e:88:c4:4f:ac:0e:a9:a5:90:da:72:
                    94:41:2e:8a:7f:f7:68:cf:94:e3:f5:97:8e:e1:b4:
                    77:fc:ec:c1:4b:77:01:61:8d:53:b6:19:ca:65:01:
                    a8:7f:9d:a3:56:bb:81:98:b7:c0:4f:01:48:fc:85:
                    47:ef:fa:90:20:d7:a6:1d:34:7b:7f:44:b9:20:74:
                    c2:3c:9e:e7:02:ae:ab:bb:d7:41:40:9d:f7:a5:37:
                    b3:47:2e:26:d2:92:39:22:75:be:1d:e9:ee:85:f8:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A4:8F:BC:F7:AB:3A:08:E5:EE:33:D5:AA:31:30:68:8B:FC:73:57
            X509v3 Authority Key Identifier:
                keyid:B0:ED:02:97:75:A8:BE:32:27:E0:2E:6F:CF:DD:3E:72:38:5E:BE:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsLUrYSiDhy15zV6nUPkwSv4hHDY8nifxKgfSQxXd1vB/0/B0ED029775A8BE3227E02E6FCFDD3E72385EBEBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0ED029775A8BE3227E02E6FCFDD3E72385EBEBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsLUrYSiDhy15zV6nUPkwSv4hHDY8nifxKgfSQxXd1vB/0/34352e3232372e3133362e302f32322d3232203d3e20323637303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:47:aa:95:69:71:9e:84:89:1e:da:a4:d7:7e:f2:eb:ce:96:
         b4:48:5b:f2:f8:34:6f:21:be:da:e3:f1:18:01:72:f8:75:72:
         4a:27:38:f2:2d:7c:8c:4c:32:05:d0:10:6e:89:ac:0a:db:e2:
         c5:ad:cd:d6:8d:33:15:c3:52:fa:05:6f:a5:84:e1:99:f6:c0:
         c8:4b:05:24:25:7b:73:55:fa:be:3d:f9:85:3c:10:9d:15:7b:
         c9:3a:09:aa:0f:fa:7e:8b:d5:6f:84:fb:bf:4a:c1:ce:af:58:
         d3:db:cf:f6:ff:08:58:30:7b:9b:df:c5:c3:d3:25:ec:56:b1:
         1f:a4:ec:cf:78:27:9a:9d:7c:fa:75:03:7e:b6:5b:13:7d:de:
         87:83:3c:c8:67:42:e5:81:6c:8b:c8:b8:ff:cd:78:19:44:3c:
         89:0f:b9:44:1d:fe:8c:f9:c5:af:2c:c1:00:d8:82:5f:61:53:
         56:53:bc:36:72:ac:6a:28:5d:62:a4:be:6e:70:88:7a:21:c1:
         9b:61:95:88:f7:be:9e:d0:b5:d4:4f:5f:25:fa:3e:79:cf:64:
         96:21:4c:b2:bc:d2:af:10:de:44:e4:c7:64:23:4b:95:2b:13:
         d2:d8:4f:86:5c:15:33:bb:70:ec:ed:52:3a:87:97:81:e0:5b:
         a6:e1:99:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:58 2025 by rpki-client