Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/34352e3136312e31362e302f32322d3232203d3e20323638343436.roa
File:                     34352e3136312e31362e302f32322d3232203d3e20323638343436.roa (raw, json)
Hash identifier:          /Ikh1clvURVcOwgINOu2vuRKYL2tEVrjnGbC/dGtkOg=
Subject key identifier:   09:92:A8:17:4C:45:D2:83:E3:47:91:7C:47:FF:02:B2:EE:F8:0B:AE
Certificate issuer:       /CN=1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB
Certificate serial:       1BED4F71263E5E6B799250CF0FA6661102CF93DA
Authority key identifier: 15:50:DF:0A:F2:4D:ED:E2:FB:9F:66:A1:C8:05:60:A1:FB:45:6C:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/34352e3136312e31362e302f32322d3232203d3e20323638343436.roa
Signing time:             Tue 15 Aug 2023 16:41:26 +0000
ROA not before:           Tue 15 Aug 2023 16:36:26 +0000
ROA not after:            Tue 13 Aug 2024 16:41:26 +0000
asID:                     268446
IP address blocks:        45.161.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ed:4f:71:26:3e:5e:6b:79:92:50:cf:0f:a6:66:11:02:cf:93:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB
        Validity
            Not Before: Aug 15 16:36:26 2023 GMT
            Not After : Aug 13 16:41:26 2024 GMT
        Subject: CN=0992A8174C45D283E347917C47FF02B2EEF80BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:3d:b3:90:18:f9:a6:f0:0c:85:ae:24:03:
                    ab:ab:fb:69:53:0d:de:82:31:17:6a:dc:8f:04:6e:
                    8a:d8:0f:90:70:ef:31:9c:6f:e0:ed:27:d5:7b:c1:
                    9e:e0:8a:85:da:62:31:dd:c9:88:dd:fb:03:1a:38:
                    39:8e:cf:ed:62:fe:ca:19:5e:a8:de:51:1d:fd:cc:
                    f4:7d:99:21:89:e4:9b:50:f8:9f:ea:ee:0c:56:59:
                    3a:1f:1c:cc:d1:7f:24:85:3c:cb:3a:cf:a1:39:76:
                    01:d6:21:58:f0:25:a2:5c:c8:d3:e4:49:da:44:5f:
                    09:24:21:e8:7e:b4:7b:37:28:15:45:16:85:cd:20:
                    78:40:b8:04:78:5e:a7:60:72:53:02:5a:32:77:7d:
                    ec:ab:22:ef:b6:61:4c:bb:46:7a:ad:75:d9:db:14:
                    d5:2a:9c:93:4a:8c:76:21:6b:bb:7d:a4:23:84:b2:
                    7d:2f:86:a7:dd:18:d8:c5:a8:8e:75:39:b9:e4:54:
                    b8:14:c4:ae:56:d3:29:00:10:8b:60:bb:0a:a4:7b:
                    99:6b:52:be:c1:46:04:b7:1b:cf:fc:5c:a4:d6:a5:
                    5a:9d:d0:1e:f3:4f:17:c0:08:f8:7f:d9:a8:60:a4:
                    f6:ca:de:a5:8b:eb:78:47:c0:73:d9:96:8b:d9:90:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:92:A8:17:4C:45:D2:83:E3:47:91:7C:47:FF:02:B2:EE:F8:0B:AE
            X509v3 Authority Key Identifier:
                keyid:15:50:DF:0A:F2:4D:ED:E2:FB:9F:66:A1:C8:05:60:A1:FB:45:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/34352e3136312e31362e302f32322d3232203d3e20323638343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:36:90:fc:d7:91:06:91:14:1f:b6:0e:b4:1b:76:d6:08:95:
         5d:54:f0:ee:a2:33:f6:52:b0:53:e5:98:46:54:59:af:e2:4f:
         0a:64:be:05:7b:cb:ee:d9:7f:da:8c:7f:92:b8:9f:32:9e:74:
         e5:d5:98:92:62:4f:3b:ea:cf:d7:03:d2:bb:38:ec:af:5f:76:
         9f:f4:bc:7d:b2:0f:a4:cb:4a:9e:88:eb:b6:48:5f:43:6c:ae:
         5a:64:51:e2:42:52:ea:ad:68:d2:af:17:66:30:84:83:ef:7b:
         d1:69:4e:93:1d:bf:42:7b:bd:04:f9:87:4e:9e:75:bf:4d:02:
         8b:14:b3:f9:b9:da:43:49:34:09:bb:77:02:aa:06:56:b5:d9:
         c7:eb:e7:d5:6a:18:6e:85:4f:41:c4:70:02:27:62:f4:bb:d0:
         cb:3e:a3:b1:f8:ca:25:20:07:65:a5:eb:38:5a:a1:d9:58:50:
         ed:0a:41:62:4b:92:1e:35:5c:55:b0:09:99:84:ad:23:08:a3:
         30:d2:12:b0:4f:ce:ef:1a:df:9c:44:bd:c0:a0:40:3c:b1:8a:
         38:d4:90:aa:ff:e1:77:d9:a8:54:6f:99:97:80:77:38:e7:e4:
         ad:b0:72:19:12:64:6d:62:66:e8:92:26:7e:15:63:b6:84:29:
         61:42:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:38 2025 by rpki-client