Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137322e3132342e302f32322d3332203d3e203238353938.roa
File:                     34352e3137322e3132342e302f32322d3332203d3e203238353938.roa (raw, json)
Hash identifier:          YBzSixyaNs6QTh/wTMfVgT/jkxJ27VR6IbiSE65AZH4=
Subject key identifier:   1A:AE:EE:46:C4:7B:6F:BB:5F:86:15:A1:B6:90:C2:92:9A:E6:F6:0A
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       477EC0084032AEC638E3380E13A05893281539E1
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137322e3132342e302f32322d3332203d3e203238353938.roa
Signing time:             Fri 20 Oct 2023 22:59:08 +0000
ROA not before:           Fri 20 Oct 2023 22:54:08 +0000
ROA not after:            Fri 18 Oct 2024 22:59:08 +0000
asID:                     28598
IP address blocks:        45.172.124.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7e:c0:08:40:32:ae:c6:38:e3:38:0e:13:a0:58:93:28:15:39:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 20 22:54:08 2023 GMT
            Not After : Oct 18 22:59:08 2024 GMT
        Subject: CN=1AAEEE46C47B6FBB5F8615A1B690C2929AE6F60A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:a4:2e:37:76:ac:f4:95:8a:4a:b3:ff:0d:
                    9e:6e:b1:d2:ab:3c:98:e5:31:de:48:7f:0b:9a:bc:
                    90:4e:69:3e:cf:bb:b4:a5:3f:30:9f:a1:ca:9f:02:
                    8c:43:9a:fc:d8:cd:b6:fc:a3:88:82:e8:0c:d0:87:
                    fc:78:46:01:52:de:23:ca:b1:92:5d:20:42:17:8f:
                    a2:50:71:60:e0:ee:2b:3a:a7:40:9d:01:82:1e:ab:
                    b8:94:d8:da:e9:14:26:9d:28:52:6f:1b:5f:a0:41:
                    8f:f0:ef:89:52:54:ed:40:73:59:f4:f1:25:ae:8a:
                    d7:ac:db:e1:ba:2b:7c:27:bd:2d:63:e7:23:6c:73:
                    20:13:de:83:f0:2c:d8:b6:be:3b:e1:7e:a7:54:8b:
                    ea:59:a8:3a:98:12:04:65:d4:8b:bc:95:b8:db:9f:
                    60:23:dc:20:95:4f:48:a8:31:b0:72:6c:fa:3c:57:
                    4d:44:a7:12:bd:50:c2:44:ee:08:17:39:8c:07:94:
                    0d:ca:e5:33:cd:fa:d5:53:11:fd:73:63:73:d5:24:
                    be:3f:fe:9d:ea:ff:ac:91:48:34:79:1a:d9:93:cd:
                    3e:c4:48:d6:9e:03:70:5f:c3:7c:25:fd:3f:3d:ba:
                    cd:ef:e4:f0:ca:37:02:0d:d1:71:89:e8:3c:20:e2:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AE:EE:46:C4:7B:6F:BB:5F:86:15:A1:B6:90:C2:92:9A:E6:F6:0A
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137322e3132342e302f32322d3332203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:9a:f1:ee:a5:6a:d4:3c:66:80:6f:8a:fc:46:7d:22:70:
         3f:c4:c2:bb:47:7c:84:9e:9a:72:df:67:4c:ec:55:b6:e8:4d:
         72:b6:3c:51:5f:71:1c:55:cc:e8:30:a0:0f:8a:f5:2c:7c:8d:
         d9:ce:9c:5d:75:74:50:36:9a:c9:27:8c:b1:b1:e0:5e:a9:88:
         96:bb:56:30:97:80:95:d0:53:79:bd:37:24:f1:ed:f8:0b:46:
         10:2b:65:80:ed:d6:ad:60:6e:d8:08:fb:0d:24:73:f7:b6:48:
         cd:76:ff:61:7b:76:3c:41:ca:46:f3:90:a1:e3:3d:dc:ae:72:
         b5:02:fd:b1:0f:a0:52:e1:3c:61:99:32:c5:b6:02:50:bf:86:
         78:d1:e8:b6:c7:6d:6c:31:c9:22:c1:57:e9:84:11:d7:25:49:
         dd:71:be:97:76:5f:b1:69:70:1f:8b:df:c7:90:e2:96:f5:c6:
         85:4d:a9:6a:7e:1e:cc:7b:17:73:43:27:dc:8a:46:44:3c:28:
         48:a3:7d:fc:a6:bd:1b:2e:91:d5:13:17:6a:63:a8:2e:5e:3c:
         ce:5a:c9:f7:71:b7:92:d2:52:db:7a:a5:49:64:3a:36:6b:3b:
         22:69:5a:5e:5b:3b:48:10:da:eb:d9:a5:3e:50:88:d8:f2:56:
         98:6e:37:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:08 2025 by rpki-client