Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137392e3232362e302f32332d3233203d3e203238353938.roa
File:                     34352e3137392e3232362e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier:          3FKdz2crkg32s+AKOPe924vYRVVSNu01o/KdgyP93gY=
Subject key identifier:   80:DF:75:77:30:1C:65:97:85:2F:E2:13:FC:D0:1A:9E:94:05:BE:94
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       21515E0D491BEE6B1F41D73E9A2E7C9340E7E603
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137392e3232362e302f32332d3233203d3e203238353938.roa
Signing time:             Wed 29 Nov 2023 12:19:36 +0000
ROA not before:           Wed 29 Nov 2023 12:14:36 +0000
ROA not after:            Wed 27 Nov 2024 12:19:36 +0000
asID:                     28598
IP address blocks:        45.179.226.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:51:5e:0d:49:1b:ee:6b:1f:41:d7:3e:9a:2e:7c:93:40:e7:e6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Nov 29 12:14:36 2023 GMT
            Not After : Nov 27 12:19:36 2024 GMT
        Subject: CN=80DF7577301C6597852FE213FCD01A9E9405BE94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:45:08:b4:3e:2a:72:a9:3d:2c:2c:1a:6c:
                    ac:1e:1b:de:eb:b1:83:86:1f:e9:c2:4c:1e:c0:0d:
                    f5:90:52:0c:c3:e6:b4:00:64:1e:f7:ed:a5:b2:06:
                    e7:a8:0f:c6:78:05:1b:46:10:eb:24:85:9d:33:96:
                    d2:24:f2:da:fb:43:1d:41:a4:00:46:33:69:ef:55:
                    97:bd:66:16:7a:13:c5:62:a9:1d:54:f1:3e:b5:ca:
                    4f:71:d0:be:23:58:8c:ee:bf:70:64:c5:4d:72:79:
                    52:23:b3:7f:bb:33:da:36:a0:7a:75:5e:e7:0a:9b:
                    e7:64:eb:b2:f4:f8:14:1d:a2:cc:2b:4e:69:81:8c:
                    d3:c1:a7:3b:f0:01:2d:c6:94:d9:97:2e:76:d3:98:
                    d2:68:29:d8:7b:0b:ce:28:e2:a1:e7:02:d6:84:bf:
                    57:68:fd:2e:08:a6:56:b7:8e:2f:c6:6e:8c:97:ed:
                    07:db:12:00:71:7b:1c:03:8a:ba:3b:db:cd:56:0b:
                    16:61:94:c0:b2:85:9d:44:94:fc:e7:dc:a0:db:8b:
                    0f:86:85:aa:e0:eb:0b:fc:6f:a8:b4:bc:64:cf:07:
                    8a:f8:fe:e3:2a:af:04:4d:d3:4d:91:15:e8:72:31:
                    3d:7c:3f:10:52:cf:22:db:2a:00:b3:80:57:69:8d:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DF:75:77:30:1C:65:97:85:2F:E2:13:FC:D0:1A:9E:94:05:BE:94
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137392e3232362e302f32332d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:3d:54:4f:d2:f6:db:fd:bc:82:ff:84:12:a3:8a:d2:e9:0c:
         bf:c2:bb:3a:e3:84:95:f3:15:de:b1:85:37:11:bf:fb:33:d6:
         bc:ca:4b:12:4f:df:22:56:87:f6:3f:8f:d1:a3:88:c3:38:5b:
         28:4f:25:8c:01:22:58:c2:94:21:1e:d2:f3:b0:52:a1:0c:43:
         b8:fc:0a:d2:9a:45:d4:69:2f:72:4f:4e:9b:7d:97:b2:3a:4a:
         6e:f1:e8:19:95:68:26:a4:5b:32:73:b1:c8:5e:dc:2b:c4:42:
         9f:ac:bf:cb:63:96:38:61:2d:f2:51:8c:2a:e4:6d:0a:fd:3c:
         f5:f4:23:2f:63:59:c8:d1:10:5c:0e:cc:b2:d9:8f:16:6d:df:
         7f:1a:5a:d9:cf:ea:4f:0c:cb:5b:df:9d:92:d4:28:98:75:18:
         82:12:e8:39:0f:67:44:bb:e4:9f:d2:f7:1e:98:37:bf:f1:db:
         6f:4f:42:8b:86:b1:4c:d3:b9:61:02:15:3f:e9:78:5f:2a:26:
         c7:22:d7:d8:b4:e1:af:37:5b:ed:bb:a9:1c:4c:e2:85:6d:85:
         1c:46:a7:d8:a1:d7:ff:94:90:fd:4b:72:94:fb:0b:ec:f7:63:
         75:7c:e0:38:a5:65:1d:cd:3b:85:5f:31:1c:f0:b2:98:59:91:
         28:4f:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:24 2025 by rpki-client