Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e372e3130342e302f32332d3233203d3e203238353938.roa
File:                     34352e372e3130342e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier:          nIInaq4C3p3ZgfTOlfzWbQXTnXM95tpOlCgzx1B/rjc=
Subject key identifier:   59:80:D3:85:A6:0E:75:9A:13:CC:7D:6F:2D:BA:6F:42:36:90:69:2C
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       16AB34DB8AE75BF7CA5E8F647BC03F5F3E0247F4
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e372e3130342e302f32332d3233203d3e203238353938.roa
Signing time:             Tue 24 Oct 2023 22:02:00 +0000
ROA not before:           Tue 24 Oct 2023 21:57:00 +0000
ROA not after:            Tue 22 Oct 2024 22:02:00 +0000
asID:                     28598
IP address blocks:        45.7.104.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ab:34:db:8a:e7:5b:f7:ca:5e:8f:64:7b:c0:3f:5f:3e:02:47:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 24 21:57:00 2023 GMT
            Not After : Oct 22 22:02:00 2024 GMT
        Subject: CN=5980D385A60E759A13CC7D6F2DBA6F423690692C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:1c:5b:06:7d:2e:37:08:a1:f4:a8:96:51:
                    2e:09:2a:1b:72:9d:b9:60:3f:22:9b:3d:f7:95:2c:
                    81:8b:20:0d:36:97:60:e4:98:84:53:43:8d:42:86:
                    45:8c:bd:a8:de:a6:37:c5:92:13:e7:f0:8f:d9:41:
                    91:d7:ed:ac:f3:1d:fb:5c:b5:7a:4f:31:d4:30:6a:
                    df:f1:99:38:91:bc:62:11:6f:25:12:9d:bc:e4:2e:
                    0c:23:30:bd:a7:0c:e2:76:75:20:a1:94:4f:d1:0b:
                    38:36:92:a6:d8:1c:8b:aa:2b:05:c2:6b:12:24:4e:
                    5d:8e:72:32:dd:3d:c0:c8:31:71:df:d1:e5:12:30:
                    ae:8e:4d:e5:d0:73:ae:48:ff:6f:2f:fb:f9:f5:2d:
                    ad:f5:ea:ec:86:46:ea:10:6b:9b:c3:f5:33:b0:52:
                    48:08:65:b3:77:38:b8:24:15:fd:c3:97:8e:64:ff:
                    b2:52:c4:2b:08:cf:1f:2a:95:2c:3b:c7:52:f6:6b:
                    b1:61:71:6a:23:10:21:cc:0b:e9:5e:69:65:10:f9:
                    7a:a4:33:a8:24:4b:f1:fa:e0:7b:ed:cf:d0:15:ba:
                    14:d1:bd:a7:25:4b:c0:7e:7f:35:ca:3d:a8:d2:5c:
                    cc:ba:cc:5e:5d:2e:60:d1:b8:71:df:a0:ec:9d:86:
                    ad:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:80:D3:85:A6:0E:75:9A:13:CC:7D:6F:2D:BA:6F:42:36:90:69:2C
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e372e3130342e302f32332d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:2a:a8:1f:84:fd:da:99:06:c7:9e:b7:07:63:08:c3:de:55:
         e3:c2:46:ea:b9:fb:c7:37:59:ce:63:ea:c5:55:8d:01:c4:87:
         80:63:00:ce:7b:86:ce:b6:23:46:76:46:8a:e5:a2:43:73:07:
         75:80:59:99:c6:f0:59:6c:32:a5:5c:52:cf:71:c3:58:56:cd:
         1c:d1:69:bd:4d:65:69:72:b0:26:f3:fe:11:ed:30:2f:4c:84:
         f3:2e:47:79:e3:a8:8b:1f:8e:7f:2f:ec:70:2b:5e:33:87:41:
         dd:c9:a2:83:ae:d6:5b:7e:51:18:d5:d3:66:b4:07:f4:f5:b9:
         d6:22:e8:51:12:49:fa:ec:e8:73:26:df:05:e0:6d:8a:3c:a5:
         3f:8d:ce:fc:78:9b:b2:e6:fe:c3:1f:b9:6e:66:fb:63:7e:e5:
         fe:00:0a:63:2b:01:91:78:c1:5e:60:e4:fb:d4:6d:14:fe:28:
         e6:b0:03:f1:7f:67:81:27:b3:6f:c5:58:e7:b3:77:09:10:6e:
         be:d1:cc:38:71:d5:ae:b7:45:5a:ba:98:90:24:c3:75:28:8c:
         b7:38:13:7a:37:4b:56:e2:f0:29:05:1b:73:b4:4b:e9:06:94:
         44:ac:48:95:21:e1:44:b2:a0:d5:73:e6:c1:6a:17:ec:e8:38:
         62:5c:6a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:06 2025 by rpki-client