Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBs3D6r5ktaFh53BSxwh1nNtWKSCXoF45sNHky94K21j/0/34352e3136322e3134382e302f32322d3234203d3e20323638353231.roa
File:                     34352e3136322e3134382e302f32322d3234203d3e20323638353231.roa (raw, json)
Hash identifier:          4vD2IQJ7xsttKqSYBih0v/nhVFCZyKpI4go6Jbwl9cw=
Subject key identifier:   73:12:47:A3:BB:4F:B6:06:5C:CB:A1:92:94:E1:C5:37:A0:E4:03:1B
Certificate issuer:       /CN=EEDE5F62FA0D81697B8E8CFCDF5ACAB5983E82D8
Certificate serial:       345607348FFF30CA46E92921794D37CC2BD9BE01
Authority key identifier: EE:DE:5F:62:FA:0D:81:69:7B:8E:8C:FC:DF:5A:CA:B5:98:3E:82:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EEDE5F62FA0D81697B8E8CFCDF5ACAB5983E82D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBs3D6r5ktaFh53BSxwh1nNtWKSCXoF45sNHky94K21j/0/34352e3136322e3134382e302f32322d3234203d3e20323638353231.roa
Signing time:             Wed 15 Sep 2021 12:32:44 +0000
ROA not before:           Wed 15 Sep 2021 12:27:44 +0000
ROA not after:            Thu 15 Sep 2022 12:32:44 +0000
asID:                     268521
IP address blocks:        45.162.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:56:07:34:8f:ff:30:ca:46:e9:29:21:79:4d:37:cc:2b:d9:be:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEDE5F62FA0D81697B8E8CFCDF5ACAB5983E82D8
        Validity
            Not Before: Sep 15 12:27:44 2021 GMT
            Not After : Sep 15 12:32:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cf:17:9a:63:fe:2f:ca:dc:05:30:c1:1f:dd:
                    b2:ce:0f:8a:24:47:7a:85:57:59:bf:1f:e4:88:ac:
                    f6:2f:13:ac:e7:20:ee:ef:57:03:f3:fa:20:2f:ce:
                    1e:3d:e8:11:4d:f3:d3:e4:da:7a:aa:91:53:d2:6b:
                    d8:12:40:90:71:ac:9b:75:58:1e:82:44:af:a6:9a:
                    90:a5:47:1f:9e:b4:0c:d9:0d:97:b4:d9:eb:fc:6d:
                    ad:00:b1:af:be:9f:10:eb:08:84:cf:42:00:28:f3:
                    d0:71:31:1a:d1:8f:e8:e1:0e:76:6e:08:e4:fa:ff:
                    07:dd:f9:2e:d5:d0:69:9c:f2:25:f0:50:a7:d5:4a:
                    c1:d8:41:f6:43:34:d3:56:81:6f:b4:84:5f:19:1d:
                    2f:12:bc:36:c3:14:6d:f5:4b:3c:1c:69:5f:37:c2:
                    5a:bf:d0:7b:af:cc:16:e2:0f:c4:9a:cf:d4:e6:4a:
                    87:b5:54:e8:a2:df:58:cf:41:8e:ce:11:84:b1:b9:
                    ce:83:fa:c9:f4:26:7b:f1:19:05:6f:19:03:6a:87:
                    a7:88:a9:30:8d:a6:f9:48:89:05:2b:30:79:db:12:
                    8f:e2:13:45:54:c9:65:a3:13:76:80:36:1e:9c:8d:
                    b8:7d:9d:fa:f6:92:34:a7:4e:a7:51:92:0b:ff:b7:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:12:47:A3:BB:4F:B6:06:5C:CB:A1:92:94:E1:C5:37:A0:E4:03:1B
            X509v3 Authority Key Identifier:
                keyid:EE:DE:5F:62:FA:0D:81:69:7B:8E:8C:FC:DF:5A:CA:B5:98:3E:82:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBs3D6r5ktaFh53BSxwh1nNtWKSCXoF45sNHky94K21j/0/EEDE5F62FA0D81697B8E8CFCDF5ACAB5983E82D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EEDE5F62FA0D81697B8E8CFCDF5ACAB5983E82D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBs3D6r5ktaFh53BSxwh1nNtWKSCXoF45sNHky94K21j/0/34352e3136322e3134382e302f32322d3234203d3e20323638353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:d1:cb:f7:ce:89:23:99:35:3c:ee:05:b2:05:fe:76:67:71:
         bb:a7:61:d0:56:d4:61:ee:65:e1:55:d6:6f:82:98:ce:7b:ea:
         4d:c4:42:43:70:79:78:2a:62:e5:a4:c9:b0:12:54:30:7c:8d:
         05:7f:d9:02:25:37:f7:f7:d8:22:bc:3c:1b:90:6d:f1:dd:9c:
         85:c3:48:16:59:39:74:02:68:45:09:ca:f8:6e:c1:b0:13:e3:
         eb:a1:ca:0f:55:29:78:bd:bc:20:71:44:31:60:a6:02:d9:b7:
         54:09:13:30:c0:db:73:a3:3c:d7:af:a4:e3:ae:3f:10:f3:8f:
         d4:6b:be:84:13:5d:e9:67:85:0d:a1:74:91:db:96:be:04:bd:
         c4:f3:3a:9b:5b:b6:b6:ee:a7:32:94:92:b7:76:e7:95:82:42:
         05:40:14:6b:88:c1:72:51:13:5e:04:fd:d2:0e:ed:ec:3e:de:
         77:97:28:d8:46:b5:f1:20:03:2e:61:0f:3f:bf:e8:ef:85:54:
         77:82:bb:ca:1d:4e:63:2b:09:97:be:bd:46:7f:ee:6d:9d:83:
         58:ed:95:a7:b7:9d:c8:b6:9c:db:0e:0e:02:02:38:5e:1a:eb:
         7e:1e:ff:a0:f1:55:eb:41:ba:88:6d:15:18:c8:f9:e9:8b:2e:
         0a:06:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:15 2025 by rpki-client