Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e322e302f32342d3234203d3e20323638383431.roa
File:                     34352e3137342e322e302f32342d3234203d3e20323638383431.roa (raw, json)
Hash identifier:          HZXKZ4baSuB2q2kjc5WQ5LvH+2jB1RysQ/QTHcJoyJw=
Subject key identifier:   D2:59:D6:CA:21:04:3E:E7:12:A8:07:C9:2F:63:B9:FB:D8:9D:73:47
Certificate issuer:       /CN=8942116348CB859ADB895C4FCAF2E70D15442AAE
Certificate serial:       03BBE75C9B17F5F81C2C6862A2E094694FC764EF
Authority key identifier: 89:42:11:63:48:CB:85:9A:DB:89:5C:4F:CA:F2:E7:0D:15:44:2A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e322e302f32342d3234203d3e20323638383431.roa
Signing time:             Thu 06 Jul 2023 21:54:22 +0000
ROA not before:           Thu 06 Jul 2023 21:49:22 +0000
ROA not after:            Thu 04 Jul 2024 21:54:22 +0000
asID:                     268841
IP address blocks:        45.174.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bb:e7:5c:9b:17:f5:f8:1c:2c:68:62:a2:e0:94:69:4f:c7:64:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8942116348CB859ADB895C4FCAF2E70D15442AAE
        Validity
            Not Before: Jul  6 21:49:22 2023 GMT
            Not After : Jul  4 21:54:22 2024 GMT
        Subject: CN=D259D6CA21043EE712A807C92F63B9FBD89D7347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:d4:04:c1:0c:d0:2d:c4:b4:a7:49:a1:48:
                    0d:e9:14:b7:ec:e2:23:28:e4:32:62:3b:bf:59:d2:
                    01:a4:86:bd:97:48:32:4c:04:40:4d:d2:34:38:db:
                    9b:b9:9a:6e:59:73:e5:b0:61:38:d4:16:8c:cc:ef:
                    74:0a:df:cd:ee:a8:29:c1:89:62:4f:42:c4:4e:0c:
                    92:69:6e:ce:1c:03:73:82:39:0b:b0:ae:3e:d0:48:
                    69:68:e5:6d:a4:58:b0:c1:c1:40:a3:e4:02:a6:cc:
                    48:97:d3:53:a9:c5:5f:26:c5:d8:d9:3a:3a:68:3f:
                    b6:27:d3:6c:e4:5d:06:0d:bc:bc:09:64:be:93:2b:
                    d8:63:7e:a2:98:4f:8b:19:fd:b3:57:4b:c7:e9:e9:
                    e2:02:ec:2a:ef:5e:02:ee:35:24:27:3a:cf:7e:86:
                    f3:c7:64:d4:53:85:78:f0:0d:d9:2a:5f:44:14:59:
                    9c:17:07:41:2d:1c:3d:6e:77:61:ce:52:c0:5c:c8:
                    c7:d3:3f:88:4e:27:16:70:92:71:9b:23:2e:0b:7b:
                    f9:80:c1:02:7f:4d:d3:f1:e2:68:1b:87:10:c7:b9:
                    ea:7a:a0:60:ed:06:c4:45:62:e9:13:f4:dd:7b:71:
                    95:ec:02:2b:d6:9c:aa:6e:13:6e:84:8f:4b:47:09:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:59:D6:CA:21:04:3E:E7:12:A8:07:C9:2F:63:B9:FB:D8:9D:73:47
            X509v3 Authority Key Identifier:
                keyid:89:42:11:63:48:CB:85:9A:DB:89:5C:4F:CA:F2:E7:0D:15:44:2A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e322e302f32342d3234203d3e20323638383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f2:86:f9:47:24:d0:f7:89:8c:12:f4:76:73:e6:7b:bc:39:
         0b:7d:b0:ff:d4:33:7f:6e:6b:12:47:e1:93:e5:fd:04:1e:1f:
         ab:f4:d1:30:1c:f8:15:9a:11:8e:be:53:fe:53:d3:3a:27:a9:
         7c:1d:25:2a:0e:49:90:46:65:ed:65:2b:1c:08:c0:18:a0:1d:
         c1:25:d8:16:6d:1d:8c:8a:2e:e4:d6:c7:21:bb:31:dc:27:b7:
         c6:9c:f8:cf:bf:a9:ef:ab:e6:5d:26:96:06:ce:25:58:0c:17:
         95:1c:92:4e:9d:3e:26:60:d5:63:6e:3f:e4:4a:47:91:c8:dd:
         9a:3b:b3:29:5e:db:3f:d9:34:bd:d0:33:f5:68:21:4b:18:58:
         5b:fb:e8:98:cb:c2:5e:af:7b:39:07:3f:7a:a9:a3:5e:6a:f8:
         5a:a7:ff:da:2f:5d:d0:29:cb:e4:21:0a:6f:d6:6c:a9:c8:46:
         da:f3:e9:45:4d:48:f2:aa:37:71:a1:c6:ff:2c:f2:ba:07:a0:
         d2:29:54:51:24:8a:98:f5:d8:3c:29:de:a2:0b:d5:dc:94:a7:
         35:c4:dc:fc:36:a4:89:c2:29:55:b2:8c:9a:42:20:a6:31:19:
         d7:bd:1c:ba:00:ff:94:23:b1:7f:72:33:6a:83:ab:b4:38:34:
         06:4d:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:02 2025 by rpki-client