Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/34352e3136372e3137322e302f32332d3233203d3e20323638303334.roa
File:                     34352e3136372e3137322e302f32332d3233203d3e20323638303334.roa (raw, json)
Hash identifier:          xVYCLO0HkGxmXeZmFak7PsNcPjrTRt442tptbLaXWRs=
Subject key identifier:   F4:D2:CB:EE:3A:B9:6C:E5:6B:D0:BB:3E:D7:65:A1:FC:A6:15:CD:0A
Certificate issuer:       /CN=EB74AE14B6387B3CA84854FD9E48785797E8F327
Certificate serial:       2BB39F4E91E71CD381A3F8FA21F20BC0EA2E5748
Authority key identifier: EB:74:AE:14:B6:38:7B:3C:A8:48:54:FD:9E:48:78:57:97:E8:F3:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB74AE14B6387B3CA84854FD9E48785797E8F327.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/34352e3136372e3137322e302f32332d3233203d3e20323638303334.roa
Signing time:             Tue 02 Jan 2024 15:59:48 +0000
ROA not before:           Tue 02 Jan 2024 15:54:48 +0000
ROA not after:            Tue 31 Dec 2024 15:59:48 +0000
asID:                     268034
IP address blocks:        45.167.172.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b3:9f:4e:91:e7:1c:d3:81:a3:f8:fa:21:f2:0b:c0:ea:2e:57:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB74AE14B6387B3CA84854FD9E48785797E8F327
        Validity
            Not Before: Jan  2 15:54:48 2024 GMT
            Not After : Dec 31 15:59:48 2024 GMT
        Subject: CN=F4D2CBEE3AB96CE56BD0BB3ED765A1FCA615CD0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:d6:1a:48:6e:61:90:3b:d6:1d:50:79:a5:
                    e8:69:2d:78:fb:64:e1:01:12:61:50:50:6a:0e:61:
                    45:7c:8d:48:51:f7:03:ec:62:52:2c:5d:3e:fd:fe:
                    51:c1:b3:8c:60:08:df:cf:28:a0:a1:43:1d:51:7e:
                    67:ea:1a:33:db:2f:77:ee:04:8a:8a:f4:14:d4:83:
                    30:4b:01:f8:c5:92:fa:f8:4f:8f:c6:7d:ef:eb:e0:
                    5d:62:fb:de:f8:9b:13:e2:ee:65:a7:df:98:4e:2f:
                    a9:a5:5c:9d:4a:10:e8:a1:fc:39:78:18:1b:26:c9:
                    f2:56:03:63:40:0f:1d:9e:ae:eb:6f:d6:9a:e3:e1:
                    2a:97:58:df:5a:ba:80:00:3a:57:7c:5c:f5:7e:99:
                    d4:50:ca:a7:49:6e:fa:b9:d4:7c:7f:f0:8f:97:44:
                    ff:b7:38:2e:17:b3:e5:69:0d:39:28:75:d9:52:db:
                    cf:fc:9f:70:68:78:da:12:a4:90:ec:ee:2c:21:2c:
                    85:05:da:0e:77:0f:0f:0a:7c:93:7f:fb:45:74:c6:
                    e3:12:ee:a8:35:3f:e3:0f:e9:01:d4:a1:e7:da:d9:
                    06:a8:23:ad:39:aa:27:9e:cb:a0:35:62:a6:f7:76:
                    a6:8e:22:4a:a5:c7:12:c8:2a:ba:a0:d0:72:d3:db:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D2:CB:EE:3A:B9:6C:E5:6B:D0:BB:3E:D7:65:A1:FC:A6:15:CD:0A
            X509v3 Authority Key Identifier:
                keyid:EB:74:AE:14:B6:38:7B:3C:A8:48:54:FD:9E:48:78:57:97:E8:F3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/EB74AE14B6387B3CA84854FD9E48785797E8F327.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB74AE14B6387B3CA84854FD9E48785797E8F327.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/34352e3136372e3137322e302f32332d3233203d3e20323638303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:2c:09:d2:83:19:9f:61:4b:82:aa:5e:76:68:7b:99:0a:f9:
         35:3a:70:69:d9:b8:5d:8c:21:82:b5:17:b3:d8:b5:1e:d8:15:
         00:ec:78:6d:6e:56:e4:8d:6d:ec:19:58:97:26:f8:c1:29:d9:
         02:d3:cc:80:3f:09:c2:e3:b9:c7:4e:57:5a:4d:7e:c6:f2:c3:
         12:55:98:3f:fd:cf:b3:66:47:dd:e0:34:07:6b:19:e5:0e:c9:
         11:43:12:6f:66:c5:ad:9d:2c:d5:f3:41:d5:d8:f6:2a:40:14:
         61:72:9a:58:72:13:b8:b4:ba:cf:2d:f5:8a:db:f0:1e:fe:7d:
         c7:88:0f:43:5b:65:8b:4b:3d:3f:cd:f1:cd:3f:c3:e2:9f:9f:
         58:38:39:81:25:49:38:92:e7:ad:e5:87:43:06:a1:15:af:b4:
         29:5c:ba:da:df:17:4d:62:ee:41:0a:2a:12:0e:9b:ef:b1:f3:
         79:17:f0:9e:93:e2:64:c8:78:2a:2e:39:77:c0:f2:10:ff:38:
         a3:c3:e2:3b:52:db:1a:ca:a8:7f:92:a6:de:23:9f:23:2f:18:
         62:29:3c:3b:a0:63:2a:af:61:6a:91:03:26:d4:bf:61:92:df:
         8c:1b:02:ca:8e:a9:36:52:ad:54:11:6b:43:db:84:1b:76:dc:
         2c:14:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:18 2025 by rpki-client