Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/34352e3136372e3137342e302f32342d3234203d3e20323638303334.roa
File:                     34352e3136372e3137342e302f32342d3234203d3e20323638303334.roa (raw, json)
Hash identifier:          atiVnz2s2zYJuriuoiXQ7te3gAiVocG8ex8kgdLoSXc=
Subject key identifier:   F0:44:88:88:17:D2:A8:BF:7A:74:BE:70:A9:66:79:AA:92:38:29:55
Certificate issuer:       /CN=EB74AE14B6387B3CA84854FD9E48785797E8F327
Certificate serial:       4C3F5C2B3785DE88998F02307C4E57EE7B617AF4
Authority key identifier: EB:74:AE:14:B6:38:7B:3C:A8:48:54:FD:9E:48:78:57:97:E8:F3:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB74AE14B6387B3CA84854FD9E48785797E8F327.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/34352e3136372e3137342e302f32342d3234203d3e20323638303334.roa
Signing time:             Tue 02 Jan 2024 15:59:48 +0000
ROA not before:           Tue 02 Jan 2024 15:54:48 +0000
ROA not after:            Tue 31 Dec 2024 15:59:48 +0000
asID:                     268034
IP address blocks:        45.167.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3f:5c:2b:37:85:de:88:99:8f:02:30:7c:4e:57:ee:7b:61:7a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB74AE14B6387B3CA84854FD9E48785797E8F327
        Validity
            Not Before: Jan  2 15:54:48 2024 GMT
            Not After : Dec 31 15:59:48 2024 GMT
        Subject: CN=F044888817D2A8BF7A74BE70A96679AA92382955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:da:1c:bb:cc:22:09:10:93:e1:20:5c:4c:6c:
                    f7:52:cd:b3:57:1e:32:00:9a:01:b5:3c:63:18:f0:
                    9a:56:74:94:9f:c5:b1:36:db:12:40:a4:1d:dd:bd:
                    f6:7f:a0:97:4a:78:8c:db:28:a3:a0:55:6e:46:22:
                    63:0b:58:8d:bf:e0:a4:0b:81:cf:7b:a5:04:a1:81:
                    16:e5:89:19:40:b7:d4:d1:23:b8:c6:a9:bd:28:29:
                    a2:d5:07:c9:99:6c:0c:b1:91:4e:4b:c9:d8:4a:82:
                    0f:39:3b:6e:8e:62:0a:10:5f:17:37:e2:84:50:33:
                    5e:40:9e:6b:a1:d8:94:20:9a:76:e8:3a:cd:1c:a9:
                    b0:7e:5e:15:32:ec:a2:ee:26:25:bc:70:2b:df:86:
                    10:7b:bb:ca:d5:ac:ac:a1:ab:71:c6:72:af:97:87:
                    06:9f:44:1d:62:f0:fb:0c:c3:94:11:fd:eb:71:92:
                    c0:62:8b:42:e2:a4:cd:b9:eb:65:63:0e:46:8f:0b:
                    d2:f9:51:6f:c7:19:b6:f5:d2:c6:36:d8:da:db:af:
                    11:12:ab:c0:ff:bc:f2:5c:e4:3e:d6:f7:11:ef:47:
                    ff:7d:6f:f4:fc:e0:38:73:8c:9b:e1:a7:cd:56:e4:
                    b5:a0:89:03:a3:9e:4c:b7:ec:13:90:37:4d:c4:90:
                    a6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:44:88:88:17:D2:A8:BF:7A:74:BE:70:A9:66:79:AA:92:38:29:55
            X509v3 Authority Key Identifier:
                keyid:EB:74:AE:14:B6:38:7B:3C:A8:48:54:FD:9E:48:78:57:97:E8:F3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/EB74AE14B6387B3CA84854FD9E48785797E8F327.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB74AE14B6387B3CA84854FD9E48785797E8F327.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/34352e3136372e3137342e302f32342d3234203d3e20323638303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:c6:31:d1:23:df:b0:01:5b:52:86:c6:02:e1:ee:82:c8:7f:
         1c:cd:53:fe:8d:ab:28:ca:69:81:8b:a6:ce:3d:9e:18:d2:ce:
         77:13:93:22:56:33:b7:20:92:99:53:59:3e:48:99:4a:05:09:
         4f:a1:09:da:17:63:a7:3a:1b:c6:78:40:ac:7e:83:4a:84:1a:
         0c:25:ec:bd:7f:4f:c9:da:d6:a2:08:63:e7:db:c0:22:ef:bb:
         e0:3f:3a:d0:dc:8d:1e:f3:02:72:4f:e4:c5:6c:f4:b9:c7:bd:
         25:15:ee:10:50:4a:7d:68:e2:85:5c:f5:b1:48:a0:88:ec:52:
         e9:df:fe:84:33:e1:b9:c9:58:51:21:51:0d:b2:6c:8b:b8:e4:
         e0:aa:2a:77:c2:eb:a9:19:1b:86:6d:d9:e5:9d:66:3f:ff:87:
         1a:ba:e7:ae:fe:f6:f9:f9:b6:7c:94:ec:97:27:56:ea:ea:8f:
         79:03:cf:8c:7f:58:dd:2e:32:f7:0b:20:ca:0b:6d:03:ba:9b:
         bb:14:3c:37:d7:50:b9:6c:5b:52:d7:1e:51:df:c2:62:d5:e6:
         c0:5a:73:5c:4b:d3:bf:77:5f:9a:66:8e:e3:d6:ff:26:3b:07:
         89:07:d0:86:73:f1:ab:dc:59:1f:e9:44:95:be:97:3a:5b:b1:
         af:43:41:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:06:09 2025 by rpki-client