Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/34352e3136372e36302e302f32322d3234203d3e20323632353639.roa
File:                     34352e3136372e36302e302f32322d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          HennDEHeb2nwcdhNxgiRfa1Orpd0hC8WIjyZHJ6xckQ=
Subject key identifier:   AF:82:6D:2A:C4:07:B5:BC:E3:B0:A1:36:B4:7E:88:62:9E:DB:FC:29
Certificate issuer:       /CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
Certificate serial:       7A50E15849CE53F6ADBAA08D79D701BD4F45EE45
Authority key identifier: 65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/34352e3136372e36302e302f32322d3234203d3e20323632353639.roa
Signing time:             Tue 29 Oct 2024 19:46:40 +0000
ROA not before:           Tue 29 Oct 2024 19:41:40 +0000
ROA not after:            Tue 28 Oct 2025 19:46:40 +0000
asID:                     262569
IP address blocks:        45.167.60.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:50:e1:58:49:ce:53:f6:ad:ba:a0:8d:79:d7:01:bd:4f:45:ee:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
        Validity
            Not Before: Oct 29 19:41:40 2024 GMT
            Not After : Oct 28 19:46:40 2025 GMT
        Subject: CN=AF826D2AC407B5BCE3B0A136B47E88629EDBFC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:5c:25:54:a9:a8:8f:6c:2f:87:dc:76:09:
                    5d:cf:f1:44:11:90:cd:f3:6c:35:c8:e4:25:77:70:
                    8a:1c:e1:cd:f0:b0:5e:7a:2d:23:d7:47:97:0d:cf:
                    c8:46:ba:19:d4:9e:42:00:ab:22:e5:e2:28:fd:df:
                    66:13:a8:68:ab:aa:39:4d:46:8b:72:24:7f:5e:12:
                    4f:91:99:f8:5d:1f:f8:ff:90:e7:16:33:c2:fa:df:
                    26:92:35:d1:90:c1:84:b2:1f:3a:d9:64:49:74:38:
                    be:79:f0:21:74:8a:bc:ce:64:6e:f1:02:9a:64:af:
                    17:16:14:1c:1b:03:f4:10:13:39:13:8c:15:4a:6c:
                    7d:95:f5:52:cf:84:4a:57:54:81:01:cf:8f:08:2d:
                    e2:a6:73:77:8d:3e:f0:7e:fe:5a:ef:6f:c9:b6:9b:
                    5b:9d:89:94:45:9e:8e:1d:18:23:19:0a:99:6b:13:
                    8f:50:db:91:fa:ca:95:60:2d:66:a7:80:19:fd:60:
                    c3:0f:c7:e6:91:1b:2e:ce:59:6b:ed:2f:c7:29:76:
                    b8:3f:55:94:8e:be:d4:3d:8d:c7:a4:3d:21:1e:c8:
                    d7:21:56:7e:69:69:ee:da:30:89:83:7f:90:66:2e:
                    b2:38:be:ce:83:e5:85:77:e0:bf:4f:43:d0:e1:2a:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:82:6D:2A:C4:07:B5:BC:E3:B0:A1:36:B4:7E:88:62:9E:DB:FC:29
            X509v3 Authority Key Identifier:
                keyid:65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/659C0711C58D82CB928680EC1097A12AE8F8C66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/34352e3136372e36302e302f32322d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:60:3c:ef:fa:57:33:a5:34:a0:05:54:73:b3:27:7b:d8:dc:
         68:bc:e4:a4:90:a6:31:c5:05:68:68:e9:64:90:32:34:a4:03:
         87:99:70:7d:60:ae:8b:79:78:83:1d:4c:af:10:c5:e5:73:4c:
         e1:08:80:fc:91:3c:27:e5:dc:05:20:b9:b4:c9:2f:b8:f6:c3:
         e0:7b:5a:72:af:4e:bb:a0:a7:f0:de:d2:22:92:9d:92:c4:9c:
         33:4d:10:28:a8:2e:e4:bf:35:73:e6:97:5a:75:5a:01:b3:e7:
         ca:86:0d:30:46:13:e0:ee:78:b2:36:28:94:90:fc:65:37:ca:
         79:ab:db:2a:56:13:f9:cc:31:aa:cc:1b:6f:89:5c:bf:76:8f:
         01:7f:e2:55:88:2b:6a:42:1c:82:5c:c9:0a:92:21:71:45:cf:
         4e:9b:81:97:b6:5f:05:68:1c:be:8b:f8:fa:18:d7:a4:80:c9:
         0a:47:e1:04:c1:c0:8d:80:c8:44:98:9d:04:68:e9:02:68:6a:
         f7:8b:76:ec:23:79:d4:f6:92:18:a7:0f:c3:df:3a:08:0e:53:
         7c:6f:f4:e5:e5:b4:f2:eb:3d:50:8c:a6:3d:ea:60:63:ef:98:
         a0:cd:5a:4f:eb:63:82:9a:d3:cd:98:4e:f3:3a:bd:95:1c:91:
         82:72:4e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:01:35 2025 by rpki-client