Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/tvj6SxwZuh3cxQvqPdVx3DPcqFWw9FV85JptVgg4SRu/0/34352e3136372e3233322e302f32322d3234203d3e20323638303636.roa
File:                     34352e3136372e3233322e302f32322d3234203d3e20323638303636.roa (raw, json)
Hash identifier:          P3vjTJt1WqWxhtxDKvjxrTOnbAxapMfc8i9uk0ufcIc=
Subject key identifier:   B3:80:87:3D:E8:FF:C1:29:48:9D:E6:E3:E8:EE:BB:10:14:F3:12:24
Certificate issuer:       /CN=FDD19B9AD79BBDCD5205F0D542B5E7ED52124FDC
Certificate serial:       25E37D745DA5AB5E0AFA482927DB2173D1DBB060
Authority key identifier: FD:D1:9B:9A:D7:9B:BD:CD:52:05:F0:D5:42:B5:E7:ED:52:12:4F:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDD19B9AD79BBDCD5205F0D542B5E7ED52124FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/tvj6SxwZuh3cxQvqPdVx3DPcqFWw9FV85JptVgg4SRu/0/34352e3136372e3233322e302f32322d3234203d3e20323638303636.roa
Signing time:             Fri 21 Apr 2023 13:00:00 +0000
ROA not before:           Fri 21 Apr 2023 12:55:00 +0000
ROA not after:            Fri 19 Apr 2024 13:00:00 +0000
asID:                     268066
IP address blocks:        45.167.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e3:7d:74:5d:a5:ab:5e:0a:fa:48:29:27:db:21:73:d1:db:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD19B9AD79BBDCD5205F0D542B5E7ED52124FDC
        Validity
            Not Before: Apr 21 12:55:00 2023 GMT
            Not After : Apr 19 13:00:00 2024 GMT
        Subject: CN=B380873DE8FFC129489DE6E3E8EEBB1014F31224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e6:78:c0:6a:db:d2:90:58:c9:eb:db:4f:1a:
                    02:dd:fb:50:25:55:67:ac:51:fd:1f:fd:02:91:8a:
                    84:b2:66:11:5c:cc:ee:5d:46:12:44:39:0a:9f:45:
                    36:00:67:24:ab:0e:97:9d:e2:e1:49:08:17:10:5d:
                    cf:7d:82:79:f1:ee:56:8b:13:09:b0:a9:2b:df:0a:
                    32:21:ea:03:2e:1b:8b:82:1b:d8:03:02:c7:da:51:
                    c9:dc:17:ca:e6:12:97:3b:f5:9e:8e:03:8d:e7:d1:
                    0e:55:e5:7f:7a:64:63:36:cf:af:dc:8c:85:91:a7:
                    e3:f5:93:79:1f:94:12:ef:41:9c:6d:09:41:ef:2d:
                    35:9f:a1:c1:a2:3e:ef:f4:2a:2f:2f:5f:c1:48:99:
                    ee:68:8f:08:2d:2f:06:fd:d5:d2:d1:ec:a1:4f:7d:
                    b9:9a:33:8b:d9:d7:46:ab:9d:21:ff:18:28:11:d2:
                    ba:3b:d7:04:dc:c2:fa:f7:37:42:64:4e:d0:33:05:
                    1a:c8:f4:9c:12:31:27:ac:33:76:48:c6:aa:52:72:
                    05:98:f5:66:54:61:ea:83:39:22:b6:60:3b:74:75:
                    d6:c2:3a:66:53:95:29:7d:f7:4a:b4:2e:61:b6:72:
                    3b:19:3f:d0:00:6f:b1:d5:e9:cf:6c:a8:a0:48:b5:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:80:87:3D:E8:FF:C1:29:48:9D:E6:E3:E8:EE:BB:10:14:F3:12:24
            X509v3 Authority Key Identifier:
                keyid:FD:D1:9B:9A:D7:9B:BD:CD:52:05:F0:D5:42:B5:E7:ED:52:12:4F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/tvj6SxwZuh3cxQvqPdVx3DPcqFWw9FV85JptVgg4SRu/0/FDD19B9AD79BBDCD5205F0D542B5E7ED52124FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDD19B9AD79BBDCD5205F0D542B5E7ED52124FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/tvj6SxwZuh3cxQvqPdVx3DPcqFWw9FV85JptVgg4SRu/0/34352e3136372e3233322e302f32322d3234203d3e20323638303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:a4:a9:c2:63:5b:a6:c7:db:75:f6:2f:c3:d2:d2:8a:d9:e6:
         f2:99:f8:93:4e:f2:77:f0:5e:8e:a5:f6:df:ed:38:0e:4d:5e:
         9b:a9:b9:49:9a:12:02:3a:ca:45:13:a0:44:1f:85:0c:26:5d:
         e2:8a:b9:3e:f5:66:37:38:a0:69:54:2c:8a:fe:4b:aa:02:51:
         d9:ab:9b:30:1a:2f:17:e8:f1:af:bd:ff:bb:d5:5b:6d:b9:c9:
         79:2e:72:69:e3:c3:fd:07:48:bd:21:c0:b8:e5:bc:db:9e:a4:
         e9:f3:04:a6:d9:13:2c:ed:42:40:ec:f5:1d:67:03:f7:21:63:
         1e:f8:04:dd:19:7e:0d:cb:d4:0f:23:e6:69:a3:53:b6:4b:df:
         03:54:a0:15:07:84:d7:bc:69:cc:94:d8:85:48:a1:e4:c9:4c:
         a7:18:61:c8:2c:c0:7b:59:34:38:c4:3b:3a:dc:3c:95:d0:77:
         b1:3b:13:17:6a:a3:94:c0:f7:d5:c6:ed:1a:c7:98:bd:84:dc:
         13:f8:e1:a9:28:25:a1:dd:74:50:c2:ba:b7:9f:9a:24:bb:66:
         d4:d3:5d:ee:5c:b3:c7:36:1c:13:bd:ae:f2:cc:27:1f:ed:9a:
         b5:4c:48:7c:5d:7e:bc:8a:9a:ce:b0:3b:3e:6c:3d:7a:2e:10:
         bf:11:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:00 2025 by rpki-client