Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa
File:                     34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa (raw, json)
Hash identifier:          Z/0qTOGLoaEiCwTLf0fipSRsdpK7SSgcdoZFCc4IGa0=
Subject key identifier:   77:4C:29:A1:19:DE:4D:E5:5F:E4:37:A7:F7:96:59:0A:64:CA:B9:BC
Certificate issuer:       /CN=8D44BC32DF1FFDAB3AEB3A801269F5B47A8B6544
Certificate serial:       611D20D0176C7FA4CC02CA900C0A84DA65199679
Authority key identifier: 8D:44:BC:32:DF:1F:FD:AB:3A:EB:3A:80:12:69:F5:B4:7A:8B:65:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D44BC32DF1FFDAB3AEB3A801269F5B47A8B6544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa
Signing time:             Fri 28 Jun 2024 12:15:26 +0000
ROA not before:           Fri 28 Jun 2024 12:10:26 +0000
ROA not after:            Fri 27 Jun 2025 12:15:26 +0000
asID:                     268556
IP address blocks:        45.163.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1d:20:d0:17:6c:7f:a4:cc:02:ca:90:0c:0a:84:da:65:19:96:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D44BC32DF1FFDAB3AEB3A801269F5B47A8B6544
        Validity
            Not Before: Jun 28 12:10:26 2024 GMT
            Not After : Jun 27 12:15:26 2025 GMT
        Subject: CN=774C29A119DE4DE55FE437A7F796590A64CAB9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:85:47:48:d2:13:a8:18:69:3e:46:6e:f9:
                    df:f1:a5:b6:93:ea:49:2b:33:d5:e2:d3:a3:05:bf:
                    cf:fb:27:bc:fe:dc:e0:8e:f1:6e:20:3f:13:81:cd:
                    d9:16:2e:6b:23:35:b1:cb:f2:ef:c3:44:75:68:3a:
                    d3:1f:c6:a9:7d:6f:49:c7:0d:6a:7e:a9:d7:61:b4:
                    74:84:06:a1:98:54:9b:1d:82:63:d6:12:d3:a4:e1:
                    7d:27:13:43:10:a4:63:17:fd:d4:ad:15:4e:1f:97:
                    69:60:7d:f5:93:26:f1:10:e3:8a:7a:7c:b0:d7:00:
                    ff:5b:44:97:e0:a0:75:22:3f:28:ef:3e:d2:ec:bd:
                    62:e7:16:f5:6d:66:25:46:6d:da:93:b8:d7:7c:0b:
                    31:16:1e:25:87:4e:97:66:38:ca:f3:ab:0e:41:9c:
                    d4:91:ce:8f:d4:7a:71:de:00:cf:b6:c5:c9:25:df:
                    7a:7d:78:d0:b2:15:3e:f9:73:6c:a1:b8:e4:1d:0d:
                    8d:09:0d:d0:03:1d:ee:b5:6e:97:37:11:e6:78:19:
                    20:b7:78:be:87:04:2e:02:da:63:31:7f:c5:65:62:
                    c1:7e:3a:99:19:ef:2a:0f:78:89:0e:35:ba:15:4f:
                    c0:13:dd:30:8d:f2:28:74:f1:94:84:6a:0a:f7:08:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4C:29:A1:19:DE:4D:E5:5F:E4:37:A7:F7:96:59:0A:64:CA:B9:BC
            X509v3 Authority Key Identifier:
                keyid:8D:44:BC:32:DF:1F:FD:AB:3A:EB:3A:80:12:69:F5:B4:7A:8B:65:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/8D44BC32DF1FFDAB3AEB3A801269F5B47A8B6544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D44BC32DF1FFDAB3AEB3A801269F5B47A8B6544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137322e302f32322d3234203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:64:a6:83:d2:6b:a1:f8:50:c9:3f:3d:05:1b:3b:e5:7c:5d:
         71:69:61:bf:e0:6e:cb:b2:9d:bf:c3:7c:17:82:a8:58:a4:7d:
         71:b5:c5:2a:13:d3:15:a7:3e:aa:f6:41:dd:08:c8:2b:34:5e:
         1f:36:76:8a:8b:82:b2:9d:48:0c:1c:11:06:0b:6a:aa:0a:25:
         60:ac:12:c6:43:9e:ab:28:f8:65:e3:16:2d:b0:6f:8e:13:70:
         ff:7d:eb:de:51:18:25:b7:99:71:71:55:24:fd:bd:87:ed:37:
         a2:ea:e8:03:61:5f:ec:75:eb:c6:81:df:09:80:f4:ad:7e:f6:
         dc:14:f3:29:20:6c:33:4c:06:8d:5c:64:2a:59:b1:4a:6f:a0:
         af:b9:df:56:c1:7e:1c:40:b6:62:34:00:38:cf:3b:a5:2b:a2:
         98:42:40:f3:ca:df:8c:1e:1b:56:81:c4:06:5d:59:2d:0a:62:
         fb:53:67:e2:bd:7b:38:6c:be:9c:42:64:2c:78:1c:2f:61:b6:
         ad:88:17:d0:a5:bf:c8:88:db:e2:74:e9:ae:05:3e:73:9d:9f:
         b6:d4:83:12:e9:73:96:e5:72:e2:ba:ee:68:e9:f7:c2:16:d7:
         cc:7c:88:b4:59:9f:68:d6:ad:b8:87:3f:ca:48:b5:ee:ae:1a:
         ce:9e:f2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:42 2025 by rpki-client