Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/34352e3232362e3139322e302f32322d3234203d3e203631383638.roa
File:                     34352e3232362e3139322e302f32322d3234203d3e203631383638.roa (raw, json)
Hash identifier:          sAAjb+N7sZUqqDeICmdoRUKwZgKCojAOsMtWratgdbU=
Subject key identifier:   17:DD:3E:F8:48:48:7A:CB:16:45:5A:2D:AC:8B:9D:5D:2F:8F:2F:06
Certificate issuer:       /CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
Certificate serial:       4732F61C6EF14CD2FB8EBD0B38A90D3F1401A3D8
Authority key identifier: C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/34352e3232362e3139322e302f32322d3234203d3e203631383638.roa
Signing time:             Mon 06 May 2024 17:14:15 +0000
ROA not before:           Mon 06 May 2024 17:09:15 +0000
ROA not after:            Mon 05 May 2025 17:14:15 +0000
asID:                     61868
IP address blocks:        45.226.192.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:32:f6:1c:6e:f1:4c:d2:fb:8e:bd:0b:38:a9:0d:3f:14:01:a3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
        Validity
            Not Before: May  6 17:09:15 2024 GMT
            Not After : May  5 17:14:15 2025 GMT
        Subject: CN=17DD3EF848487ACB16455A2DAC8B9D5D2F8F2F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:d7:9d:a9:88:01:02:6d:f1:58:21:31:4e:
                    7d:63:6d:fb:d2:37:81:d2:e1:18:bd:47:5b:a4:c0:
                    26:60:ea:d5:4a:15:13:69:d8:d3:ce:97:df:28:a6:
                    f5:8b:5f:02:a7:d3:e9:3b:3b:04:e1:fe:4d:87:12:
                    a0:52:67:4a:f9:8e:e0:30:13:d7:6c:f9:e6:92:48:
                    9f:98:a7:2e:85:8f:4a:4f:a1:a0:ba:c4:ed:cf:dd:
                    88:dd:d9:30:f7:fd:d6:d7:eb:68:eb:ee:c6:08:b0:
                    12:f6:3e:ee:6f:a4:d4:67:81:df:dd:cd:0c:c0:cb:
                    1e:59:7d:93:00:d7:59:cb:9a:f4:88:14:51:14:6e:
                    a1:1c:87:50:0e:bc:d8:46:07:ac:3b:5a:cd:9d:08:
                    a1:5e:51:d2:91:b8:a0:64:d0:58:63:49:d1:b2:df:
                    aa:fa:bb:1a:c8:b6:30:cb:01:de:07:a8:c8:58:92:
                    2b:43:27:7b:22:b0:b6:3b:a2:6c:23:fa:39:e8:69:
                    27:a1:16:0a:be:ba:4a:c7:38:32:d5:13:16:94:a5:
                    e3:f7:32:01:58:5e:76:f9:10:4a:ef:04:ec:11:a3:
                    26:d0:29:be:31:69:d4:33:84:e0:08:f2:86:5c:55:
                    18:ff:16:71:16:52:25:97:a5:08:b8:47:ea:ad:fa:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:3E:F8:48:48:7A:CB:16:45:5A:2D:AC:8B:9D:5D:2F:8F:2F:06
            X509v3 Authority Key Identifier:
                keyid:C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/34352e3232362e3139322e302f32322d3234203d3e203631383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:16:c5:73:1f:f6:48:db:77:f1:23:28:bc:da:13:ff:65:
         c6:91:92:7d:03:3a:db:30:f5:5f:81:82:11:0f:51:f0:58:fd:
         36:ce:5f:30:88:70:63:7a:1d:22:ef:eb:e6:f1:32:35:94:39:
         a2:a6:ec:38:62:50:f4:66:14:2c:60:0b:3e:cb:80:f1:9c:ad:
         1d:07:7c:1e:fa:1f:60:e7:c3:f9:d4:44:fa:80:13:08:21:99:
         dc:c3:c8:d9:1f:91:08:e5:3c:38:92:f8:9e:8a:f9:bd:da:5d:
         63:a3:f4:90:82:1a:7d:32:2d:03:8d:3f:85:ba:8e:85:82:24:
         bf:0f:7c:3f:01:33:32:f4:fb:49:74:e2:78:2b:d1:91:9e:36:
         f3:0f:ed:09:e0:7e:8b:11:1c:97:ba:97:f2:ea:7e:30:a8:e8:
         17:50:48:32:f4:ba:96:9f:1a:17:e6:85:e7:73:2b:91:35:ef:
         4b:86:4c:26:17:61:f7:8f:e3:e7:83:d3:6a:cb:46:fc:a1:3c:
         d9:e9:23:6d:ae:5f:7f:15:ce:a4:8b:f5:59:11:58:5b:8a:0f:
         0e:af:7c:25:b9:3c:46:a3:4e:16:2b:03:6e:af:c4:47:d6:00:
         8f:02:16:d6:e2:00:4c:0b:43:01:b7:92:42:49:94:e3:67:4b:
         46:95:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:33 2025 by rpki-client