Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/34352e3233362e31322e302f32322d3332203d3e20323638323139.roa
File:                     34352e3233362e31322e302f32322d3332203d3e20323638323139.roa (raw, json)
Hash identifier:          uAScOm9a6levZjCrTTHQvSLM0kaB9se9nObKWz9l2ro=
Subject key identifier:   F9:EF:D4:27:0F:17:01:CA:BE:FA:9A:0C:EA:89:06:1F:DA:63:01:BF
Certificate issuer:       /CN=6C7679787D87682B47C417682C4086A5AC940329
Certificate serial:       103FEE9D56C580D401BEE32FF6667F7CC6630001
Authority key identifier: 6C:76:79:78:7D:87:68:2B:47:C4:17:68:2C:40:86:A5:AC:94:03:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7679787D87682B47C417682C4086A5AC940329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/34352e3233362e31322e302f32322d3332203d3e20323638323139.roa
Signing time:             Wed 03 Apr 2024 23:30:32 +0000
ROA not before:           Wed 03 Apr 2024 23:25:32 +0000
ROA not after:            Wed 02 Apr 2025 23:30:32 +0000
asID:                     268219
IP address blocks:        45.236.12.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3f:ee:9d:56:c5:80:d4:01:be:e3:2f:f6:66:7f:7c:c6:63:00:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7679787D87682B47C417682C4086A5AC940329
        Validity
            Not Before: Apr  3 23:25:32 2024 GMT
            Not After : Apr  2 23:30:32 2025 GMT
        Subject: CN=F9EFD4270F1701CABEFA9A0CEA89061FDA6301BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:ee:fd:f1:c7:6f:79:eb:43:aa:c9:e2:19:
                    5c:53:c1:59:15:b6:da:b5:46:88:be:ab:7c:7d:86:
                    b0:19:c6:e5:ef:53:7b:eb:05:d1:3d:98:d8:08:a7:
                    3d:29:d2:6e:63:9e:4b:77:77:85:67:70:02:38:92:
                    ac:ef:86:54:08:60:64:8e:0e:b5:22:85:d8:30:f0:
                    58:80:76:94:7c:9c:b2:55:7c:3e:63:46:41:bd:4d:
                    43:13:88:b9:81:1b:ee:ad:31:7c:a8:59:31:e5:ce:
                    d0:8f:81:66:1f:79:a1:78:e2:98:da:68:59:d6:0e:
                    03:8b:99:a3:dc:32:4e:e7:32:3c:bd:1c:1a:f9:aa:
                    85:fc:c7:ad:08:74:b2:f3:b4:62:2d:82:d0:3a:c4:
                    65:a7:f5:0b:af:2b:59:e9:b9:f2:d1:b6:d5:b4:2b:
                    8f:78:49:f5:e2:92:a2:b6:64:fe:07:f8:e7:50:e5:
                    aa:cc:f3:13:fa:73:38:69:4b:11:9d:99:7f:24:2a:
                    dc:10:4b:95:8f:1f:9e:68:ad:24:dd:ef:b1:a0:47:
                    aa:1c:be:2d:80:c0:33:5d:e4:81:a2:22:a5:0f:56:
                    5e:66:4f:24:a3:87:a2:90:cb:44:a3:fb:cb:3a:22:
                    74:92:0d:37:af:bf:58:5a:9d:ec:38:a0:7c:fe:3a:
                    0f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EF:D4:27:0F:17:01:CA:BE:FA:9A:0C:EA:89:06:1F:DA:63:01:BF
            X509v3 Authority Key Identifier:
                keyid:6C:76:79:78:7D:87:68:2B:47:C4:17:68:2C:40:86:A5:AC:94:03:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/6C7679787D87682B47C417682C4086A5AC940329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7679787D87682B47C417682C4086A5AC940329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/1/34352e3233362e31322e302f32322d3332203d3e20323638323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:f3:c1:18:94:5a:ce:64:51:35:af:50:f8:1d:14:e3:c0:58:
         71:dd:26:31:26:ee:9d:9f:30:b4:fc:e8:34:12:25:18:d0:6a:
         86:a6:a8:42:d3:6a:5e:32:ff:7f:38:ff:17:d3:bd:68:39:7e:
         45:69:65:c7:65:5a:87:e5:ca:90:fb:b9:48:7d:80:69:d3:b4:
         0a:94:d2:15:0f:b4:24:4e:8e:76:53:60:2b:a7:72:1b:dc:04:
         30:05:cf:4d:e4:7a:16:c8:89:34:52:97:67:fd:18:23:e0:c3:
         f8:4e:cb:48:52:d4:76:16:7a:bb:14:7a:1a:e2:f3:6f:a9:68:
         41:68:d4:9f:7e:dc:de:60:e3:a0:85:79:af:84:fc:30:c0:65:
         a0:a6:11:fb:28:59:4d:bf:e0:8a:57:c9:ba:d3:52:d4:85:6e:
         00:db:99:1f:75:52:68:15:b0:e8:df:da:97:54:11:90:6b:f2:
         3c:43:30:9e:01:7c:9a:ed:31:cc:f9:8f:8f:9f:75:85:c3:fb:
         0f:7d:1d:ff:6a:23:d7:5a:ff:b4:0a:c6:4c:f0:db:23:bb:a5:
         84:e5:ec:3f:75:28:6b:cb:08:17:a5:bf:e5:b7:81:a4:c0:1a:
         6e:1f:0e:2a:07:e1:fc:1c:f2:62:97:ba:f6:32:7d:3d:77:75:
         6b:35:c5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:19:38 2025 by rpki-client