Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132322e302f32332d3233203d3e20323638313534.roa
File:                     34352e3137302e3132322e302f32332d3233203d3e20323638313534.roa (raw, json)
Hash identifier:          P3b+iVKPlkMvW37GHQQXHWv0Jd+jmlcg06Rah/YH7d0=
Subject key identifier:   76:D1:57:D9:84:52:E6:23:0F:14:29:4B:88:F3:4D:72:22:68:D9:CE
Certificate issuer:       /CN=18A43826A65928B70C1A033867FABC5F6E4207C0
Certificate serial:       7FF02E3352B1B97D4147A64E24437B9C7C352AA5
Authority key identifier: 18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18A43826A65928B70C1A033867FABC5F6E4207C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132322e302f32332d3233203d3e20323638313534.roa
Signing time:             Sat 18 Mar 2023 05:50:57 +0000
ROA not before:           Sat 18 Mar 2023 05:45:57 +0000
ROA not after:            Sat 16 Mar 2024 05:50:57 +0000
asID:                     268154
IP address blocks:        45.170.122.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f0:2e:33:52:b1:b9:7d:41:47:a6:4e:24:43:7b:9c:7c:35:2a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A43826A65928B70C1A033867FABC5F6E4207C0
        Validity
            Not Before: Mar 18 05:45:57 2023 GMT
            Not After : Mar 16 05:50:57 2024 GMT
        Subject: CN=76D157D98452E6230F14294B88F34D722268D9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:bd:b0:a3:9b:79:4b:35:6f:93:64:e3:f8:
                    1a:2e:91:c9:5c:af:1a:4f:c7:bd:c4:4f:bd:26:a5:
                    60:bb:af:61:1f:73:8a:ba:a0:c2:1a:e8:10:5f:8c:
                    30:a0:e4:99:4c:4f:a3:b7:66:30:e4:5a:08:a9:2b:
                    b5:e5:81:4d:73:34:1e:2f:b1:e1:3a:82:f1:12:2c:
                    09:59:1d:8b:96:8c:1e:a5:2a:59:a4:1d:10:3d:a4:
                    38:66:62:62:d9:d1:28:c2:ea:08:97:ab:9f:91:43:
                    7b:05:96:17:99:00:2e:e1:e9:9d:69:c3:2c:92:82:
                    f0:95:cd:ec:0e:07:43:0e:2a:6a:c4:c6:57:04:32:
                    a3:2a:f4:53:db:34:87:4a:9c:4c:5d:e4:8b:e1:fc:
                    9b:ed:16:3a:89:b3:da:5e:c6:26:ed:ef:e1:5c:4d:
                    bf:6d:f0:1f:d8:28:ce:ae:6e:89:27:33:c6:79:fe:
                    ae:ba:61:15:db:bc:1b:86:9c:7d:d3:7a:fe:b9:d5:
                    cd:2d:80:f3:a8:67:0d:5e:2f:d6:5f:ec:b7:c4:07:
                    cb:99:3a:2e:53:8f:53:06:ea:fc:9c:e5:98:6a:fc:
                    7c:1b:38:2c:11:0c:9d:df:76:36:37:11:54:90:06:
                    7e:d1:9c:15:3c:b7:ed:35:47:9f:96:9d:6e:09:69:
                    50:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D1:57:D9:84:52:E6:23:0F:14:29:4B:88:F3:4D:72:22:68:D9:CE
            X509v3 Authority Key Identifier:
                keyid:18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/18A43826A65928B70C1A033867FABC5F6E4207C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18A43826A65928B70C1A033867FABC5F6E4207C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132322e302f32332d3233203d3e20323638313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:c0:f7:2c:f7:a4:76:b4:64:30:b9:be:c9:3f:ec:a0:90:53:
         6c:9a:38:95:b8:12:3f:47:e7:90:4d:09:19:ac:a9:40:53:c5:
         6e:f6:59:72:26:db:93:2c:f3:4e:ea:f7:6b:d4:cb:0c:02:f1:
         d1:be:f5:0b:61:c5:ae:33:f2:a4:2b:b1:23:4c:91:85:7b:df:
         28:24:8b:b3:2c:16:48:cd:e3:bf:68:fc:a6:dd:dc:6b:8f:8d:
         8a:8c:b3:84:a3:7b:8e:a8:62:b6:e7:b9:d7:ca:9c:5b:2e:71:
         db:86:cd:0a:58:af:8d:c6:3e:5d:ac:fa:72:87:35:e1:0a:2a:
         a9:f4:84:8a:fc:4d:a5:96:67:e1:00:c4:fd:49:4e:0a:68:36:
         01:3c:7c:53:cc:c4:70:a8:cf:68:08:f8:c7:99:6d:f4:5f:9e:
         cc:e0:45:b6:6d:2a:24:f2:db:f9:33:a6:f7:47:58:3a:42:a4:
         dc:6a:79:cb:89:3c:e7:30:bc:35:74:5d:c0:a8:c9:c3:ff:a8:
         9b:2a:6c:59:cc:3b:22:10:31:c6:60:ee:df:f2:46:1a:24:72:
         16:6a:37:8b:76:5d:3d:16:ab:b4:cb:48:51:b3:e5:56:29:52:
         58:ca:08:f5:55:e5:92:c3:d1:0b:d2:55:de:49:16:5f:94:df:
         ea:3c:15:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:53:27 2025 by rpki-client