Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/34352e37302e32312e302f32342d3234203d3e20323637353733.roa
File:                     34352e37302e32312e302f32342d3234203d3e20323637353733.roa (raw, json)
Hash identifier:          6kM2WzXMWn4z+Pg5+yZvOiCw66szfem0QQEevFOvquM=
Subject key identifier:   F2:C1:C5:1A:62:90:D8:3F:EC:0D:6F:D4:8F:31:0B:47:1B:C2:AC:27
Certificate issuer:       /CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
Certificate serial:       315A4EEE4A92B9B2EA79BDD817E2DAA2D3959181
Authority key identifier: 56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/34352e37302e32312e302f32342d3234203d3e20323637353733.roa
Signing time:             Mon 15 May 2023 21:55:55 +0000
ROA not before:           Mon 15 May 2023 21:50:55 +0000
ROA not after:            Mon 13 May 2024 21:55:55 +0000
asID:                     267573
IP address blocks:        45.70.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5a:4e:ee:4a:92:b9:b2:ea:79:bd:d8:17:e2:da:a2:d3:95:91:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
        Validity
            Not Before: May 15 21:50:55 2023 GMT
            Not After : May 13 21:55:55 2024 GMT
        Subject: CN=F2C1C51A6290D83FEC0D6FD48F310B471BC2AC27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:a2:9b:dc:d1:28:ae:a2:3b:72:1f:a4:56:
                    9a:09:54:90:a2:d8:a9:aa:a3:02:53:5c:ab:ab:8e:
                    b9:51:1b:98:6e:01:e0:87:d6:02:0d:22:52:f8:08:
                    bd:32:8f:77:0d:20:1c:b2:bf:10:73:74:d6:b1:7c:
                    96:c2:f7:fd:01:52:67:22:98:93:6f:01:ba:05:1d:
                    40:5d:a6:cb:ed:fd:75:86:ad:9f:08:e7:26:41:1d:
                    c6:76:cf:96:82:7f:21:b3:40:1b:9f:96:42:4a:b8:
                    f6:5f:a4:d8:c6:d3:3c:0c:8f:a1:e7:6b:09:19:3c:
                    92:fa:f6:97:e2:b7:6c:81:0d:9a:f7:07:3d:a1:2f:
                    a4:9b:cf:bf:00:31:10:e7:9a:40:b0:1a:1f:1d:96:
                    8e:16:12:60:26:04:fe:98:67:3f:1a:29:be:75:1b:
                    0c:69:c2:11:30:00:c7:f0:97:29:c9:8d:94:a0:19:
                    79:68:35:5c:db:18:2b:ec:73:57:56:45:bd:e2:b4:
                    14:cc:67:6e:52:92:0a:54:df:98:90:af:c4:52:9b:
                    2a:e4:5a:c0:b5:53:24:43:37:b4:1b:64:6b:0b:1d:
                    a6:bb:3d:99:06:ab:6e:09:76:d6:6d:21:83:7e:32:
                    14:6e:88:6b:6f:03:fb:b2:70:de:78:26:8c:a4:af:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C1:C5:1A:62:90:D8:3F:EC:0D:6F:D4:8F:31:0B:47:1B:C2:AC:27
            X509v3 Authority Key Identifier:
                keyid:56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/34352e37302e32312e302f32342d3234203d3e20323637353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:fe:db:ff:c0:d8:df:2a:05:82:49:2b:54:25:40:01:bc:3c:
         4d:cb:25:50:d6:fd:9d:47:55:48:14:05:be:1c:5a:04:c7:6b:
         a3:82:1a:33:ff:63:ee:6f:a4:18:31:61:89:8a:b3:9b:fa:06:
         54:0f:35:6a:bf:2c:51:47:8a:58:9a:67:36:3e:cb:21:71:38:
         e3:57:48:e9:66:30:63:a5:26:60:ac:2b:8a:8c:bb:ff:34:99:
         2a:86:e5:21:6e:66:f2:c9:6e:7e:d0:f0:fe:4c:b1:1f:ba:df:
         47:4a:d3:bb:df:8d:d4:53:2e:87:8c:ba:91:bb:e8:cf:cb:37:
         b0:6f:e5:a8:fe:db:12:8c:a9:9e:94:39:68:a8:ed:0f:68:6b:
         03:45:a2:da:01:a7:cf:14:c0:24:d9:31:6c:07:39:2a:d9:67:
         8e:5e:48:a4:d3:29:ce:10:0e:0b:44:5f:a8:1a:3d:01:ab:7b:
         72:f1:bf:44:6e:ae:01:a5:fd:79:86:b2:3c:2c:b3:4b:d2:8e:
         93:bc:b6:a2:fa:ce:79:08:1e:9f:c0:85:32:1c:ae:10:0b:6a:
         67:54:34:0e:38:6a:a3:88:23:58:e6:ee:c1:54:53:60:04:18:
         c6:1a:c6:6e:21:bc:e2:44:67:de:cf:20:45:d6:b1:15:0b:4a:
         16:e1:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:34:48 2025 by rpki-client