Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e32382e302f32322d3234203d3e20323639313630.roa
File:                     34352e3138312e32382e302f32322d3234203d3e20323639313630.roa (raw, json)
Hash identifier:          HI+GjDtiu8UjnJWSwP6PwaTqm24NXOo5Z+iCrp3Q04Y=
Subject key identifier:   99:24:D9:A1:86:16:C6:BE:34:82:41:05:98:7F:AC:B6:B7:00:54:50
Certificate issuer:       /CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
Certificate serial:       256B65B35F71990E85DA583E7FCDD7D444211257
Authority key identifier: 72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e32382e302f32322d3234203d3e20323639313630.roa
Signing time:             Wed 08 Jun 2022 04:58:47 +0000
ROA not before:           Wed 08 Jun 2022 04:53:47 +0000
ROA not after:            Wed 07 Jun 2023 04:58:47 +0000
asID:                     269160
IP address blocks:        45.181.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6b:65:b3:5f:71:99:0e:85:da:58:3e:7f:cd:d7:d4:44:21:12:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
        Validity
            Not Before: Jun  8 04:53:47 2022 GMT
            Not After : Jun  7 04:58:47 2023 GMT
        Subject: CN=9924D9A18616C6BE34824105987FACB6B7005450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:15:02:1c:7f:b9:d0:02:b1:0e:f2:8c:18:3a:
                    8d:34:bc:3f:ce:a2:59:cd:16:6f:01:d2:a0:5b:f5:
                    8d:84:72:9d:17:c8:9e:35:86:85:3d:86:98:a4:97:
                    30:31:dd:a1:2b:90:08:7e:47:a1:1d:bd:39:c3:d6:
                    b9:5b:08:45:bc:c4:21:99:39:1d:c7:b3:85:04:aa:
                    e2:50:de:7f:92:e0:db:2f:86:e8:0a:69:62:b6:ed:
                    3e:17:59:a7:96:ea:cd:ba:11:08:63:45:20:0b:66:
                    5d:76:0f:8a:3d:4d:e1:7e:97:44:ec:c6:ce:e2:37:
                    d9:36:d1:e6:71:89:8f:d4:e5:53:8d:bd:27:be:01:
                    ae:68:41:e7:cb:e1:fa:7d:4e:7b:cb:1e:8b:08:e0:
                    57:25:e6:a6:09:88:91:f5:b3:09:83:19:df:29:69:
                    22:d8:08:e7:9d:96:8d:e0:8f:fb:e4:88:ca:8a:e2:
                    2d:05:c3:4a:2a:95:e8:a1:cc:40:f8:69:e8:4e:3d:
                    89:0c:37:b6:49:52:4c:61:e1:94:3d:8e:33:64:3a:
                    3f:b4:24:3d:8b:ff:12:99:bd:44:1f:86:bf:2c:c2:
                    a4:75:4c:46:f0:13:09:ab:da:56:0c:8b:08:63:40:
                    ec:1e:68:ad:71:56:3e:3d:93:ba:e0:51:91:47:a5:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:24:D9:A1:86:16:C6:BE:34:82:41:05:98:7F:AC:B6:B7:00:54:50
            X509v3 Authority Key Identifier:
                keyid:72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e32382e302f32322d3234203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:c7:2d:f8:d4:0d:9f:2c:55:b2:bf:98:cd:d2:74:8f:b1:f0:
         cd:41:45:b0:64:d0:95:85:4f:39:2b:99:0a:ec:d5:fb:d1:c0:
         8b:c0:ab:9a:f4:21:66:25:23:2e:98:2f:1d:03:7c:3f:6b:02:
         5e:07:8c:28:60:ae:b5:09:99:f9:f1:e6:5b:af:b9:b3:19:d9:
         a7:74:c4:88:62:b8:1b:a9:0b:e6:10:41:f9:11:15:f7:e5:89:
         05:47:c6:67:13:1a:df:fa:e0:7c:55:ff:5a:a4:47:52:a5:f3:
         86:33:b0:aa:e2:3b:8a:8e:51:6d:74:94:d3:a1:eb:d0:4c:7f:
         ed:5a:88:7e:6b:8d:6a:b9:88:37:17:a9:56:ac:d9:6a:30:24:
         2a:9e:81:42:77:a4:df:53:db:13:7e:e1:65:e1:04:98:2a:e6:
         4a:e0:2e:42:44:6e:e9:a8:ae:ae:31:e0:21:aa:45:e0:cd:21:
         47:ea:36:bb:de:d7:5c:7f:02:17:48:29:f6:51:93:bb:3a:ea:
         5b:15:40:0b:c6:86:55:38:25:5c:6d:9b:6b:40:0a:f9:e8:1b:
         da:58:e5:25:a9:87:a7:ae:fb:6d:87:d6:b3:6a:9d:f2:d2:3e:
         ec:67:fd:f7:6f:bb:c3:5d:e2:9a:8e:20:d3:06:83:56:88:85:
         ac:bf:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:16:01 2025 by rpki-client