Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa
File:                     34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (raw, json)
Hash identifier:          0Y1HLBgyFjh/LTsHWcZ8hZH78mANK/dKrRu8X8rb82k=
Subject key identifier:   1F:84:CF:0B:00:13:5C:6E:29:11:59:0E:98:52:EE:E3:B8:57:13:92
Certificate issuer:       /CN=DB3CA746E597EE92E31AA5AF597CA07291DFB128
Certificate serial:       6812E6CBB8C9C4A8588F587F5B2E1E748ADCD43D
Authority key identifier: DB:3C:A7:46:E5:97:EE:92:E3:1A:A5:AF:59:7C:A0:72:91:DF:B1:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa
Signing time:             Sat 29 Jul 2023 12:21:45 +0000
ROA not before:           Sat 29 Jul 2023 12:16:45 +0000
ROA not after:            Sat 27 Jul 2024 12:21:45 +0000
asID:                     269145
IP address blocks:        45.180.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:12:e6:cb:b8:c9:c4:a8:58:8f:58:7f:5b:2e:1e:74:8a:dc:d4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3CA746E597EE92E31AA5AF597CA07291DFB128
        Validity
            Not Before: Jul 29 12:16:45 2023 GMT
            Not After : Jul 27 12:21:45 2024 GMT
        Subject: CN=1F84CF0B00135C6E2911590E9852EEE3B8571392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:32:6d:5f:65:88:ca:07:8c:7c:0a:1c:75:
                    d1:46:db:1f:0d:e3:bb:f1:ef:81:29:6d:b8:b0:14:
                    0c:d7:30:e6:00:27:01:f7:92:3e:dc:ec:78:81:31:
                    dc:5f:8f:2f:4f:ad:2f:66:f4:cf:e9:12:55:11:4c:
                    db:19:d1:8c:12:ab:f2:d7:2f:d1:1e:52:42:96:cd:
                    d8:63:79:c4:61:a0:2a:52:c3:ab:50:31:d1:ae:de:
                    61:8d:73:33:4e:27:f0:24:e4:4a:77:8e:2d:4e:37:
                    73:6e:79:64:67:2a:55:cd:e9:d5:0c:7c:54:ad:78:
                    bc:20:71:05:75:c5:d7:9a:3a:83:ef:b1:26:eb:9f:
                    3d:10:21:60:f4:ee:5b:76:6c:b0:fe:c1:d7:ce:31:
                    21:7d:2e:61:58:de:d5:cd:9a:e8:3e:c0:62:b9:6a:
                    b6:06:9e:d4:9d:07:d3:eb:03:a8:6c:ea:4f:ae:80:
                    e8:7a:97:8a:6c:1d:61:56:6a:b1:6a:ab:ac:8c:e0:
                    50:ff:cd:c7:99:9f:5d:26:0f:1b:99:af:2f:5d:94:
                    b2:4b:4a:33:a9:14:68:95:6c:18:f3:16:89:03:15:
                    5e:54:75:18:cc:27:e0:20:c2:c9:c4:a9:25:83:fb:
                    e5:ed:d9:1e:cb:84:43:d3:a7:d6:f5:a8:98:b3:20:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:84:CF:0B:00:13:5C:6E:29:11:59:0E:98:52:EE:E3:B8:57:13:92
            X509v3 Authority Key Identifier:
                keyid:DB:3C:A7:46:E5:97:EE:92:E3:1A:A5:AF:59:7C:A0:72:91:DF:B1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3CA746E597EE92E31AA5AF597CA07291DFB128.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/0/34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:f9:fd:43:c9:63:b9:ac:2c:e3:4e:45:b3:f6:c3:0a:04:08:
         0d:4c:eb:c0:55:ca:50:0c:1c:76:6e:0e:1f:76:6d:3f:ba:64:
         31:ff:95:4f:c7:bc:c1:e6:17:1d:7e:fe:81:f6:f1:b1:9e:3b:
         15:95:8e:69:e2:0b:10:a8:6e:a3:de:9f:d1:e7:1c:e4:a9:3f:
         fa:ee:12:91:ee:2e:f0:19:c4:20:65:c0:18:01:54:26:77:e2:
         f7:d8:f1:b7:2d:d3:99:e9:55:4b:2b:fd:ac:32:25:fc:16:ad:
         4c:67:2f:7e:e3:93:2f:dd:c4:86:89:25:6d:47:ba:25:e8:42:
         fa:aa:54:fe:7d:2d:48:77:bb:7d:c9:b8:7f:bc:63:1c:bb:04:
         ed:5e:df:ae:c3:22:ac:f1:88:14:91:56:56:61:c3:52:80:14:
         aa:68:53:8a:33:43:cc:48:d4:57:3f:27:04:21:30:31:a4:fc:
         ca:57:f5:19:71:fa:49:5a:57:16:39:c1:50:f3:4a:14:c8:48:
         4c:d5:72:85:56:db:0a:71:ed:7f:96:43:16:08:1b:ee:f3:9b:
         e4:5b:1c:c3:d6:ff:ce:ed:8a:15:a5:5c:58:3d:a6:4e:7c:bd:
         55:a0:cf:9b:38:54:25:38:6e:d9:ee:fc:25:95:65:b4:15:d4:
         3f:3b:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:21 2025 by rpki-client