Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2g5rqwLEnvTm5qYheY29yojhFyJKvbfD2cnL8uVak5M1/0/34352e3136372e3231322e302f32342d3234203d3e20323731343237.roa
File:                     34352e3136372e3231322e302f32342d3234203d3e20323731343237.roa (raw, json)
Hash identifier:          osiVuQDug7CynCOOs+Ixsetk2f0Vn15Qf9sfo8kaDw8=
Subject key identifier:   51:06:C0:D2:91:77:2D:EB:37:FE:12:26:6B:87:1C:11:5A:39:69:10
Certificate issuer:       /CN=F14569C46CBF26B525114FB23228D380BFB45272
Certificate serial:       1C98492F78DB8D076880AA228C0CFF65B5078D12
Authority key identifier: F1:45:69:C4:6C:BF:26:B5:25:11:4F:B2:32:28:D3:80:BF:B4:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F14569C46CBF26B525114FB23228D380BFB45272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2g5rqwLEnvTm5qYheY29yojhFyJKvbfD2cnL8uVak5M1/0/34352e3136372e3231322e302f32342d3234203d3e20323731343237.roa
Signing time:             Thu 28 Jul 2022 15:32:26 +0000
ROA not before:           Thu 28 Jul 2022 15:27:26 +0000
ROA not after:            Thu 27 Jul 2023 15:32:26 +0000
asID:                     271427
IP address blocks:        45.167.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:98:49:2f:78:db:8d:07:68:80:aa:22:8c:0c:ff:65:b5:07:8d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F14569C46CBF26B525114FB23228D380BFB45272
        Validity
            Not Before: Jul 28 15:27:26 2022 GMT
            Not After : Jul 27 15:32:26 2023 GMT
        Subject: CN=5106C0D291772DEB37FE12266B871C115A396910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:ec:70:d1:5c:aa:95:83:83:40:de:cc:46:
                    9e:96:7a:55:cc:a6:bc:9b:1e:99:78:89:69:60:e4:
                    21:38:ae:79:48:c5:c8:71:34:bf:3a:10:34:fa:1a:
                    9f:a1:f6:f2:33:42:73:a7:8e:67:75:17:10:67:ee:
                    18:d9:8a:52:14:3b:af:2c:6e:ca:97:6c:53:85:a1:
                    04:55:3b:6e:82:fe:3b:9d:ee:b5:9f:b7:7a:20:f0:
                    63:22:49:94:b5:2f:b5:ed:2b:ef:20:3c:b3:d2:0c:
                    5c:f9:0b:6e:ff:9e:54:71:82:a0:c7:d1:f0:4b:e8:
                    f8:0b:8e:15:a2:ff:1b:b1:cc:12:65:10:6e:79:3c:
                    36:62:88:4b:96:31:b3:81:83:a9:fd:89:6b:5c:6b:
                    7e:05:93:c9:a7:37:99:2f:09:e0:5e:eb:26:ba:7d:
                    a0:da:17:bf:06:fe:57:2a:4b:6e:1b:65:1b:9f:3f:
                    6c:b8:fc:d6:a6:27:ca:99:49:60:7d:3d:c4:95:16:
                    8e:b1:59:1f:67:40:ed:75:01:47:48:d1:48:1c:7e:
                    55:4d:44:28:7e:79:8d:21:15:46:5d:1c:1b:eb:ad:
                    4d:cc:e4:1b:16:7a:b4:26:6f:09:78:1c:4b:fa:c6:
                    32:83:87:bc:61:ac:cd:7e:ac:b6:d4:7e:86:53:df:
                    14:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:06:C0:D2:91:77:2D:EB:37:FE:12:26:6B:87:1C:11:5A:39:69:10
            X509v3 Authority Key Identifier:
                keyid:F1:45:69:C4:6C:BF:26:B5:25:11:4F:B2:32:28:D3:80:BF:B4:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2g5rqwLEnvTm5qYheY29yojhFyJKvbfD2cnL8uVak5M1/0/F14569C46CBF26B525114FB23228D380BFB45272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F14569C46CBF26B525114FB23228D380BFB45272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g5rqwLEnvTm5qYheY29yojhFyJKvbfD2cnL8uVak5M1/0/34352e3136372e3231322e302f32342d3234203d3e20323731343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:27:a9:74:a7:08:38:86:23:20:93:ae:6c:c4:71:7f:77:
         f3:12:40:56:ea:29:21:e7:2e:c8:9d:0d:99:1c:3b:4b:43:54:
         0b:1f:6f:b5:33:67:21:fa:20:d2:90:93:a6:c9:9e:7c:cc:24:
         bc:5a:bc:8c:bd:44:79:b0:ca:bb:9e:8f:2b:44:a2:40:fe:65:
         97:d5:5d:57:89:c7:f4:02:74:04:cf:d2:1b:ef:74:cb:0a:0a:
         5e:4b:14:e3:04:53:2d:23:5a:1b:09:da:cc:5a:1f:a4:40:cd:
         cf:77:4f:b4:cc:73:92:88:2d:e4:fe:92:b5:fe:02:7f:d0:8e:
         47:16:23:a4:12:c4:dd:ae:60:48:57:d8:cf:18:3d:21:d8:6d:
         f8:c9:90:21:c3:ef:bb:ab:11:18:22:d0:f6:e6:ed:bb:db:fc:
         ab:c5:a6:44:1b:21:ed:29:94:74:70:cd:1f:95:5a:3a:d6:62:
         82:7a:fa:7b:20:9a:76:7c:70:1f:b4:f4:1f:f5:48:9f:18:45:
         cd:37:fa:9b:3c:ec:2b:20:0f:f7:7d:51:3c:f8:32:8d:10:7d:
         2e:dd:59:8e:5c:d0:9b:87:ed:4e:a2:9a:6f:8a:01:a4:7a:19:
         6c:f2:07:c0:fe:1f:d3:c1:34:3f:b5:3c:3e:05:a5:3f:43:23:
         3a:21:e8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:30:50 2025 by rpki-client