Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/34352e3139312e32362e302f32342d3234203d3e20323639363539.roa
File:                     34352e3139312e32362e302f32342d3234203d3e20323639363539.roa (raw, json)
Hash identifier:          CZ4NPZOQkPCFlJau0K7cwEMVNaNl8J1ydxPCcPCvEEM=
Subject key identifier:   93:14:A4:5D:C4:69:0E:22:BE:6F:43:6E:66:AB:19:05:A4:79:17:03
Certificate issuer:       /CN=9A58D0B7179B6EA51E78B42B74723648AD8910EE
Certificate serial:       5BC0B3C5F00DFF7A3EF0E450D247B3DD2501C946
Authority key identifier: 9A:58:D0:B7:17:9B:6E:A5:1E:78:B4:2B:74:72:36:48:AD:89:10:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/34352e3139312e32362e302f32342d3234203d3e20323639363539.roa
Signing time:             Fri 18 Nov 2022 14:06:37 +0000
ROA not before:           Fri 18 Nov 2022 14:01:37 +0000
ROA not after:            Fri 17 Nov 2023 14:06:37 +0000
asID:                     269659
IP address blocks:        45.191.26.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c0:b3:c5:f0:0d:ff:7a:3e:f0:e4:50:d2:47:b3:dd:25:01:c9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A58D0B7179B6EA51E78B42B74723648AD8910EE
        Validity
            Not Before: Nov 18 14:01:37 2022 GMT
            Not After : Nov 17 14:06:37 2023 GMT
        Subject: CN=9314A45DC4690E22BE6F436E66AB1905A4791703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:4d:90:a5:eb:3a:ea:60:3c:dc:d6:49:35:
                    7f:7c:d0:21:20:fc:81:15:3a:d0:0f:7b:d9:bd:11:
                    e2:53:23:bc:93:42:a7:55:a7:ea:2e:49:5a:6d:67:
                    a3:7b:06:9a:fa:fb:a0:83:9f:c2:1b:7d:c7:ff:2b:
                    0e:5f:6a:18:ed:b6:4d:ca:16:e5:37:b7:93:cf:93:
                    0d:b5:b0:72:ff:ff:f0:f9:9a:4d:56:b6:88:de:74:
                    4c:86:f1:ae:72:85:a2:ec:86:61:08:16:33:cc:09:
                    23:e5:28:0d:5c:44:c0:74:ee:95:ba:d6:74:92:4f:
                    71:63:fd:1a:9b:5c:4a:e3:e2:3b:50:85:a3:a2:db:
                    5f:4d:c6:75:b7:98:31:a9:3b:b0:1e:68:04:ad:de:
                    a9:dc:1f:c6:7c:69:bb:5a:f9:b1:5c:b6:52:cb:42:
                    48:63:2b:e8:08:c1:a0:ae:7f:4f:86:3c:b6:ac:79:
                    b8:2a:a1:cc:b2:ff:63:f4:19:18:e8:31:b3:65:cf:
                    94:c0:cc:b3:21:0d:54:cb:f7:eb:36:f4:cc:54:d9:
                    e9:c0:45:74:e2:5d:fc:79:5c:41:ef:a5:4d:0c:38:
                    11:0d:0b:62:50:31:c7:5a:a5:07:70:47:23:99:a2:
                    53:6d:a5:d9:2a:08:cd:5e:69:fe:0c:af:2b:2f:de:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:14:A4:5D:C4:69:0E:22:BE:6F:43:6E:66:AB:19:05:A4:79:17:03
            X509v3 Authority Key Identifier:
                keyid:9A:58:D0:B7:17:9B:6E:A5:1E:78:B4:2B:74:72:36:48:AD:89:10:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A58D0B7179B6EA51E78B42B74723648AD8910EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gmGM6Td4G1HHNtjKVLk5BAxrAevNzvAhaSH5w5yAJeY/0/34352e3139312e32362e302f32342d3234203d3e20323639363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:cb:94:38:5e:20:23:a3:cd:be:f4:33:82:6d:52:24:25:a8:
         9a:d7:da:65:90:6c:23:fd:b0:3b:10:f5:e8:4a:cf:ce:f3:34:
         0c:b3:89:12:ea:42:31:28:f0:25:b3:47:48:da:8e:88:82:6b:
         98:82:78:41:9f:fb:95:52:28:43:c5:4e:26:5c:e3:c6:1e:84:
         15:b1:b1:aa:3b:fd:10:83:50:f1:85:95:78:14:11:3e:ae:c3:
         0e:23:9b:31:55:f7:59:fd:a0:83:c2:72:5d:e6:74:f3:7c:1e:
         a0:93:3e:2b:5b:40:01:e5:45:d3:cd:77:9a:3e:48:88:91:02:
         06:46:ad:7f:88:19:40:75:48:cb:88:5a:53:54:d3:9d:a6:c7:
         f7:39:78:54:d8:bc:45:4a:91:a5:12:72:07:dc:e0:aa:38:e4:
         cd:44:5b:a1:51:28:e7:b1:1f:b0:d1:01:f8:32:5c:a4:ed:77:
         52:4c:a4:26:53:97:f0:70:e7:27:dc:a9:58:f5:11:15:a9:41:
         99:6c:7d:fd:f7:a8:22:0c:3c:e8:5c:20:99:65:4b:0d:e1:4b:
         f0:95:59:4d:d3:4f:f9:f7:7c:31:e6:1b:9b:f4:c4:c0:e7:18:
         d5:3b:73:1a:04:e6:73:6c:44:18:42:fb:e8:c1:f7:9e:18:98:
         e4:0d:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:42:49 2025 by rpki-client