Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/34352e3138382e3132302e302f32322d3332203d3e20323639353039.roa
File:                     34352e3138382e3132302e302f32322d3332203d3e20323639353039.roa (raw, json)
Hash identifier:          xIV2b+aarEpSsoFWnhyNRDnPZWk0W/hpbDHxEbuFt+s=
Subject key identifier:   6D:B6:24:8F:06:C5:04:4E:74:B4:53:60:88:77:91:CC:C0:AA:7E:29
Certificate issuer:       /CN=A241D017C20F338021199DDB6542CF566A53BB03
Certificate serial:       151603C6EF4F443461EC821A41F311A55E510455
Authority key identifier: A2:41:D0:17:C2:0F:33:80:21:19:9D:DB:65:42:CF:56:6A:53:BB:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A241D017C20F338021199DDB6542CF566A53BB03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/34352e3138382e3132302e302f32322d3332203d3e20323639353039.roa
Signing time:             Thu 10 Nov 2022 19:04:23 +0000
ROA not before:           Thu 10 Nov 2022 18:59:23 +0000
ROA not after:            Thu 09 Nov 2023 19:04:23 +0000
asID:                     269509
IP address blocks:        45.188.120.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:16:03:c6:ef:4f:44:34:61:ec:82:1a:41:f3:11:a5:5e:51:04:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A241D017C20F338021199DDB6542CF566A53BB03
        Validity
            Not Before: Nov 10 18:59:23 2022 GMT
            Not After : Nov  9 19:04:23 2023 GMT
        Subject: CN=6DB6248F06C5044E74B45360887791CCC0AA7E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:75:21:cf:fc:a8:80:8c:24:9e:78:e7:39:3d:
                    65:8d:ef:b2:c2:62:9b:28:c2:51:ba:35:ee:cd:93:
                    95:d7:71:da:1b:da:11:e2:6f:64:91:31:08:92:3f:
                    47:05:bf:1a:fc:da:06:2b:22:6e:ec:80:df:7a:65:
                    c6:11:2d:40:ce:de:92:7b:4b:eb:03:80:83:1a:d7:
                    61:ea:ea:d9:34:7d:a8:a5:df:1f:f3:6a:cd:0b:18:
                    88:38:52:6b:1e:64:44:a7:dd:0c:49:e7:fe:c7:ee:
                    c6:99:9e:1a:b0:e6:14:aa:47:a8:20:12:75:cb:9a:
                    27:50:99:61:2f:87:87:c1:30:1a:5d:a1:f0:13:5d:
                    52:25:35:4e:8a:1b:47:e2:72:f4:2a:2c:9e:4a:1c:
                    cd:2c:e1:0a:93:9a:a1:d0:84:94:f1:85:a2:7c:3d:
                    a0:79:a7:4f:31:09:03:7a:5e:b9:5f:18:e7:9e:ea:
                    90:51:ed:d5:10:43:93:94:a4:cd:f4:39:d2:60:06:
                    ad:4e:0f:9a:50:56:c3:d4:a3:6a:92:51:03:7a:c4:
                    35:29:ec:da:f7:bd:e8:ad:97:a6:00:e5:1a:6e:3d:
                    6d:35:25:d8:db:ce:5a:a2:67:40:90:cb:9f:c2:d0:
                    a0:6c:7d:06:6d:b2:bf:d3:d6:73:27:9f:c3:1a:47:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B6:24:8F:06:C5:04:4E:74:B4:53:60:88:77:91:CC:C0:AA:7E:29
            X509v3 Authority Key Identifier:
                keyid:A2:41:D0:17:C2:0F:33:80:21:19:9D:DB:65:42:CF:56:6A:53:BB:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/A241D017C20F338021199DDB6542CF566A53BB03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A241D017C20F338021199DDB6542CF566A53BB03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/34352e3138382e3132302e302f32322d3332203d3e20323639353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:0e:99:0a:89:ae:68:46:93:db:03:2d:b0:5f:25:5b:0a:5a:
         c2:92:1e:a7:f6:e3:5f:bf:69:14:0b:53:d1:0c:bc:e5:a6:b4:
         0c:3d:6f:57:5d:8f:f8:fa:b9:05:d3:cd:c6:4e:f9:e1:78:09:
         d2:d7:87:30:90:35:e4:27:83:86:c3:b5:d6:64:c5:50:9b:f4:
         47:31:f9:b2:5a:b4:97:c2:85:27:c1:e7:f7:a9:3d:a7:b8:19:
         8b:10:92:41:1d:87:06:45:68:14:1c:4f:85:9d:18:1f:7d:fd:
         8d:f6:89:12:1d:8c:5b:a3:2c:e1:42:8e:91:b6:cf:86:9f:be:
         1a:57:1f:2c:4a:8b:5a:d5:8b:ba:74:38:2e:0d:9d:e4:bf:bc:
         9d:a5:2a:f0:c9:54:46:ee:f9:22:b7:c8:97:27:65:b7:d3:88:
         75:2a:96:76:b9:10:d9:96:a1:21:b9:57:69:7c:71:eb:56:7a:
         68:56:84:be:1c:59:2c:e7:86:5f:9f:30:d2:73:92:5f:7c:8d:
         c6:3b:50:4b:3b:cc:b0:5b:fe:22:b1:1d:70:5b:89:f3:af:e9:
         db:8f:ee:66:75:a6:47:ad:9d:e4:c3:96:4f:a5:3a:1c:c4:71:
         b0:e7:cf:8e:5c:ce:43:91:82:05:42:e5:3e:0c:44:a5:a0:20:
         41:9d:f2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:01:47 2025 by rpki-client