Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35362e302f32322d3232203d3e20323639353436.roa
File:                     34352e3138372e35362e302f32322d3232203d3e20323639353436.roa (raw, json)
Hash identifier:          wtidwEDbWW6FJZiaUTJce0HGzfxld3hRSIwEJt5ruyo=
Subject key identifier:   EF:B7:23:D0:59:6E:15:54:29:47:DE:EA:BE:9F:D5:13:99:E3:48:2D
Certificate issuer:       /CN=549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3
Certificate serial:       08BA787B34196E259907AFFDA2699473CC4E8E80
Authority key identifier: 54:9B:96:CD:BE:DD:FA:CD:C6:11:B9:A0:90:3F:B4:23:3E:3F:FD:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35362e302f32322d3232203d3e20323639353436.roa
Signing time:             Wed 08 Nov 2023 17:19:47 +0000
ROA not before:           Wed 08 Nov 2023 17:14:47 +0000
ROA not after:            Wed 06 Nov 2024 17:19:47 +0000
asID:                     269546
IP address blocks:        45.187.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ba:78:7b:34:19:6e:25:99:07:af:fd:a2:69:94:73:cc:4e:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3
        Validity
            Not Before: Nov  8 17:14:47 2023 GMT
            Not After : Nov  6 17:19:47 2024 GMT
        Subject: CN=EFB723D0596E15542947DEEABE9FD51399E3482D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:f3:31:6b:d9:8f:5f:5e:6f:28:7e:22:b4:
                    ec:69:9f:bf:8c:8c:15:3d:1c:47:a5:71:f7:5d:ac:
                    8c:2b:0f:e5:54:75:d0:5d:a3:8b:8f:94:bb:2f:c7:
                    7f:97:6f:34:75:88:b2:82:1a:6a:59:c4:5d:46:1f:
                    14:cb:35:2f:06:69:b1:26:e0:7a:cc:af:a2:45:8e:
                    84:ff:6a:35:6f:f1:df:90:c3:32:a2:6e:c7:4d:e8:
                    d2:4a:7f:88:28:06:d5:62:fc:32:43:7f:bd:6b:98:
                    ee:f4:bb:1d:74:3a:76:c3:76:0e:15:b0:50:fb:68:
                    e2:20:4e:85:d9:b0:ad:8c:b4:8c:12:16:a9:cf:d6:
                    12:8e:1a:e9:97:9c:52:dd:0a:cf:e5:4f:78:3f:e0:
                    d7:ec:7c:34:e2:0d:f1:9a:4d:a9:9f:bb:f7:cf:84:
                    6e:87:fc:22:07:34:87:20:bc:2e:ac:f0:b1:77:91:
                    72:22:c7:16:31:6f:ce:bc:7c:80:2a:25:3a:2e:da:
                    b8:c0:09:65:a2:bf:9d:fb:51:91:78:65:f2:4c:4b:
                    f0:76:8a:05:46:a4:74:a2:a1:c4:e9:87:c4:32:7a:
                    d5:4a:d8:c6:35:ca:27:fb:e4:bc:0f:e1:22:70:c3:
                    c8:39:5c:35:4c:14:a8:ab:58:cb:2f:46:2d:48:7a:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B7:23:D0:59:6E:15:54:29:47:DE:EA:BE:9F:D5:13:99:E3:48:2D
            X509v3 Authority Key Identifier:
                keyid:54:9B:96:CD:BE:DD:FA:CD:C6:11:B9:A0:90:3F:B4:23:3E:3F:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35362e302f32322d3232203d3e20323639353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:3d:75:a7:a0:9d:0c:16:72:57:4f:d2:b1:6c:8c:8c:e8:6e:
         6b:9e:f5:03:11:b9:f4:50:d5:36:9d:4f:68:b6:8a:43:ba:30:
         65:86:57:ea:da:04:b3:d8:a9:2c:a2:f7:d8:e5:b1:5b:6a:9f:
         2f:4c:c2:4d:85:60:4f:bb:8c:1d:a9:3a:3b:80:15:f7:3b:b8:
         3c:64:f5:06:71:7e:62:9b:4a:28:0e:54:ce:d7:42:d6:7a:35:
         5e:7f:20:aa:06:c3:dd:3b:a5:04:37:d0:4c:17:94:25:6e:d3:
         f3:55:e0:88:74:16:bc:d3:31:2b:7c:e6:7c:70:db:e6:14:05:
         46:d8:4d:d7:7b:37:d1:f3:79:5e:dd:f0:62:58:4f:73:8f:5e:
         12:0f:81:59:8c:da:69:64:a6:06:06:25:ae:32:50:a4:fd:e3:
         7f:c1:65:87:d7:c5:72:e4:f6:4a:8f:9d:35:52:6b:67:5a:7e:
         6d:e1:9e:be:14:cb:72:26:54:ca:86:71:b3:e3:cc:c3:48:ec:
         30:d1:87:f9:6c:df:aa:a0:25:d7:49:c9:f2:51:ba:c8:69:9e:
         82:d7:99:77:db:14:c5:d0:90:aa:ce:b8:87:a4:3f:b0:be:32:
         d5:e5:65:b9:9b:b1:54:2f:fd:46:4d:9a:b6:dc:4f:a3:0b:2d:
         a9:5d:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:57 2025 by rpki-client