Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3d4vG8ZTqrJ3GYTRw5k2y5gbritWRcLDaHg5TzbfoJth/0/34352e3138302e3131362e302f32332d3234203d3e20323639323731.roa
File:                     34352e3138302e3131362e302f32332d3234203d3e20323639323731.roa (raw, json)
Hash identifier:          2muAMCzBi5ZkUef/cwn1/U4ry/jYMy62VvWW/hlE+hQ=
Subject key identifier:   0B:68:70:1B:56:41:C0:BF:A0:A4:7B:C4:8E:BE:D8:D1:89:89:AC:E1
Certificate issuer:       /CN=89331D39B430650C6C281629A0425E632CE5387D
Certificate serial:       37A0BEC4B5F1D170EE78C96BAB5394BFF18808EF
Authority key identifier: 89:33:1D:39:B4:30:65:0C:6C:28:16:29:A0:42:5E:63:2C:E5:38:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89331D39B430650C6C281629A0425E632CE5387D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3d4vG8ZTqrJ3GYTRw5k2y5gbritWRcLDaHg5TzbfoJth/0/34352e3138302e3131362e302f32332d3234203d3e20323639323731.roa
Signing time:             Fri 05 May 2023 16:39:15 +0000
ROA not before:           Fri 05 May 2023 16:34:15 +0000
ROA not after:            Fri 03 May 2024 16:39:15 +0000
asID:                     269271
IP address blocks:        45.180.116.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a0:be:c4:b5:f1:d1:70:ee:78:c9:6b:ab:53:94:bf:f1:88:08:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89331D39B430650C6C281629A0425E632CE5387D
        Validity
            Not Before: May  5 16:34:15 2023 GMT
            Not After : May  3 16:39:15 2024 GMT
        Subject: CN=0B68701B5641C0BFA0A47BC48EBED8D18989ACE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:04:6c:5a:b2:ec:7b:72:5b:14:11:0f:d5:
                    30:c0:8a:70:96:1a:e6:1f:01:36:21:33:80:61:a1:
                    46:ce:82:79:46:ec:84:49:47:8e:bd:50:5f:dc:41:
                    43:4e:5f:10:b3:34:a4:4a:cc:6c:d7:c3:f5:7f:5c:
                    d9:98:72:58:68:c3:b2:7e:f5:5f:60:73:41:d6:ca:
                    33:1a:4f:b7:f2:41:dd:3b:4b:07:5e:b4:c0:b0:60:
                    0c:f9:0f:a8:ea:6a:09:06:18:13:b8:96:fb:5c:8b:
                    36:50:28:23:5d:49:2d:75:f2:9d:18:9e:26:47:75:
                    8b:d7:b3:8e:ea:63:b8:5d:5d:dc:b2:6e:87:b1:7e:
                    21:28:4c:7f:f2:1b:c2:5e:58:47:a8:8e:db:f0:74:
                    e2:42:18:40:d2:9b:ff:5f:2b:4f:87:bc:43:2f:ec:
                    2c:df:b0:39:25:fd:4b:37:86:df:e3:11:f0:06:bc:
                    ef:04:53:17:ca:d1:64:8a:10:33:ba:a3:e1:2d:a6:
                    15:18:90:75:87:6d:f8:76:13:de:8e:c6:6d:9a:88:
                    67:d5:9b:fb:96:12:73:fa:08:42:f9:f1:72:71:c1:
                    32:7e:1b:28:9a:b2:5a:d2:9c:71:af:dd:74:20:23:
                    86:15:58:60:eb:e6:fd:d2:d0:25:20:34:96:05:57:
                    71:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:68:70:1B:56:41:C0:BF:A0:A4:7B:C4:8E:BE:D8:D1:89:89:AC:E1
            X509v3 Authority Key Identifier:
                keyid:89:33:1D:39:B4:30:65:0C:6C:28:16:29:A0:42:5E:63:2C:E5:38:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3d4vG8ZTqrJ3GYTRw5k2y5gbritWRcLDaHg5TzbfoJth/0/89331D39B430650C6C281629A0425E632CE5387D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89331D39B430650C6C281629A0425E632CE5387D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3d4vG8ZTqrJ3GYTRw5k2y5gbritWRcLDaHg5TzbfoJth/0/34352e3138302e3131362e302f32332d3234203d3e20323639323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:bd:e5:4e:37:96:9d:eb:66:5f:a5:ee:8a:4a:69:0c:42:
         50:a8:c4:b8:54:46:67:16:5d:1b:39:4c:8f:b6:fb:16:e1:fd:
         c8:48:4c:a5:f0:25:6f:a9:1a:30:b6:99:30:91:1d:a7:63:1b:
         88:3f:72:42:cf:54:c3:a1:84:10:60:69:08:64:0e:a0:fd:8b:
         c5:bd:ba:c5:c9:46:8e:0f:90:67:03:1f:de:fa:0c:bd:98:67:
         49:b2:7f:10:06:31:c8:ce:cc:f5:78:f8:ad:46:ac:07:6c:14:
         33:6f:00:7e:3a:4b:7b:31:16:e8:e8:03:a0:8f:c1:ce:64:44:
         06:78:c9:bb:80:e5:c1:76:78:ac:3e:e3:c3:bc:06:34:a5:53:
         96:4a:07:e7:62:48:ce:5d:0e:26:96:67:43:d1:2a:f3:78:df:
         48:52:d2:e1:0b:26:30:c0:fd:38:e0:7e:a7:d6:61:bf:c7:d0:
         d1:4b:90:75:67:cb:e0:50:42:cb:1d:81:31:c5:71:6a:0a:16:
         2d:0e:d6:c9:ac:d6:f2:96:b2:ba:f4:c6:9b:3c:0a:ec:a2:fc:
         ea:19:35:d0:90:34:63:47:64:97:db:f1:a9:74:81:c3:45:4d:
         a0:be:80:b7:a6:1a:2a:56:78:57:6f:2c:40:51:2c:41:1d:59:
         d0:d6:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:06 2025 by rpki-client