Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/34352e3138322e31362e302f32322d3232203d3e20323639323631.roa
File:                     34352e3138322e31362e302f32322d3232203d3e20323639323631.roa (raw, json)
Hash identifier:          aWnZktMFW+uFEJtPapWnMdpAOmirKPC57y542ZjuGm0=
Subject key identifier:   9E:EB:B5:8D:D6:54:09:1A:66:40:4C:33:97:37:25:83:BB:05:35:3B
Certificate issuer:       /CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
Certificate serial:       6929D19BE47EB247157BDBED745BEE64E8736119
Authority key identifier: 95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/34352e3138322e31362e302f32322d3232203d3e20323639323631.roa
Signing time:             Fri 21 Jul 2023 18:43:38 +0000
ROA not before:           Fri 21 Jul 2023 18:38:38 +0000
ROA not after:            Fri 19 Jul 2024 18:43:38 +0000
asID:                     269261
IP address blocks:        45.182.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:29:d1:9b:e4:7e:b2:47:15:7b:db:ed:74:5b:ee:64:e8:73:61:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
        Validity
            Not Before: Jul 21 18:38:38 2023 GMT
            Not After : Jul 19 18:43:38 2024 GMT
        Subject: CN=9EEBB58DD654091A66404C3397372583BB05353B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:97:49:4a:ea:e3:ac:b7:1c:93:45:9e:8e:
                    56:2d:f9:6e:93:d1:ea:49:05:dd:88:0b:a6:a4:c8:
                    e2:63:a0:61:18:76:85:ac:6d:4a:43:97:4e:bd:36:
                    e1:b3:52:61:52:58:ac:ee:9c:eb:52:a5:1c:8c:28:
                    9d:51:63:a3:d0:59:1a:ff:a1:59:3e:7a:d8:24:77:
                    64:e4:f1:c2:b2:02:e6:e3:0f:77:e8:78:cd:1f:45:
                    26:4e:17:da:e1:8e:17:28:f6:69:95:04:b3:94:7a:
                    e4:03:d3:46:b1:5c:71:c5:9a:b0:84:bc:cf:cc:83:
                    80:a7:10:be:cb:cc:17:79:58:2a:67:7c:16:94:69:
                    03:59:88:b7:55:ca:96:37:22:03:dc:fe:0e:a4:d8:
                    0c:69:cd:25:af:ba:67:20:20:6d:fb:bd:a6:9a:a2:
                    d9:03:07:6d:0d:15:a1:92:69:23:2d:ef:49:41:a7:
                    8b:66:8e:84:bb:d5:9e:aa:74:da:fb:b1:15:05:9d:
                    64:ba:5e:18:4d:90:7e:0c:93:0d:74:72:91:e2:3e:
                    b5:00:6b:ca:55:e3:15:76:8e:8c:8d:8b:c9:b8:2a:
                    8b:e9:56:f4:c3:0a:07:cb:5c:f9:4e:0c:aa:29:f1:
                    c4:be:8d:f3:0a:fd:f3:bf:47:21:8a:82:76:dc:9d:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EB:B5:8D:D6:54:09:1A:66:40:4C:33:97:37:25:83:BB:05:35:3B
            X509v3 Authority Key Identifier:
                keyid:95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/34352e3138322e31362e302f32322d3232203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:9b:41:b0:0a:ab:21:60:d9:c1:6f:e8:85:b6:80:e8:5b:9e:
         3e:e4:b3:56:d5:16:31:15:a6:b7:25:be:f0:cb:46:69:2e:b5:
         6f:b0:96:c6:8f:0d:1f:2d:3f:cc:24:db:7e:f4:7f:4f:44:c3:
         ac:8f:e1:a8:6b:c7:a5:34:94:24:58:35:0d:bc:3f:f1:76:db:
         91:62:aa:d6:73:fb:f4:6f:8d:34:48:e3:5e:91:89:da:73:57:
         91:1e:a0:4b:fd:9d:96:db:64:24:2d:3b:0b:56:62:95:54:b1:
         3c:22:b2:81:58:a8:4a:a0:b5:d3:b9:ef:16:1f:a3:a4:8e:30:
         7c:3c:cf:ed:fb:5b:11:db:70:ae:9f:60:89:a5:11:50:f7:35:
         73:15:76:0a:62:7c:6e:ac:85:ae:fb:dc:2e:93:3f:33:7b:30:
         c2:a9:ad:bb:78:10:db:c1:9d:1b:3b:40:38:33:d3:2d:4f:90:
         9c:3d:2e:cc:95:18:b3:49:e3:64:1c:b9:de:ad:d6:f1:5f:76:
         0c:7c:8e:ab:a1:e1:c6:62:92:b2:85:de:4a:24:48:62:23:68:
         32:03:b8:d8:01:65:d9:fd:d0:1e:67:d5:b3:92:61:68:5e:92:
         db:bd:3a:a2:74:4d:f7:b9:12:18:c0:82:74:03:09:f6:92:93:
         7c:65:69:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 23:49:09 2025 by rpki-client