Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32342d3234203d3e20323639353339.roa
File:                     34352e3138372e3136302e302f32342d3234203d3e20323639353339.roa (raw, json)
Hash identifier:          2ECEUOQQeTiNN5vhWV9G5SpaiBpVlWVqBKJx4lCW82M=
Subject key identifier:   0D:2B:36:27:C8:68:05:D9:50:FF:3D:30:BD:E1:E0:45:CF:B0:7E:FD
Certificate issuer:       /CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
Certificate serial:       7FE38EA22677764350258D64690CFB82C572B5CD
Authority key identifier: C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32342d3234203d3e20323639353339.roa
Signing time:             Fri 16 Jun 2023 15:03:40 +0000
ROA not before:           Fri 16 Jun 2023 14:58:40 +0000
ROA not after:            Fri 14 Jun 2024 15:03:40 +0000
asID:                     269539
IP address blocks:        45.187.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e3:8e:a2:26:77:76:43:50:25:8d:64:69:0c:fb:82:c5:72:b5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
        Validity
            Not Before: Jun 16 14:58:40 2023 GMT
            Not After : Jun 14 15:03:40 2024 GMT
        Subject: CN=0D2B3627C86805D950FF3D30BDE1E045CFB07EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:60:20:e7:08:b6:ad:73:78:60:0e:78:17:
                    b5:75:b8:08:2c:2c:f3:0b:84:ab:e4:e4:54:09:ff:
                    ce:8a:e6:6d:7b:25:8f:32:fd:d0:a2:3e:ec:33:2a:
                    63:c7:10:e5:b6:3e:c5:37:10:71:74:37:3e:a5:81:
                    ae:59:78:a5:b9:92:49:07:f1:3f:69:2c:21:9b:b8:
                    91:13:e7:ac:ad:99:b6:cc:42:4f:75:9e:43:9c:88:
                    4e:00:10:9e:a5:19:c2:de:10:ea:ff:4a:fd:e2:91:
                    66:f9:7c:34:f1:49:51:b3:be:25:7f:56:47:da:09:
                    be:19:07:a7:c3:18:34:16:f2:91:dc:b2:7a:62:13:
                    bf:1f:f1:14:e5:bb:7b:62:27:11:ff:72:b1:a5:95:
                    61:0a:4b:c1:ce:e8:19:d6:30:f9:9e:47:7f:51:77:
                    61:9f:3c:a2:2c:7a:0b:4c:0c:8b:d9:79:26:69:f3:
                    ea:72:1a:94:c4:32:bf:a9:05:e6:99:17:00:73:36:
                    66:94:65:71:48:eb:6a:94:82:da:b3:7b:b0:71:b8:
                    a1:79:51:5d:0b:e5:a8:0b:c3:53:45:5c:14:30:dc:
                    3f:44:fb:7d:79:35:18:9f:1d:73:a1:c5:07:7c:e2:
                    30:ca:dd:e3:40:e6:82:de:b4:3c:40:f4:3e:01:45:
                    7b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2B:36:27:C8:68:05:D9:50:FF:3D:30:BD:E1:E0:45:CF:B0:7E:FD
            X509v3 Authority Key Identifier:
                keyid:C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32342d3234203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ba:b4:4f:51:f8:b5:31:e8:f5:00:21:20:d0:bd:dc:8b:11:
         c3:7d:45:0b:32:51:f9:fd:ec:54:77:fa:97:47:6e:6b:d6:81:
         33:7a:bc:c4:a0:01:e8:5f:de:bd:8e:5a:87:e5:ac:b9:f8:77:
         ef:15:b8:74:2e:f3:56:cf:c6:95:56:a8:cc:48:6d:87:35:99:
         b9:e1:a3:ea:95:c9:31:ef:ad:00:df:a9:2b:cf:a2:f1:88:03:
         08:5d:66:c0:2f:b3:d5:96:af:ad:d1:ef:c2:8f:01:ca:ac:27:
         1c:24:75:eb:33:d1:3f:35:34:44:4a:14:c7:72:7c:c3:f4:52:
         47:d4:d6:e5:66:3d:f9:07:b6:44:b1:d5:be:8a:80:17:3a:34:
         5a:70:55:92:c1:d1:b8:01:93:da:dd:7f:a4:f0:7d:61:a5:e9:
         1f:09:23:ac:f8:ba:84:f0:6a:7a:8d:f8:86:d0:b4:50:54:d0:
         ad:1a:9c:d6:29:fa:77:62:f0:4d:d2:fe:97:10:b3:e7:70:d5:
         6e:97:ee:f0:5b:1b:b4:93:1d:ac:54:0f:43:4c:9c:c8:ca:37:
         99:ac:5a:0d:31:15:0f:22:be:8e:08:f9:d1:44:7d:00:bf:92:
         d6:06:13:85:4e:d0:98:c2:1c:fa:2d:29:0b:f6:66:79:09:1e:
         77:b5:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:50:46 2025 by rpki-client