Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32332e302f32342d3234203d3e20323638353038.roa
File:                     34352e3136322e32332e302f32342d3234203d3e20323638353038.roa (raw, json)
Hash identifier:          YnEv1MRzqWvjCXQ1KoMTpLUAbWx/zXYHHTElF+JT1PQ=
Subject key identifier:   4E:BB:79:8E:B5:F9:4F:B7:23:48:98:31:01:7D:9A:2E:A5:80:45:1F
Certificate issuer:       /CN=DAEA49A3FD15ABED2107C811FA0C254372F1ACBE
Certificate serial:       54D80E4FA7F884E66316AE1C43451C8D2993B312
Authority key identifier: DA:EA:49:A3:FD:15:AB:ED:21:07:C8:11:FA:0C:25:43:72:F1:AC:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAEA49A3FD15ABED2107C811FA0C254372F1ACBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32332e302f32342d3234203d3e20323638353038.roa
Signing time:             Tue 28 Feb 2023 19:41:21 +0000
ROA not before:           Tue 28 Feb 2023 19:36:21 +0000
ROA not after:            Tue 27 Feb 2024 19:41:21 +0000
asID:                     268508
IP address blocks:        45.162.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d8:0e:4f:a7:f8:84:e6:63:16:ae:1c:43:45:1c:8d:29:93:b3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAEA49A3FD15ABED2107C811FA0C254372F1ACBE
        Validity
            Not Before: Feb 28 19:36:21 2023 GMT
            Not After : Feb 27 19:41:21 2024 GMT
        Subject: CN=4EBB798EB5F94FB723489831017D9A2EA580451F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:f5:b7:e9:cd:e0:82:33:05:22:82:f3:76:
                    c5:d3:32:31:3d:19:74:64:b1:e5:25:da:6b:14:e6:
                    16:f3:c3:46:73:f9:c2:79:bf:17:4c:78:00:e4:a9:
                    3c:97:13:a6:81:1e:51:e9:5d:7e:84:a4:c7:3e:ac:
                    0c:d2:27:d1:62:ef:1d:7c:ef:78:51:61:73:c8:62:
                    60:33:84:25:b0:8d:1a:97:83:06:0e:6b:9b:f0:bc:
                    15:9e:88:9b:65:ad:35:c8:6b:8f:c8:32:56:df:ba:
                    9e:a1:07:73:bc:5b:85:50:b9:9b:cb:40:c9:70:67:
                    ee:9b:91:3f:7c:52:b0:9a:18:e4:ee:59:0c:fb:6e:
                    34:53:e2:92:32:03:bc:82:08:cb:f7:bb:23:b5:bd:
                    23:bf:97:23:bb:b3:7c:53:4a:2d:db:d4:4f:06:d7:
                    59:ec:d1:89:88:4b:55:4a:03:42:fa:f9:3b:37:5a:
                    06:1e:0d:4e:cf:04:e2:df:13:fa:cc:53:e1:b9:75:
                    95:76:a9:fa:16:9e:36:c8:b3:7b:86:31:01:3c:e2:
                    28:36:b1:a3:a0:a0:b1:20:0f:14:18:a5:eb:42:21:
                    72:30:44:43:28:80:12:43:8f:c3:d3:f8:31:f6:87:
                    60:ea:1c:d2:19:d0:9d:30:db:34:1c:e8:a5:51:a9:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BB:79:8E:B5:F9:4F:B7:23:48:98:31:01:7D:9A:2E:A5:80:45:1F
            X509v3 Authority Key Identifier:
                keyid:DA:EA:49:A3:FD:15:AB:ED:21:07:C8:11:FA:0C:25:43:72:F1:AC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/DAEA49A3FD15ABED2107C811FA0C254372F1ACBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAEA49A3FD15ABED2107C811FA0C254372F1ACBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32332e302f32342d3234203d3e20323638353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:e6:3d:00:f2:e3:2b:92:55:76:64:56:98:f1:c4:0a:96:
         20:5a:49:15:12:87:71:78:23:7c:18:52:ff:17:ea:29:6c:ea:
         b6:a9:3b:8c:6a:ac:74:44:08:49:e5:a1:98:58:8c:f0:2c:bf:
         87:d3:19:d2:91:e6:9d:b6:f7:64:7f:b2:22:84:9f:f7:ff:2a:
         56:50:01:8b:ff:df:75:83:d5:76:50:ec:38:38:0c:42:7a:3c:
         b2:6b:19:44:b8:e4:f7:0b:0f:5b:51:45:88:5c:1d:36:04:1d:
         6d:5b:89:c5:c5:c9:bd:ce:90:1c:1e:87:ad:8e:09:d7:34:19:
         49:3f:f7:7e:80:59:e0:11:77:84:d1:76:b8:7b:28:06:22:7c:
         92:41:fb:17:51:7d:93:8b:83:1b:79:19:28:54:47:96:87:99:
         55:75:af:8c:de:2c:d0:4c:09:36:90:f2:d5:f9:b3:51:b8:08:
         01:49:bc:28:84:3d:6f:ca:4e:98:4c:3b:5f:b3:df:db:88:21:
         04:34:6f:96:41:7b:04:da:ba:a9:e5:e9:d2:76:16:56:98:2e:
         92:ce:bb:a9:f5:43:fb:b9:ac:b5:0a:23:68:8a:33:33:6a:4e:
         2d:db:e5:4f:f1:c2:15:15:55:ac:f3:11:8a:d1:8e:db:dc:64:
         2d:db:cf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:32 2025 by rpki-client