Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3137342e3138382e302f32332d3233203d3e20323634353632.roa
File:                     34352e3137342e3138382e302f32332d3233203d3e20323634353632.roa (raw, json)
Hash identifier:          hZ/qYqnS3JxH3ugMHdesQiz2zb/37qH3R+oULTm4AmE=
Subject key identifier:   32:CA:B7:E0:61:42:A9:30:88:A6:A5:10:0C:60:DA:F0:DF:02:26:E0
Certificate issuer:       /CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
Certificate serial:       622D56D82438F0036E184568149BFBB0B7950C81
Authority key identifier: B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3137342e3138382e302f32332d3233203d3e20323634353632.roa
Signing time:             Fri 05 May 2023 19:15:31 +0000
ROA not before:           Fri 05 May 2023 19:10:31 +0000
ROA not after:            Fri 03 May 2024 19:15:31 +0000
asID:                     264562
IP address blocks:        45.174.188.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2d:56:d8:24:38:f0:03:6e:18:45:68:14:9b:fb:b0:b7:95:0c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
        Validity
            Not Before: May  5 19:10:31 2023 GMT
            Not After : May  3 19:15:31 2024 GMT
        Subject: CN=32CAB7E06142A93088A6A5100C60DAF0DF0226E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:1e:ab:50:d1:2f:07:f6:2f:4f:f3:84:5d:
                    2f:46:9c:ad:e0:33:5a:ba:4c:85:f5:1f:75:f9:6f:
                    33:d1:78:2a:6a:b7:e7:71:16:06:7d:50:4e:5a:ba:
                    da:24:74:30:53:bb:97:fa:0a:2a:c7:83:68:17:12:
                    19:83:be:00:99:9a:48:bf:67:db:50:71:f3:34:25:
                    d6:e2:75:37:d6:2c:bc:0c:6e:76:72:21:e7:a5:92:
                    5e:39:59:60:11:bd:0e:74:7f:b7:b3:97:f3:81:40:
                    bf:81:97:3c:7e:0b:95:1b:b0:18:9d:55:3e:65:d6:
                    32:b8:46:55:db:6a:a5:b4:df:5d:05:a1:03:e4:5e:
                    19:2a:61:dd:66:97:a5:57:39:8c:26:b7:c3:de:dd:
                    09:ce:3a:85:67:ae:a0:e0:56:8e:a1:88:da:3a:15:
                    56:ad:ba:1c:92:5a:e9:84:f0:b1:4f:87:d3:d1:68:
                    24:0b:74:cb:19:15:d7:1a:a6:6c:98:64:21:bb:7c:
                    f0:cf:44:7d:28:d3:52:65:6a:40:58:0c:20:03:bb:
                    d2:9e:ab:35:63:4c:99:d4:41:49:88:eb:f3:3a:7b:
                    63:86:93:70:8d:ca:34:88:14:2a:cf:0e:43:2b:f8:
                    5b:4d:3a:19:86:28:70:b9:bc:d1:7f:cf:fc:a6:2b:
                    86:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CA:B7:E0:61:42:A9:30:88:A6:A5:10:0C:60:DA:F0:DF:02:26:E0
            X509v3 Authority Key Identifier:
                keyid:B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3137342e3138382e302f32332d3233203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:9e:43:db:19:5a:86:ba:92:1e:14:2f:0f:d1:c9:6a:eb:84:
         0e:b4:77:f2:b0:d7:9c:6a:82:0b:af:b6:61:e6:40:15:37:5d:
         31:c1:69:15:29:99:b8:6a:09:5a:52:4e:ae:76:3b:e2:a7:3f:
         26:6f:75:52:72:d4:f0:39:a6:90:53:11:c8:01:25:63:a9:0a:
         f0:be:1d:76:1f:6e:2d:55:ce:a3:8e:2c:3e:24:57:e5:71:a4:
         bc:df:70:75:fc:ca:63:b8:ae:e4:ee:cd:a7:98:26:fd:bd:7a:
         42:68:47:8a:bc:10:9b:e6:24:53:83:f5:6b:48:9f:50:2c:c7:
         78:eb:b5:a0:b1:cf:8e:02:4a:6b:ef:2f:81:26:fa:19:7a:e3:
         bf:99:e6:35:cd:56:96:4f:1e:aa:ec:d9:32:05:92:96:ca:05:
         3d:b9:e2:1d:e9:40:5b:4d:11:3f:8c:ef:33:4b:97:93:48:b3:
         b9:74:49:0e:bd:1f:44:5b:24:f4:2b:1a:ef:96:1a:8a:7b:f7:
         bb:20:5f:13:4e:bd:6e:dc:78:42:ea:94:3d:d8:e8:f0:9c:d5:
         01:73:89:c6:6d:3a:98:a8:d3:37:bc:ab:eb:2d:ce:dc:98:b4:
         2d:78:36:56:60:65:44:95:92:c4:f0:e9:9e:a4:9d:4d:6a:05:
         49:22:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:23:03 2025 by rpki-client