Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/34352e3137392e362e302f32342d3234203d3e20323639313230.roa
File:                     34352e3137392e362e302f32342d3234203d3e20323639313230.roa (raw, json)
Hash identifier:          EWApQolCvfs3UgQuxddVl5z43SpAoZJ4Da/9wunNkcw=
Subject key identifier:   9F:B6:D6:72:C4:CC:5C:D8:59:BD:9F:4C:52:9D:E2:4E:CB:66:3E:CB
Certificate issuer:       /CN=6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A
Certificate serial:       013ACDE8F6D3DD7900384138BC1712C775BFE7E6
Authority key identifier: 6B:6A:2A:9C:47:A9:F6:0A:7A:49:B3:AB:53:B5:8E:89:F7:12:75:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/34352e3137392e362e302f32342d3234203d3e20323639313230.roa
Signing time:             Wed 08 Nov 2023 17:40:00 +0000
ROA not before:           Wed 08 Nov 2023 17:35:00 +0000
ROA not after:            Wed 06 Nov 2024 17:40:00 +0000
asID:                     269120
IP address blocks:        45.179.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3a:cd:e8:f6:d3:dd:79:00:38:41:38:bc:17:12:c7:75:bf:e7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A
        Validity
            Not Before: Nov  8 17:35:00 2023 GMT
            Not After : Nov  6 17:40:00 2024 GMT
        Subject: CN=9FB6D672C4CC5CD859BD9F4C529DE24ECB663ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:1e:c9:bc:0e:53:eb:7e:0d:31:c6:88:9d:
                    1d:d8:f7:45:23:65:f9:4d:c8:49:53:bc:93:69:bc:
                    af:70:26:30:8c:65:f8:3d:0b:6d:80:a8:ec:75:43:
                    20:d0:17:ec:70:51:47:30:df:25:c7:cf:70:34:f3:
                    d6:1f:44:3a:c6:f2:d3:24:92:1a:22:28:a7:bb:be:
                    48:d5:c2:1a:fc:95:c1:19:52:9e:6c:bd:17:b2:aa:
                    ba:23:e8:99:17:70:7f:aa:f6:7e:e3:1b:0b:d3:e8:
                    48:7f:d2:f3:6f:ac:50:5d:59:c5:39:ba:f4:de:38:
                    c6:45:dc:61:98:06:c5:ef:91:ad:02:7e:2f:54:d3:
                    2f:cc:6d:f7:cf:58:1e:51:61:55:09:a0:31:14:ac:
                    80:dc:00:8f:6c:df:ca:86:2b:e8:f3:8e:ba:75:e6:
                    42:4e:ff:a3:89:0f:24:55:02:b1:dd:b3:1e:f2:94:
                    43:3e:04:18:c6:9e:ae:84:a2:c2:08:5d:d8:80:0e:
                    5a:a4:b6:5e:34:83:60:66:3a:26:06:ea:ed:5d:48:
                    a6:f2:a3:98:05:07:6b:56:77:33:bf:7e:bd:97:86:
                    9a:cc:29:b9:df:65:92:6f:0a:3c:4c:58:45:e0:2f:
                    db:4b:12:94:46:49:a5:51:89:0f:0e:0d:9c:aa:cb:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B6:D6:72:C4:CC:5C:D8:59:BD:9F:4C:52:9D:E2:4E:CB:66:3E:CB
            X509v3 Authority Key Identifier:
                keyid:6B:6A:2A:9C:47:A9:F6:0A:7A:49:B3:AB:53:B5:8E:89:F7:12:75:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/34352e3137392e362e302f32342d3234203d3e20323639313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:80:97:e9:98:a4:1e:9b:08:67:55:5b:ee:13:e6:87:0a:a8:
         6d:13:a4:a3:72:1e:a6:35:cd:f6:6f:72:8d:8a:a5:3c:7c:74:
         5b:95:66:54:61:05:3e:4d:9e:94:4b:6d:8a:52:d5:a0:73:bb:
         f1:67:a3:ea:e0:98:dd:38:29:20:5b:08:b2:a2:e8:2d:7e:88:
         c7:5a:a8:fa:14:60:de:85:74:2e:e0:c1:10:77:7b:52:67:b3:
         41:65:c6:bf:a4:69:09:0f:e1:7c:73:e6:44:e8:06:f8:e1:eb:
         e7:58:7c:9f:1a:77:a6:a1:aa:2d:a2:61:00:90:4d:6f:2b:a4:
         83:75:c4:b9:1f:ea:13:d3:ee:d8:a8:52:bf:b5:62:4e:f2:58:
         2d:c4:e2:00:41:72:4f:fb:ac:9e:f4:0a:c3:18:bd:ca:16:eb:
         7c:e7:13:33:8c:8e:86:1b:97:09:d9:13:0f:16:9d:37:32:a3:
         f5:16:0e:2a:54:bd:83:cb:31:26:6a:66:c9:87:19:27:22:ae:
         41:fd:74:46:38:c1:55:24:9f:86:ed:b6:3c:ff:93:5e:53:0a:
         cf:f0:53:88:46:a8:ef:b8:88:a0:f3:b6:93:c8:2b:44:3c:35:
         7a:03:e4:79:8b:2b:cf:0c:a7:f4:85:96:a0:0b:15:b9:20:27:
         88:13:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:14:58 2025 by rpki-client