Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/34352e3137392e3233322e302f32322d3332203d3e20323639313232.roa
File:                     34352e3137392e3233322e302f32322d3332203d3e20323639313232.roa (raw, json)
Hash identifier:          bekxoIgTyoAY8oMae9E21iGoVIuYtKcjlmI1DnoIeWY=
Subject key identifier:   4B:BC:A3:E1:0A:9D:1E:D1:B9:47:5B:23:DD:F0:AC:32:16:66:FD:0D
Certificate issuer:       /CN=555ABC2B8E4076A654330E2F947A4CC326D4A1A6
Certificate serial:       63CA64AEFBB225E852A93A073C67599E7F7BB296
Authority key identifier: 55:5A:BC:2B:8E:40:76:A6:54:33:0E:2F:94:7A:4C:C3:26:D4:A1:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/34352e3137392e3233322e302f32322d3332203d3e20323639313232.roa
Signing time:             Wed 28 Jun 2023 14:38:46 +0000
ROA not before:           Wed 28 Jun 2023 14:33:46 +0000
ROA not after:            Wed 26 Jun 2024 14:38:46 +0000
asID:                     269122
IP address blocks:        45.179.232.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ca:64:ae:fb:b2:25:e8:52:a9:3a:07:3c:67:59:9e:7f:7b:b2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555ABC2B8E4076A654330E2F947A4CC326D4A1A6
        Validity
            Not Before: Jun 28 14:33:46 2023 GMT
            Not After : Jun 26 14:38:46 2024 GMT
        Subject: CN=4BBCA3E10A9D1ED1B9475B23DDF0AC321666FD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:0d:96:8d:51:2b:42:c0:15:c2:5e:69:ba:
                    92:d2:db:a9:9a:d1:df:0b:1b:7f:40:e2:21:9d:bc:
                    e8:d9:2e:64:bb:a2:91:1a:ba:b6:3d:15:e4:3f:6b:
                    29:ba:d2:b9:ac:7e:c3:7a:f4:e5:41:2b:c4:06:83:
                    62:a5:da:15:5b:5f:49:f2:11:99:dd:ea:c9:60:ee:
                    64:de:43:98:b4:6c:bc:46:fc:2d:e3:ce:11:0b:84:
                    b7:55:87:86:f2:71:cc:1c:d6:2d:b7:10:94:c0:7c:
                    86:10:11:b5:9f:85:78:88:9d:a6:90:c9:9b:a6:2b:
                    06:1a:03:11:89:f9:03:db:32:55:5b:31:8a:f2:5c:
                    28:69:ef:a1:2d:ff:cf:51:56:eb:a2:ea:75:db:5e:
                    ab:5a:d3:5f:37:e1:34:73:9e:cf:14:a5:00:a3:6a:
                    d2:1a:3b:19:7a:af:2f:1b:5e:d9:0a:15:78:f7:1e:
                    4e:d1:d5:c6:8f:58:32:e8:88:ec:a7:b8:d8:01:41:
                    38:4a:ca:6c:b8:f3:89:58:25:ab:f2:5d:9f:36:b5:
                    81:c3:0c:e9:3b:3f:dc:e3:46:c5:8e:a6:6d:a4:2c:
                    0c:81:34:aa:83:44:6e:bc:f6:13:30:94:c9:b1:32:
                    62:f9:b2:6d:7e:06:ef:08:d0:23:68:e4:4a:21:a6:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BC:A3:E1:0A:9D:1E:D1:B9:47:5B:23:DD:F0:AC:32:16:66:FD:0D
            X509v3 Authority Key Identifier:
                keyid:55:5A:BC:2B:8E:40:76:A6:54:33:0E:2F:94:7A:4C:C3:26:D4:A1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/34352e3137392e3233322e302f32322d3332203d3e20323639313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:d9:18:45:2b:14:cb:52:ee:ea:a0:a0:7c:1c:53:ff:1a:23:
         30:cc:5f:34:36:ff:e8:b7:6c:cf:dc:67:a2:4a:3b:d9:58:b9:
         f9:16:29:d1:50:41:8c:58:c2:f6:09:94:23:8e:95:27:e9:7f:
         a0:e5:11:aa:1e:98:fe:25:bf:92:29:82:e3:04:36:2c:16:e7:
         60:ba:25:a6:a7:46:eb:3e:bf:51:b3:a9:32:bc:ba:b2:7c:09:
         56:20:a1:3b:f9:f3:bb:f3:cd:f8:ef:16:b7:60:9b:51:3b:74:
         91:68:ab:91:1b:e9:b2:bc:ee:39:4e:14:2a:c0:25:6a:6c:4c:
         e9:a1:9c:2a:7d:fc:7d:39:35:92:51:dd:99:1e:28:b2:df:cd:
         86:66:b7:89:96:23:ef:f1:54:e5:1b:c1:3d:51:e8:60:46:76:
         53:52:85:59:00:4b:d2:eb:27:17:55:4c:3b:ea:e6:96:0b:00:
         ad:3f:64:97:59:9d:fe:5d:b9:7a:a3:76:1d:df:18:ec:f4:73:
         b4:ce:aa:b8:66:ef:d5:cb:b7:c3:e3:7f:93:2b:8e:cf:9a:21:
         cc:01:ac:a8:46:45:ef:e5:d6:e2:7d:9d:7a:51:b4:60:1a:ae:
         fe:f2:68:a6:2c:30:8f:9f:38:00:47:46:99:57:60:f2:49:7d:
         00:9e:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:03:56 2025 by rpki-client