Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/34352e3137392e3134362e302f32332d3233203d3e20323639303839.roa
File:                     34352e3137392e3134362e302f32332d3233203d3e20323639303839.roa (raw, json)
Hash identifier:          XnVop2nTuR1VHJCzlfDE9wAw8YmkyvAZ/sZjkc69M9w=
Subject key identifier:   F1:F6:99:F0:43:6F:DB:18:CA:69:19:66:A4:86:2A:38:CB:31:DD:76
Certificate issuer:       /CN=D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC
Certificate serial:       4EBAEABC196AE3419D2C26840A23577A6D271ACD
Authority key identifier: D0:EA:EE:9D:24:13:7D:1A:D1:B1:1F:FC:B4:3D:72:B6:A8:03:71:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/34352e3137392e3134362e302f32332d3233203d3e20323639303839.roa
Signing time:             Fri 22 Jul 2022 16:46:47 +0000
ROA not before:           Fri 22 Jul 2022 16:41:47 +0000
ROA not after:            Fri 21 Jul 2023 16:46:47 +0000
asID:                     269089
IP address blocks:        45.179.146.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ba:ea:bc:19:6a:e3:41:9d:2c:26:84:0a:23:57:7a:6d:27:1a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC
        Validity
            Not Before: Jul 22 16:41:47 2022 GMT
            Not After : Jul 21 16:46:47 2023 GMT
        Subject: CN=F1F699F0436FDB18CA691966A4862A38CB31DD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:7f:ef:77:88:35:5b:95:30:6d:59:2a:23:
                    c5:83:b0:e9:f0:86:e1:97:58:44:8e:26:7e:98:93:
                    e2:6e:61:62:71:4b:58:ef:67:75:85:97:73:e1:e7:
                    c7:16:27:dd:56:03:10:f1:f9:2c:f9:64:a0:ce:5e:
                    64:fb:a1:1e:98:b6:85:3f:24:dd:80:af:33:45:e5:
                    8b:b7:40:fa:27:6d:a8:fb:1f:4f:c7:b7:c9:4f:48:
                    ba:a8:30:bd:54:4c:d8:a1:2e:cd:5a:3e:e9:28:fa:
                    c9:70:5c:89:13:bc:7e:86:e5:f6:7c:22:a3:06:84:
                    2b:67:0b:f0:45:1e:73:42:63:3b:a4:35:d5:dc:2d:
                    82:a0:24:f6:fe:8c:28:2e:ca:ad:a6:77:48:f8:52:
                    6f:fa:2c:ea:9a:43:44:bf:32:d4:72:1e:24:22:f9:
                    70:8e:b0:bf:01:1f:3c:09:93:65:43:cc:49:22:3e:
                    3c:68:78:cc:c0:b0:cc:c5:2a:e1:93:8c:c3:46:9e:
                    18:6e:bc:1b:75:9e:a6:88:cc:d3:39:a1:f6:67:7f:
                    d9:e1:e1:c4:62:62:b4:5d:6b:01:e5:58:23:5d:48:
                    5a:3f:df:57:15:f6:97:1f:47:27:c6:80:c5:48:71:
                    c8:59:40:76:d3:d2:ae:cd:7d:fe:bc:74:a9:75:38:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F6:99:F0:43:6F:DB:18:CA:69:19:66:A4:86:2A:38:CB:31:DD:76
            X509v3 Authority Key Identifier:
                keyid:D0:EA:EE:9D:24:13:7D:1A:D1:B1:1F:FC:B4:3D:72:B6:A8:03:71:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/34352e3137392e3134362e302f32332d3233203d3e20323639303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:74:b6:e1:45:44:b2:b6:ea:56:2c:0d:eb:01:57:63:49:fd:
         9c:3b:5c:c1:d8:2c:5a:ef:28:b2:e3:9e:28:d0:76:41:54:28:
         80:dc:11:fb:63:9f:39:ac:44:a3:27:dd:05:07:84:0b:4e:fb:
         91:7a:34:e5:fd:47:19:3a:4a:b8:24:d7:b8:71:59:e3:3b:35:
         3b:4b:97:2e:90:f2:b1:0a:02:d0:96:5c:93:3c:5c:56:d6:74:
         8f:b3:40:63:0c:d1:d4:ae:4f:e7:de:97:58:fe:91:c4:35:b1:
         32:75:fc:56:d2:70:f7:14:e2:20:f3:e0:96:09:09:70:d1:3d:
         2c:0b:17:e2:81:c9:11:9d:35:44:27:8a:f6:d3:64:44:0c:d2:
         bb:d7:3b:5c:9a:91:ee:0b:2c:99:2c:89:16:cc:1a:ab:11:97:
         1e:63:11:e4:a2:41:3e:4d:78:8a:d1:6f:7e:15:c6:b5:eb:f9:
         e3:94:25:6b:17:9a:a9:c8:a6:27:a8:6c:18:04:6f:21:c6:32:
         8f:1d:68:c7:13:7e:ab:fe:4d:53:4e:21:b3:73:4e:e4:72:9c:
         fd:a1:20:51:86:cb:7e:f7:2f:a3:38:02:aa:14:18:7a:91:09:
         27:f2:94:62:25:ce:b1:db:fc:d0:b1:4e:d5:ab:44:a1:df:cd:
         5c:63:b8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:22:08 2025 by rpki-client