Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230362e302f32332d3233203d3e20323630393536.roa
File:                     34352e3137382e3230362e302f32332d3233203d3e20323630393536.roa (raw, json)
Hash identifier:          Ccp7kM2w4QIgCI/W7kgP2u/FdRNRuibhfUKj3+C2RzA=
Subject key identifier:   24:64:07:13:52:44:7F:C7:81:D7:EE:C4:7A:CB:D8:A1:11:2E:C6:0B
Certificate issuer:       /CN=3295E3B481EE9D21F4414766870EF17DEDACBAAB
Certificate serial:       2EEE9AE8FA5730FEF095D40AC53A32A7AAE7149C
Authority key identifier: 32:95:E3:B4:81:EE:9D:21:F4:41:47:66:87:0E:F1:7D:ED:AC:BA:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230362e302f32332d3233203d3e20323630393536.roa
Signing time:             Fri 04 Aug 2023 11:35:50 +0000
ROA not before:           Fri 04 Aug 2023 11:30:50 +0000
ROA not after:            Fri 02 Aug 2024 11:35:50 +0000
asID:                     260956
IP address blocks:        45.178.206.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ee:9a:e8:fa:57:30:fe:f0:95:d4:0a:c5:3a:32:a7:aa:e7:14:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3295E3B481EE9D21F4414766870EF17DEDACBAAB
        Validity
            Not Before: Aug  4 11:30:50 2023 GMT
            Not After : Aug  2 11:35:50 2024 GMT
        Subject: CN=2464071352447FC781D7EEC47ACBD8A1112EC60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:93:ea:f1:60:7b:fd:5a:a6:1e:35:79:f6:
                    94:56:38:2d:ac:73:ed:f5:80:26:77:ad:75:6c:df:
                    80:e8:29:fc:bd:e3:28:cc:aa:f0:b7:bf:d0:d1:c3:
                    1a:3d:a4:e7:6c:50:fd:82:58:44:9a:b3:0a:7c:17:
                    94:2e:7c:38:5f:d5:bf:24:59:b0:2d:3b:63:11:ed:
                    ef:8d:4e:79:da:e9:7f:35:e6:29:25:ba:1b:50:d0:
                    e6:70:a4:37:f9:f4:a7:e0:67:dc:83:2d:8e:b7:f7:
                    7e:ea:54:f9:38:db:ef:3b:01:fe:2a:92:a1:d7:b7:
                    34:d7:76:f0:a5:e7:f8:d5:82:1e:ee:67:1b:2d:22:
                    af:e7:d6:f2:30:7d:29:31:00:14:bc:1c:70:b2:84:
                    10:0f:04:8f:f1:f8:5d:4f:e8:54:57:30:e7:1c:4d:
                    b6:bd:8f:0d:ce:81:ee:c8:f0:5e:d5:85:38:b3:6d:
                    40:31:8f:71:ec:38:5e:68:ed:07:e8:02:6e:26:cd:
                    02:c8:3e:f1:7b:ad:0b:0c:26:7a:c2:46:43:22:c0:
                    6d:c7:d5:da:5b:8c:1d:c0:94:e3:c7:41:d8:fd:be:
                    78:32:6a:32:c3:b0:8e:dd:5a:a4:07:8d:0b:13:74:
                    b5:c1:9f:84:10:7d:b1:57:76:aa:11:fc:c3:f9:57:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:64:07:13:52:44:7F:C7:81:D7:EE:C4:7A:CB:D8:A1:11:2E:C6:0B
            X509v3 Authority Key Identifier:
                keyid:32:95:E3:B4:81:EE:9D:21:F4:41:47:66:87:0E:F1:7D:ED:AC:BA:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230362e302f32332d3233203d3e20323630393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:1b:01:92:57:d5:55:b9:94:ff:6b:9e:74:40:e1:49:54:c5:
         58:1b:51:d7:06:86:c0:31:0d:f0:63:3e:5b:5c:c8:f7:84:a1:
         33:73:46:5f:cc:7b:87:ab:20:c4:05:13:67:53:29:04:b8:18:
         86:a1:9e:ca:49:96:6b:cf:de:9c:c6:5e:30:aa:9c:e9:cd:41:
         1c:67:67:7d:3e:17:f8:db:77:64:97:ad:6b:fa:17:ad:c0:6e:
         af:2c:3c:26:3b:d0:db:e3:d5:51:61:13:f6:21:7a:ba:80:8a:
         bd:cb:5d:37:1f:f6:51:8b:5b:2b:b9:bb:a2:e3:c6:7c:f4:f3:
         9b:4a:77:54:a1:39:b1:fc:19:ca:c6:e6:b7:c8:1f:11:78:d3:
         f6:0b:90:7a:52:b1:8b:87:39:59:18:e3:ad:f3:35:97:a2:d3:
         72:db:4a:1a:eb:07:15:7c:7f:c0:73:6f:fc:47:c2:7c:e3:c9:
         2e:2d:a7:68:50:33:4e:86:c1:56:7e:e4:4d:36:2c:e8:4a:21:
         0f:8d:bd:e9:ad:63:16:8b:76:60:e9:09:48:a6:3b:7e:b5:e7:
         3f:10:37:eb:83:06:3f:ce:0b:06:76:bc:79:20:e5:b5:db:0b:
         44:78:d1:86:3b:32:a8:40:98:75:35:3b:52:f3:42:10:09:02:
         b7:03:6f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:02 2025 by rpki-client