Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/34352e3136332e3131362e302f32332d3233203d3e20323638353737.roa
File:                     34352e3136332e3131362e302f32332d3233203d3e20323638353737.roa (raw, json)
Hash identifier:          eAtt9vdLBgsEmHDoJmt7VTR+tiYkZ/brYfzVFDvU1lU=
Subject key identifier:   39:76:71:8C:C2:2C:A3:AD:D9:A6:39:55:76:E5:97:B3:6D:20:B6:23
Certificate issuer:       /CN=056BDF4B197F346D99BBB8DF6A77D4C286D532F3
Certificate serial:       45409B470AA17515703A9392283EF1A7218047AB
Authority key identifier: 05:6B:DF:4B:19:7F:34:6D:99:BB:B8:DF:6A:77:D4:C2:86:D5:32:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/056BDF4B197F346D99BBB8DF6A77D4C286D532F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/34352e3136332e3131362e302f32332d3233203d3e20323638353737.roa
Signing time:             Thu 07 Jul 2022 13:18:13 +0000
ROA not before:           Thu 07 Jul 2022 13:13:13 +0000
ROA not after:            Thu 06 Jul 2023 13:18:13 +0000
asID:                     268577
IP address blocks:        45.163.116.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:40:9b:47:0a:a1:75:15:70:3a:93:92:28:3e:f1:a7:21:80:47:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056BDF4B197F346D99BBB8DF6A77D4C286D532F3
        Validity
            Not Before: Jul  7 13:13:13 2022 GMT
            Not After : Jul  6 13:18:13 2023 GMT
        Subject: CN=3976718CC22CA3ADD9A6395576E597B36D20B623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:24:dd:de:72:ff:ca:6d:d4:24:49:37:51:71:
                    58:ce:11:2c:e8:87:1c:a3:7d:50:21:a5:c9:7a:63:
                    d0:80:f2:8c:34:63:1f:b6:ea:b1:6d:9a:5b:40:20:
                    b5:32:57:3f:40:40:90:b0:14:46:57:65:bc:42:80:
                    66:e6:97:be:ff:3a:e8:68:d4:f3:cc:63:0d:0c:b5:
                    ce:c1:d3:18:50:99:12:11:28:eb:7c:4c:ef:37:bb:
                    0a:11:56:f1:9c:b0:f2:87:54:d8:cb:89:db:60:c3:
                    7e:c9:76:da:2a:39:14:3c:62:d7:e6:f7:50:3d:90:
                    61:4d:f1:67:65:40:ac:3f:06:7f:da:58:82:74:cb:
                    74:8b:9a:4c:a8:50:8f:b9:65:7e:1e:a5:86:f6:a9:
                    ba:ae:c2:5e:06:69:c9:83:e4:f4:50:e5:dc:b7:90:
                    3a:d8:05:ff:a5:6d:65:3a:61:ca:6d:4a:30:34:4a:
                    a9:61:ee:0b:66:96:65:35:6f:15:50:1c:d8:89:3a:
                    ff:61:96:12:70:16:bb:98:77:44:ff:35:9b:ab:b2:
                    97:b0:8c:1b:72:05:26:5a:d5:4d:da:d4:5c:b8:e7:
                    19:5f:f2:22:38:54:5b:47:4a:4c:15:54:87:0e:c9:
                    c8:de:d0:7c:f7:0f:0a:0f:48:79:3b:e0:1b:af:f4:
                    72:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:76:71:8C:C2:2C:A3:AD:D9:A6:39:55:76:E5:97:B3:6D:20:B6:23
            X509v3 Authority Key Identifier:
                keyid:05:6B:DF:4B:19:7F:34:6D:99:BB:B8:DF:6A:77:D4:C2:86:D5:32:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/056BDF4B197F346D99BBB8DF6A77D4C286D532F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/056BDF4B197F346D99BBB8DF6A77D4C286D532F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/34352e3136332e3131362e302f32332d3233203d3e20323638353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:d3:d2:e8:86:6e:ec:ae:24:c4:d4:d8:78:90:8a:bf:e7:26:
         bd:ac:e6:69:0d:3f:53:d6:a3:09:e5:57:5d:26:f6:ee:63:0f:
         16:a5:b3:ff:2b:23:89:3e:c7:de:2d:bd:32:98:2c:1c:65:40:
         14:10:c0:40:be:90:70:7a:aa:8a:3c:72:9b:8e:ae:96:cd:91:
         38:71:5e:2f:34:e2:a4:d8:29:9c:66:dd:03:93:e9:1a:2f:03:
         e2:ef:e9:54:1a:ce:a4:62:42:f9:ac:14:e0:99:7a:d0:02:75:
         71:d9:77:13:ac:f7:ca:c2:56:2b:29:94:16:42:ea:a1:79:7a:
         b1:ec:4b:8f:45:8b:88:15:f9:b4:80:2b:b9:4c:19:97:9c:bd:
         df:20:5e:16:c9:45:1d:9d:ed:29:d6:0b:3a:60:6f:18:2c:9f:
         1a:ee:50:d5:9c:f1:c8:cf:91:e7:f6:ab:d8:31:dc:d8:01:7d:
         b5:48:32:e5:d6:e9:a5:6d:2c:1e:67:a0:28:50:1e:c3:2a:ec:
         32:51:a0:b5:a3:e2:12:99:c4:3a:af:e7:f9:b1:c9:66:bd:59:
         42:cd:56:fa:fe:43:ff:b4:a3:74:db:c7:58:61:bb:01:17:6a:
         6d:7a:c4:36:86:e4:65:94:f2:ee:c8:b5:63:c2:64:35:70:75:
         51:cf:dd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:22:17 2025 by rpki-client