Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3133302e302f32332d3233203d3e20323638363136.roa
File:                     34352e3136342e3133302e302f32332d3233203d3e20323638363136.roa (raw, json)
Hash identifier:          mUl1ESNuOdFyERjt+6zijrJEUxR98myvv7A1owrRNaU=
Subject key identifier:   6C:1A:E5:1A:E3:51:9C:0F:76:B7:FB:83:C4:D0:F9:0F:5F:65:51:63
Certificate issuer:       /CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
Certificate serial:       07391566E25C7ADD4AAC9B50B7AA26B05740C1E4
Authority key identifier: 42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3133302e302f32332d3233203d3e20323638363136.roa
Signing time:             Tue 05 Sep 2023 14:04:37 +0000
ROA not before:           Tue 05 Sep 2023 13:59:37 +0000
ROA not after:            Tue 03 Sep 2024 14:04:37 +0000
asID:                     268616
IP address blocks:        45.164.130.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:39:15:66:e2:5c:7a:dd:4a:ac:9b:50:b7:aa:26:b0:57:40:c1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
        Validity
            Not Before: Sep  5 13:59:37 2023 GMT
            Not After : Sep  3 14:04:37 2024 GMT
        Subject: CN=6C1AE51AE3519C0F76B7FB83C4D0F90F5F655163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d2:ac:10:f3:5e:be:8d:42:37:5d:de:09:77:
                    2f:87:9b:40:fb:92:fd:48:68:3d:96:09:4d:c5:b7:
                    ad:43:dc:1e:93:8b:9c:05:09:b9:a7:66:be:5f:e1:
                    58:4d:7b:13:b1:ff:2d:d6:33:73:c4:e0:18:a2:ed:
                    50:32:89:89:ab:2f:03:14:4a:88:81:76:61:58:cd:
                    74:93:d5:58:b9:1f:a6:31:86:e0:9b:b6:31:03:d2:
                    19:3b:4f:4e:4b:2f:7a:87:19:c7:9b:16:87:d4:cd:
                    ea:56:ef:ec:e9:23:e7:51:0d:93:7c:95:8c:fd:bd:
                    fa:98:54:ce:7e:96:b4:44:dc:70:88:6b:90:9f:b2:
                    f5:2c:02:5e:78:0f:16:b3:26:20:17:c5:d0:a1:7a:
                    6b:db:db:33:43:fa:4f:14:84:f5:5f:8f:f7:d9:fd:
                    df:c1:05:bf:c7:0d:89:ad:22:90:0c:96:f8:a9:95:
                    02:0e:7f:14:31:aa:93:3b:9d:9b:05:6c:23:79:99:
                    06:3d:60:1b:91:5b:88:a1:d3:3d:81:7a:70:35:32:
                    dd:cc:a0:c3:e1:de:76:e2:10:0c:3e:40:37:64:5b:
                    d6:9c:bc:ac:96:49:f3:20:a5:61:7d:18:93:fb:cd:
                    0b:22:5e:e5:34:1e:fe:55:6d:44:60:64:28:4b:f7:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1A:E5:1A:E3:51:9C:0F:76:B7:FB:83:C4:D0:F9:0F:5F:65:51:63
            X509v3 Authority Key Identifier:
                keyid:42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3133302e302f32332d3233203d3e20323638363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:d6:1d:a5:ba:99:c4:a1:0a:c4:a1:92:f1:9f:53:73:e8:
         a6:5c:b5:81:5d:49:37:c7:bf:e8:3a:a9:75:ca:b2:d5:e0:05:
         07:60:85:5d:50:b2:6a:50:54:80:33:bd:95:11:aa:75:f2:12:
         5a:9d:d6:04:44:3d:b2:5b:25:79:fe:43:a7:89:0a:51:70:61:
         07:b8:31:cb:22:61:96:7f:f4:35:a7:4a:22:57:c8:35:f6:df:
         a8:e2:b2:18:75:81:f9:1f:4c:63:08:0e:d2:8e:1d:e8:0e:34:
         97:75:75:44:d0:99:7a:d4:42:cf:61:b0:d3:79:4d:c0:59:fd:
         0c:ab:a9:fe:d2:59:e2:47:28:8c:03:70:07:41:80:ce:67:16:
         99:b0:73:63:be:a4:cd:de:d2:7e:dc:e1:96:d0:a3:03:2f:43:
         14:b3:f9:19:0f:3f:b4:cc:72:42:b0:81:52:b9:b3:89:8b:e1:
         a5:45:51:8d:4a:62:5c:71:18:cb:e0:e9:41:df:fe:3c:bb:ee:
         c1:be:2d:8c:86:8f:fe:c4:06:eb:1c:06:80:8f:06:df:4b:f3:
         a7:b4:85:d4:a2:1a:d0:1a:ee:8e:f8:91:aa:42:70:e9:ef:82:
         b5:fc:9f:3c:58:53:4e:eb:f3:92:d4:9a:9a:64:5d:1e:00:b0:
         7e:37:29:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:32 2025 by rpki-client