Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3232203d3e20323638333533.roa
File:                     34352e3233392e35322e302f32322d3232203d3e20323638333533.roa (raw, json)
Hash identifier:          +ax1J0XhHIXzxSFeN2t/QqZgFPX2Apr+AZhlWNvbP60=
Subject key identifier:   7C:E5:6F:3D:96:9C:A8:FD:3A:AC:23:FA:38:74:DC:B9:D8:98:0A:5D
Certificate issuer:       /CN=95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D
Certificate serial:       02106F46DAAC5F5EA62CADB24F15F55A2AC4177B
Authority key identifier: 95:BD:1D:7A:4D:8F:79:CB:1C:18:D3:50:3C:43:DB:80:0C:85:1B:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3232203d3e20323638333533.roa
Signing time:             Tue 21 Nov 2023 21:14:18 +0000
ROA not before:           Tue 21 Nov 2023 21:09:18 +0000
ROA not after:            Tue 19 Nov 2024 21:14:18 +0000
asID:                     268353
IP address blocks:        45.239.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:10:6f:46:da:ac:5f:5e:a6:2c:ad:b2:4f:15:f5:5a:2a:c4:17:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D
        Validity
            Not Before: Nov 21 21:09:18 2023 GMT
            Not After : Nov 19 21:14:18 2024 GMT
        Subject: CN=7CE56F3D969CA8FD3AAC23FA3874DCB9D8980A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:7e:6c:17:07:ba:44:ba:da:ab:58:71:99:
                    67:57:1d:94:b2:e3:42:d6:ab:7c:8f:6b:39:80:ea:
                    1a:23:03:27:bb:4f:20:32:f2:22:d8:c1:7a:37:fb:
                    f0:75:51:0f:99:a9:4f:83:80:6b:9d:0f:4a:de:82:
                    a7:73:85:db:3b:93:fd:f8:52:06:9b:16:11:e1:bf:
                    63:7a:a9:b9:ac:e9:3f:61:6e:dc:cd:31:c0:b8:c6:
                    77:02:39:07:a4:e2:d3:47:39:cd:35:e2:cb:f6:d4:
                    39:f9:0e:41:3d:3d:0e:6a:8d:9a:93:01:7a:81:9f:
                    62:bc:66:44:39:cc:6b:d1:78:2e:39:de:87:cd:96:
                    41:35:a3:fc:b6:f4:a9:26:54:26:1c:79:ac:14:2c:
                    ce:c4:33:47:bb:91:80:e6:4c:59:c1:a3:ea:46:88:
                    32:2e:e2:34:7d:8b:3d:b0:5b:8a:27:bd:ca:79:3e:
                    04:c3:3c:3d:bf:e0:f2:d7:e1:09:f5:b6:e9:e4:70:
                    35:eb:25:eb:b0:73:30:1c:4f:c3:ac:96:7b:4d:7f:
                    9e:4e:24:c8:5e:f8:31:2e:77:9d:e3:fd:2b:ef:12:
                    24:38:8d:1a:9f:a4:d7:87:f8:a7:5a:e9:5e:00:6b:
                    9e:88:17:0c:81:c1:eb:bc:7c:0e:35:57:0a:af:86:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:6F:3D:96:9C:A8:FD:3A:AC:23:FA:38:74:DC:B9:D8:98:0A:5D
            X509v3 Authority Key Identifier:
                keyid:95:BD:1D:7A:4D:8F:79:CB:1C:18:D3:50:3C:43:DB:80:0C:85:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3232203d3e20323638333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:0e:7d:dd:00:a0:2d:18:1f:9c:16:8b:2e:df:86:02:d1:1c:
         ef:ef:6a:c2:93:ba:54:3a:37:bf:e5:30:1f:b7:dc:a1:ce:96:
         08:cb:9d:61:3f:8c:a7:95:e1:51:3e:a4:81:23:a4:5e:55:ac:
         fd:17:ec:54:4c:55:c3:ff:36:ac:8c:56:0d:a3:8e:33:59:c4:
         8a:32:02:fc:55:3b:20:93:6e:d3:a3:c8:a0:c9:80:a4:ff:7f:
         61:d2:45:71:53:1e:d6:01:79:01:47:0f:14:04:a0:e1:ba:6e:
         37:98:3a:8b:7b:83:53:34:c1:3c:a6:c9:cd:b3:c5:8b:57:59:
         a1:d6:50:f2:1a:f3:a3:80:c9:46:64:c1:7a:2f:f8:8d:37:ea:
         11:ae:7d:b4:d6:94:5a:c2:a8:c6:ad:8e:4b:a1:13:49:97:d4:
         c3:af:39:86:44:bc:d3:a5:d5:76:f5:fd:9f:cb:07:00:35:53:
         15:74:14:72:54:6d:f6:1b:13:12:6d:c5:d3:28:3c:c4:4c:78:
         61:6e:90:49:40:eb:de:49:c9:9e:e8:a8:8b:83:ea:32:4c:ed:
         8b:28:26:16:59:9b:05:90:d3:b3:43:31:79:c7:42:5a:5c:2b:
         26:63:91:8e:4b:fb:28:03:d6:6f:68:41:f9:66:14:74:1e:80:
         81:d1:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:58:44 2025 by rpki-client