Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35342e302f32332d3233203d3e20323638333533.roa
File:                     34352e3233392e35342e302f32332d3233203d3e20323638333533.roa (raw, json)
Hash identifier:          cCi08pIMF4Ea/egsJEp/4z+bJuWskw2piCDnBOouSD4=
Subject key identifier:   83:85:6F:E8:64:CC:A3:89:08:08:96:9F:D1:D3:A1:20:48:7E:C7:85
Certificate issuer:       /CN=95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D
Certificate serial:       75C88F944618FA70600B3B1FE0278B579D2C7C4C
Authority key identifier: 95:BD:1D:7A:4D:8F:79:CB:1C:18:D3:50:3C:43:DB:80:0C:85:1B:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35342e302f32332d3233203d3e20323638333533.roa
Signing time:             Tue 21 Nov 2023 21:14:18 +0000
ROA not before:           Tue 21 Nov 2023 21:09:18 +0000
ROA not after:            Tue 19 Nov 2024 21:14:18 +0000
asID:                     268353
IP address blocks:        45.239.54.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c8:8f:94:46:18:fa:70:60:0b:3b:1f:e0:27:8b:57:9d:2c:7c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D
        Validity
            Not Before: Nov 21 21:09:18 2023 GMT
            Not After : Nov 19 21:14:18 2024 GMT
        Subject: CN=83856FE864CCA3890808969FD1D3A120487EC785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:2c:6c:ec:a3:b4:86:40:a3:35:99:87:d3:
                    88:d5:8b:41:fc:6e:42:fc:51:b3:b3:8e:6b:f4:6d:
                    ee:5c:57:20:aa:17:3c:b5:17:d3:af:94:5a:e8:17:
                    11:ed:f2:d0:c2:6d:4f:c0:5f:59:e0:ea:fe:a6:06:
                    86:9b:b0:c2:78:fd:5c:3d:69:8e:ab:63:f4:f3:c0:
                    6e:9b:15:2d:30:96:72:67:2b:26:11:33:53:46:ec:
                    23:19:4d:bb:60:92:47:50:3d:3f:6b:52:ce:e5:f7:
                    ea:cc:2e:fb:d4:b8:dc:b6:72:8a:e5:96:fc:f9:fd:
                    3f:88:49:91:30:6c:9e:30:b1:53:b0:9b:49:9d:71:
                    ae:ce:81:96:3d:99:f0:da:7c:06:61:0c:28:ff:84:
                    89:a7:34:52:2c:0f:82:cc:2f:a9:fd:64:89:4d:bd:
                    9f:79:9f:33:c4:ac:fe:65:cd:66:9e:cb:e3:fb:95:
                    cb:2d:b0:3a:31:d5:a1:ec:69:ae:4b:df:28:d6:7e:
                    50:c9:1c:d9:8a:2f:27:d8:50:71:74:c1:62:07:6e:
                    09:5d:a5:c7:8a:a5:ed:dd:f8:b6:98:0b:59:b6:f7:
                    b9:e5:bf:48:40:dc:80:af:72:50:24:12:45:c1:b8:
                    59:b5:7e:63:e1:9e:f6:33:b8:8a:51:88:6a:c5:ca:
                    fc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:85:6F:E8:64:CC:A3:89:08:08:96:9F:D1:D3:A1:20:48:7E:C7:85
            X509v3 Authority Key Identifier:
                keyid:95:BD:1D:7A:4D:8F:79:CB:1C:18:D3:50:3C:43:DB:80:0C:85:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35342e302f32332d3233203d3e20323638333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:4a:2d:22:52:9b:88:2c:16:65:dd:5f:03:68:3f:0e:8d:c6:
         76:cc:0f:f7:01:ab:56:b9:c1:17:3b:a2:45:ef:a3:ea:45:dc:
         17:8f:4d:8f:b4:1f:41:0a:0b:0d:a2:c4:8b:e9:58:77:52:a2:
         b9:fa:1e:e2:a6:aa:0d:06:8f:04:9d:87:1f:c2:da:99:1b:5c:
         d8:5f:41:3b:e4:4f:42:0b:61:bb:b9:07:34:c6:05:68:41:85:
         ff:f6:77:23:24:a5:9d:62:48:c8:f6:8f:4d:2f:8e:6b:ac:62:
         ec:70:85:03:ee:6b:b0:e0:f4:2c:c7:81:4e:78:cf:8c:88:0b:
         ab:69:0a:03:f9:ae:22:b2:0f:94:18:6e:6c:b1:9a:6d:5b:53:
         fd:27:7a:4f:99:83:92:f3:a9:8f:6d:cc:7e:54:45:07:99:5e:
         d7:01:a8:72:70:02:d5:66:30:89:5f:bf:32:85:b9:d8:f9:31:
         d3:7b:cc:50:af:19:bd:0c:f4:51:f1:5e:65:90:63:15:a6:a6:
         88:26:a0:aa:72:f3:c8:41:02:8d:85:57:5e:b5:12:68:8b:7d:
         7d:c8:d6:48:75:eb:f8:1f:4a:8e:06:05:94:a9:a0:ec:bb:fd:
         51:14:01:d0:af:c4:3e:14:94:5f:5c:fe:f5:be:bc:e2:c3:2a:
         e6:cc:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:12 2025 by rpki-client