Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35342e302f32342d3234203d3e20323638333533.roa
File:                     34352e3233392e35342e302f32342d3234203d3e20323638333533.roa (raw, json)
Hash identifier:          sd4F+IQCFZwCkDm4wU1/ZnIdLfjNciDvctKUiNAnN7k=
Subject key identifier:   1F:1E:14:CB:50:6E:3A:CE:E0:E8:1A:F7:E4:8E:8C:0F:28:09:34:70
Certificate issuer:       /CN=331BD13CFC847545EBF4ABCF9AF10D3C7AA4F0CA
Certificate serial:       234B97838A0F92D252EF14230E6B88DF83DC17A0
Authority key identifier: 33:1B:D1:3C:FC:84:75:45:EB:F4:AB:CF:9A:F1:0D:3C:7A:A4:F0:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331BD13CFC847545EBF4ABCF9AF10D3C7AA4F0CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35342e302f32342d3234203d3e20323638333533.roa
Signing time:             Mon 26 Jun 2023 18:20:53 +0000
ROA not before:           Mon 26 Jun 2023 18:15:53 +0000
ROA not after:            Mon 24 Jun 2024 18:20:53 +0000
asID:                     268353
IP address blocks:        45.239.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4b:97:83:8a:0f:92:d2:52:ef:14:23:0e:6b:88:df:83:dc:17:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331BD13CFC847545EBF4ABCF9AF10D3C7AA4F0CA
        Validity
            Not Before: Jun 26 18:15:53 2023 GMT
            Not After : Jun 24 18:20:53 2024 GMT
        Subject: CN=1F1E14CB506E3ACEE0E81AF7E48E8C0F28093470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:98:fc:d6:b8:90:51:9c:29:9a:e9:52:63:
                    b5:d2:02:88:7c:c4:42:c3:10:d0:6b:08:87:da:69:
                    76:8c:50:79:98:92:de:82:06:2f:21:ac:50:30:17:
                    4c:85:bd:1a:4c:6c:27:2b:66:e8:c6:db:ed:c7:a9:
                    35:ab:56:fc:fd:0c:ea:de:f8:4c:f9:1e:8e:34:00:
                    2f:c8:7c:b7:51:a7:6d:43:14:ac:50:9a:38:52:4a:
                    ee:08:ac:b5:30:9f:b3:59:81:be:47:c7:69:cf:b8:
                    77:94:b1:ba:60:f3:7c:d9:d1:ae:4b:c5:8e:ed:42:
                    ed:12:4a:94:0d:91:01:8f:f1:bb:b2:62:f1:a3:31:
                    82:2a:2a:f5:cd:a9:c1:4f:c5:ff:5e:a2:c3:b2:a3:
                    71:87:e1:0f:dd:ae:3b:72:f9:c3:9f:80:b4:40:75:
                    9d:30:c0:ff:f6:cc:58:cf:69:bb:a2:44:c9:f1:6b:
                    04:6c:96:9f:96:de:7d:0f:25:13:a0:28:aa:0d:09:
                    fe:d4:80:86:1f:70:4d:32:3f:dc:62:8f:39:4c:54:
                    6a:8e:34:80:8d:d7:c4:bf:16:4f:7f:9a:de:95:9a:
                    ed:a7:6e:2b:d9:8b:ce:4f:e4:75:94:84:72:f4:6a:
                    d4:34:af:2c:2f:05:28:ce:90:b5:51:77:db:93:6e:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1E:14:CB:50:6E:3A:CE:E0:E8:1A:F7:E4:8E:8C:0F:28:09:34:70
            X509v3 Authority Key Identifier:
                keyid:33:1B:D1:3C:FC:84:75:45:EB:F4:AB:CF:9A:F1:0D:3C:7A:A4:F0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/331BD13CFC847545EBF4ABCF9AF10D3C7AA4F0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331BD13CFC847545EBF4ABCF9AF10D3C7AA4F0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35342e302f32342d3234203d3e20323638333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:de:57:76:2d:c3:27:85:2b:59:27:57:bf:19:67:78:e7:fd:
         4b:03:9d:f1:24:6e:74:87:06:40:a7:f1:f2:f9:81:75:1f:59:
         12:b1:f7:e2:32:3a:b6:07:50:99:65:1f:2b:a4:f2:9a:08:0d:
         37:d9:26:12:63:65:40:e0:0e:56:7d:9a:b7:ec:4c:52:23:35:
         02:58:1f:b4:7a:9a:f1:e2:89:85:7c:b9:be:24:66:fa:8a:ba:
         62:b0:6c:a4:95:3f:df:f4:6b:40:fd:1d:5f:56:02:63:a0:4d:
         c2:fa:96:8b:28:93:77:05:a1:94:07:ed:c9:0f:19:aa:c6:cc:
         31:9a:e7:07:eb:0e:76:1e:b1:d4:41:9a:c7:1c:78:32:b3:de:
         cb:30:e0:31:78:39:31:04:bd:cf:95:af:e8:1d:8c:75:3f:d8:
         1a:46:92:8d:e0:f0:fa:8d:6e:f7:9b:d9:c0:4d:4a:67:c3:e5:
         c8:6e:b4:94:c4:50:eb:27:28:fd:b5:97:d1:7e:1e:4e:82:ea:
         e0:32:94:7b:4f:44:6f:8c:a5:35:7f:a4:11:9d:9b:c2:ea:db:
         49:14:fa:1a:05:ae:3e:d9:63:7b:e1:13:df:43:e1:30:8b:ba:
         97:1d:44:28:13:a2:99:95:1e:5c:7d:b3:c3:4f:46:23:55:08:
         58:6a:64:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:56 2025 by rpki-client