Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35352e302f32342d3234203d3e20323638333533.roa
File:                     34352e3233392e35352e302f32342d3234203d3e20323638333533.roa (raw, json)
Hash identifier:          EnvKjROW2+hlf7IwvWK3+6u7A5dgR+RphDSAp+i4ijE=
Subject key identifier:   77:4D:AE:B9:DC:32:72:FB:DC:FF:23:94:BE:30:E4:32:04:9C:59:41
Certificate issuer:       /CN=95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D
Certificate serial:       5FC73FE16C9003FD9598C5D31013BB1A65E512F1
Authority key identifier: 95:BD:1D:7A:4D:8F:79:CB:1C:18:D3:50:3C:43:DB:80:0C:85:1B:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35352e302f32342d3234203d3e20323638333533.roa
Signing time:             Tue 21 Nov 2023 21:14:18 +0000
ROA not before:           Tue 21 Nov 2023 21:09:18 +0000
ROA not after:            Tue 19 Nov 2024 21:14:18 +0000
asID:                     268353
IP address blocks:        45.239.55.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c7:3f:e1:6c:90:03:fd:95:98:c5:d3:10:13:bb:1a:65:e5:12:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D
        Validity
            Not Before: Nov 21 21:09:18 2023 GMT
            Not After : Nov 19 21:14:18 2024 GMT
        Subject: CN=774DAEB9DC3272FBDCFF2394BE30E432049C5941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:e6:8a:46:53:d2:78:64:28:4e:91:8d:89:
                    7a:21:dc:9b:03:41:9a:ad:3c:d3:75:5e:c4:5f:8d:
                    42:80:97:0a:ef:43:48:bf:40:ae:bf:92:ca:ca:34:
                    e4:2e:56:40:51:e4:05:71:75:78:6a:24:4d:39:1b:
                    cf:01:24:85:89:0d:30:8a:78:26:b1:a8:fb:77:c1:
                    2b:bf:cb:1e:5f:8b:7c:45:67:d3:35:cb:cb:4d:67:
                    38:21:6f:e4:aa:cc:42:f6:66:4a:df:d6:ac:63:c6:
                    e8:a7:ed:d4:dd:14:69:15:4e:f0:1c:f9:50:a3:89:
                    3b:71:d0:36:80:d1:4c:0d:9f:63:65:a5:11:23:dc:
                    96:e1:23:0b:5e:6f:73:5d:81:49:8b:e2:b7:55:27:
                    90:1d:92:2b:a6:f1:10:dc:0b:c5:97:50:74:9a:94:
                    98:ab:94:0f:88:e1:04:a4:45:2a:a9:da:10:2e:a3:
                    ba:01:5b:f1:6c:bf:8d:26:de:6e:dc:76:6d:95:61:
                    e5:31:d9:b5:ee:23:56:01:30:21:69:23:ac:01:63:
                    7b:e0:40:b0:28:4b:11:53:12:e6:f4:d1:ff:3c:d3:
                    a5:04:8b:bb:a2:52:1e:b8:71:56:cf:2f:46:05:1a:
                    8c:71:bc:1e:a9:d3:ff:d5:87:91:4e:2d:60:d3:16:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4D:AE:B9:DC:32:72:FB:DC:FF:23:94:BE:30:E4:32:04:9C:59:41
            X509v3 Authority Key Identifier:
                keyid:95:BD:1D:7A:4D:8F:79:CB:1C:18:D3:50:3C:43:DB:80:0C:85:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35352e302f32342d3234203d3e20323638333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:95:6b:25:93:a8:1c:0d:17:bb:40:16:ac:fb:1e:f4:49:8d:
         f4:63:be:62:74:5a:e5:e1:23:63:b5:58:cd:4d:85:5f:a6:52:
         47:0c:48:2d:ef:6f:0a:9e:64:53:a3:76:9d:f2:3f:b3:41:91:
         04:fa:c0:40:5c:b4:0c:9d:56:a6:8f:ff:01:f5:f2:d2:7d:44:
         be:2a:7e:f4:82:01:15:08:a0:20:ef:f2:c3:2e:89:f2:aa:ec:
         f9:df:f4:55:a8:5b:e1:74:67:6f:56:be:f7:70:2e:de:96:44:
         3f:e2:91:fc:60:5c:7c:02:1c:e5:f1:85:74:7c:ab:eb:39:99:
         f2:f0:98:66:62:d6:27:85:e0:ae:35:89:2e:27:58:8f:cc:ce:
         25:22:73:76:b0:a2:1b:64:70:56:a2:ad:26:2c:08:67:1c:81:
         84:11:32:9d:0f:4f:8e:d9:19:22:b7:e6:5a:c1:f6:6d:6d:40:
         bf:3c:ac:83:5e:5b:83:de:f8:d6:c9:e7:ac:e0:74:32:59:22:
         00:1c:6b:e7:8b:aa:cb:d4:1c:17:62:a8:77:3c:bc:c7:f9:07:
         6f:58:4e:d7:f2:4e:48:e9:02:c1:da:8d:5d:92:93:62:cf:a9:
         3f:d5:27:e3:51:97:9f:22:2b:03:69:04:5d:a5:8d:8d:9c:97:
         49:89:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:12:27 2025 by rpki-client