Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32322d3232203d3e20323638313236.roa
File:                     34352e3136392e3232382e302f32322d3232203d3e20323638313236.roa (raw, json)
Hash identifier:          pScD18zZhgVRsrXGIvZAFW1OcS3UlFuD1GAEX9IqMLg=
Subject key identifier:   75:87:7C:30:CC:88:6C:79:26:39:AB:B1:66:6F:BF:5D:24:0D:2C:C9
Certificate issuer:       /CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
Certificate serial:       7B56F518B7F3374C478239A9F8F800D59394A958
Authority key identifier: 08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32322d3232203d3e20323638313236.roa
Signing time:             Sat 08 Apr 2023 15:11:41 +0000
ROA not before:           Sat 08 Apr 2023 15:06:41 +0000
ROA not after:            Sat 06 Apr 2024 15:11:41 +0000
asID:                     268126
IP address blocks:        45.169.228.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:56:f5:18:b7:f3:37:4c:47:82:39:a9:f8:f8:00:d5:93:94:a9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
        Validity
            Not Before: Apr  8 15:06:41 2023 GMT
            Not After : Apr  6 15:11:41 2024 GMT
        Subject: CN=75877C30CC886C792639ABB1666FBF5D240D2CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:a7:83:02:db:e3:32:5b:b9:54:93:94:d1:
                    b3:b8:6f:ec:41:e1:fe:d7:32:35:70:99:a0:b1:07:
                    d8:b3:e6:74:9d:bf:3a:17:b0:e0:7e:33:34:e6:cf:
                    b2:88:41:cd:c0:3d:da:bd:b1:9f:06:e0:03:18:35:
                    f7:48:c9:d0:af:51:16:fa:25:f9:0b:b3:a1:ce:8c:
                    35:74:c0:25:7c:f2:d9:58:1b:f9:8c:2e:6f:22:2b:
                    49:ef:2f:75:c7:e5:38:45:c5:65:77:98:b7:42:35:
                    d0:45:86:5c:db:4a:59:22:fe:fe:3a:50:ef:83:80:
                    e7:b1:42:49:26:ab:d8:cd:e3:98:a8:19:26:cf:d5:
                    c4:59:14:03:03:5a:a2:a0:74:c3:59:91:3b:a8:56:
                    f8:01:54:b9:4f:53:dd:72:42:4b:4d:38:ab:e4:9b:
                    2d:9d:b9:84:fb:90:b2:80:79:c0:07:4f:ea:af:46:
                    f2:fc:15:90:6b:d0:26:0e:d3:77:e2:37:87:ce:90:
                    bc:da:a5:e3:a3:c8:b9:ef:27:2b:13:42:e9:4b:0a:
                    07:da:05:4b:d3:5e:59:62:85:8d:44:5b:4a:92:b4:
                    39:dc:1e:e8:71:f0:a5:ce:3a:d6:92:e0:0b:a8:a0:
                    2f:5f:50:84:13:d5:53:d4:d8:33:bc:a1:af:18:38:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:87:7C:30:CC:88:6C:79:26:39:AB:B1:66:6F:BF:5D:24:0D:2C:C9
            X509v3 Authority Key Identifier:
                keyid:08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32322d3232203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:3f:0e:e6:fb:2c:5a:fe:6a:f1:08:a1:f6:20:5e:50:8a:08:
         13:68:ec:79:07:ec:e4:9a:61:96:1b:83:ab:96:ec:e4:6a:5b:
         b7:db:c9:94:e7:f9:11:cc:5e:4a:87:f5:b5:9d:1f:59:7f:79:
         19:be:e2:e8:e7:a4:44:52:d0:98:4e:ab:2c:a2:10:d4:67:a5:
         bc:e1:0f:a5:54:9c:e1:c2:1f:cc:18:24:c3:f5:8c:b3:6b:0c:
         da:a0:e9:8d:db:0e:c4:41:2f:ea:0a:ee:30:dd:86:23:fe:c3:
         28:a3:17:cc:88:19:29:cc:40:fd:06:12:9d:7d:61:c4:a6:f0:
         6e:0b:5e:24:09:23:61:3b:ed:02:1c:06:66:c3:7d:31:c5:68:
         61:36:61:0b:2a:7f:34:67:d1:ce:44:a9:76:27:91:cf:88:2d:
         4c:4e:a4:ff:2e:c4:f9:d6:a4:37:5e:18:27:80:e7:a6:ba:38:
         34:77:f1:d2:b0:d7:c3:bb:bf:44:e9:ec:d1:c1:4f:35:cd:99:
         43:2b:28:1b:f2:1d:f5:6b:fc:3a:50:d8:35:6c:e9:2a:9b:c0:
         5e:71:b3:37:de:c8:61:de:f3:4f:c1:52:56:23:00:58:37:df:
         eb:e1:f2:fb:df:0d:c6:9c:08:d9:8c:f5:e1:e3:b4:fd:89:ba:
         80:b7:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:12:13 2025 by rpki-client