Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32332d3233203d3e20323638313236.roa
File:                     34352e3136392e3232382e302f32332d3233203d3e20323638313236.roa (raw, json)
Hash identifier:          3cPnnhIR6BgsCCV1ZUbPlKAnFhF5fpvPLLkOfLob7lY=
Subject key identifier:   42:3D:0A:66:DF:13:38:9D:A3:4F:EF:D3:56:D0:C0:89:EA:5E:D3:EB
Certificate issuer:       /CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
Certificate serial:       01AEC338E27A4AAF0D3B3C3ED4FC526F183E040C
Authority key identifier: 08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32332d3233203d3e20323638313236.roa
Signing time:             Sat 08 Apr 2023 15:11:43 +0000
ROA not before:           Sat 08 Apr 2023 15:06:43 +0000
ROA not after:            Sat 06 Apr 2024 15:11:43 +0000
asID:                     268126
IP address blocks:        45.169.228.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ae:c3:38:e2:7a:4a:af:0d:3b:3c:3e:d4:fc:52:6f:18:3e:04:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
        Validity
            Not Before: Apr  8 15:06:43 2023 GMT
            Not After : Apr  6 15:11:43 2024 GMT
        Subject: CN=423D0A66DF13389DA34FEFD356D0C089EA5ED3EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:f7:02:8b:35:89:f1:f2:e8:e5:2a:47:c2:
                    99:9d:c9:a9:6c:46:6b:a3:f0:a7:77:08:cc:45:de:
                    5a:48:09:15:7b:27:d7:f0:79:7c:39:1c:cb:8a:dc:
                    fc:58:dc:64:26:02:95:8c:d4:ce:e3:8d:b2:0e:ba:
                    3d:ea:7e:d1:09:9d:bb:35:5f:35:02:cf:d1:6c:7f:
                    63:f5:76:c9:1c:4a:7e:06:b1:d6:d2:30:ac:6d:ef:
                    59:20:48:0c:ec:ae:6f:ba:2a:43:3b:c7:e4:cc:29:
                    10:78:f1:6a:cc:e1:11:02:ed:e6:12:b3:51:39:ef:
                    33:ae:37:2c:c4:cf:44:cf:fb:14:de:17:c9:9b:83:
                    2f:96:54:74:95:4a:2e:3c:2b:a7:07:92:b2:73:7c:
                    02:f9:de:c5:14:3e:df:c0:8a:66:33:3a:47:6f:51:
                    fc:c8:10:2c:45:f7:24:d9:6c:09:95:cb:7a:3f:02:
                    b3:d0:6b:7f:ef:c4:d1:ba:36:5d:98:59:3c:34:7d:
                    63:1d:57:cd:b9:ec:53:48:b9:8a:81:95:7f:fc:08:
                    1d:71:dc:0f:df:d0:60:d6:b2:1a:40:5f:dc:b1:28:
                    69:a1:3b:e6:b3:07:7a:f9:30:af:2c:9e:7d:43:a5:
                    0d:a5:67:66:43:a6:0b:3e:dc:8b:1c:94:72:d3:26:
                    04:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3D:0A:66:DF:13:38:9D:A3:4F:EF:D3:56:D0:C0:89:EA:5E:D3:EB
            X509v3 Authority Key Identifier:
                keyid:08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32332d3233203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:b3:75:11:52:1f:0f:c7:69:3a:ae:e4:f3:08:29:50:31:5f:
         a5:3d:6e:07:25:b1:c6:95:f1:f2:e6:dd:a6:2d:8a:85:0a:28:
         35:c2:11:42:a0:83:fd:ad:c8:64:4c:99:5b:8b:d5:f2:59:74:
         e5:91:45:cd:b2:bb:f4:45:6f:d2:c6:15:2c:85:a1:43:98:ee:
         67:62:b8:98:1b:ce:8f:be:63:4c:86:f0:96:b9:08:eb:21:a9:
         e5:e2:5e:42:52:65:e1:9b:0d:5e:a1:ce:ce:92:77:37:0b:44:
         38:8c:88:f1:0e:14:fa:3b:3e:fd:21:e8:6b:3d:23:1f:57:3b:
         b2:40:50:83:40:34:7b:01:95:c8:e9:85:3f:94:a3:49:84:e8:
         67:b5:2c:bd:c3:ba:cf:78:89:a1:cb:e1:7c:63:f4:b3:4c:55:
         f6:88:3f:1d:2c:d6:40:59:c9:b1:5c:34:dd:bf:54:ff:c6:18:
         71:47:c5:59:37:36:32:10:c5:f2:d8:c1:6c:5b:e3:48:8f:45:
         fb:c1:b3:fb:3b:04:39:c2:bc:e8:27:7b:86:f6:61:72:20:e2:
         28:69:2f:6b:f3:20:99:79:9d:2d:66:e5:5b:42:e1:46:63:c9:
         b5:db:6e:5e:94:39:c8:fd:63:ce:69:5b:aa:02:80:e0:c2:ef:
         61:3f:71:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:27:28 2025 by rpki-client