Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232392e302f32342d3234203d3e20323638313236.roa
File:                     34352e3136392e3232392e302f32342d3234203d3e20323638313236.roa (raw, json)
Hash identifier:          0ygt8tsEsQVv8PcF6N86KApF61VROH8nlsiYbUQuMgk=
Subject key identifier:   BE:0B:E5:2E:DB:B7:55:20:E6:87:8E:71:F0:63:1E:B5:E0:B7:1C:CA
Certificate issuer:       /CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
Certificate serial:       38BEC966395A2566D7561022E86A30DE555CAA2C
Authority key identifier: 08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232392e302f32342d3234203d3e20323638313236.roa
Signing time:             Sat 08 Apr 2023 15:14:25 +0000
ROA not before:           Sat 08 Apr 2023 15:09:25 +0000
ROA not after:            Sat 06 Apr 2024 15:14:25 +0000
asID:                     268126
IP address blocks:        45.169.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:be:c9:66:39:5a:25:66:d7:56:10:22:e8:6a:30:de:55:5c:aa:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
        Validity
            Not Before: Apr  8 15:09:25 2023 GMT
            Not After : Apr  6 15:14:25 2024 GMT
        Subject: CN=BE0BE52EDBB75520E6878E71F0631EB5E0B71CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:18:14:19:4e:eb:f8:07:a2:73:9c:6e:0a:
                    eb:0e:4c:01:1f:48:d8:cb:3a:b1:5b:d7:82:bd:02:
                    6e:30:ad:ae:b0:64:fc:31:82:af:2d:d5:45:d7:70:
                    4c:60:92:ae:be:c3:b8:6d:dc:33:ec:fc:43:9c:d1:
                    9d:3b:23:35:81:52:69:1f:d7:64:56:59:94:b6:d3:
                    eb:62:db:ac:15:89:f3:58:db:5f:d2:e4:49:16:c2:
                    3a:93:13:c3:af:6b:6c:ee:ce:21:ef:92:37:e9:78:
                    e7:63:d9:ee:75:55:cd:88:d6:a3:cb:06:7f:dc:c0:
                    96:1e:47:a1:39:08:b8:ff:4f:dd:1e:e4:65:70:95:
                    33:1c:7b:2c:ab:92:f4:c4:bd:a7:09:86:76:a9:92:
                    bf:a6:bf:a8:7c:44:13:61:42:32:3a:ef:6c:7e:9e:
                    71:ac:2f:d7:85:d2:5e:03:9d:8e:28:bc:36:49:5d:
                    e0:9b:f6:f2:d8:87:09:b2:2e:70:46:23:dc:37:01:
                    d7:40:4e:9d:b6:77:15:43:64:6c:9e:55:ce:a5:34:
                    7b:d9:6b:0e:55:ce:da:b4:cd:23:86:22:f8:ba:9a:
                    5c:d9:ca:6a:a5:81:02:a5:3b:90:95:97:55:e1:da:
                    5c:d4:3c:00:c8:7a:75:af:4b:4d:7b:70:fc:88:c1:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0B:E5:2E:DB:B7:55:20:E6:87:8E:71:F0:63:1E:B5:E0:B7:1C:CA
            X509v3 Authority Key Identifier:
                keyid:08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232392e302f32342d3234203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:b9:5a:24:05:45:12:69:d2:53:be:41:0b:56:8b:9c:5f:f7:
         56:2b:ba:4d:f9:2c:79:cd:79:a7:9d:f7:52:9d:19:88:1c:04:
         df:0e:b5:07:fd:64:ce:2e:54:13:66:35:10:a2:65:2c:31:4e:
         92:df:33:7b:e0:eb:ee:9e:74:0f:ae:53:e9:c3:73:ae:1d:37:
         1f:e2:17:49:19:43:94:02:99:50:16:cd:62:fa:38:2b:42:6e:
         94:87:0b:94:37:0d:34:1a:1d:60:95:cd:72:d7:2a:e6:b5:62:
         97:a7:b9:cf:74:1b:bf:77:3a:35:81:70:08:4b:3e:24:61:50:
         4a:94:ff:ef:4e:60:40:b1:5f:f6:47:2b:2b:9a:76:49:48:8e:
         f7:cc:8b:2b:e8:ad:e0:cf:b8:9f:f9:45:1d:79:1e:c2:66:42:
         f0:97:aa:0a:51:37:0c:a9:14:91:4d:0b:ac:2d:13:66:1b:5a:
         e9:c2:b8:92:14:dc:83:9d:3d:01:25:0a:d8:73:27:2d:16:3d:
         13:ab:80:fd:86:27:77:fc:2a:59:f4:e2:42:a3:52:1b:db:1f:
         05:13:55:32:36:21:03:8b:c7:eb:2e:75:f1:4f:51:4d:53:c2:
         b7:28:4b:16:4f:7d:8c:9b:36:de:69:fe:23:38:8f:8e:90:5d:
         e0:b5:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:14:34 2025 by rpki-client