Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3233302e302f32342d3234203d3e20323638313236.roa
File:                     34352e3136392e3233302e302f32342d3234203d3e20323638313236.roa (raw, json)
Hash identifier:          sXtChU8//dyCwvXDspXs2lx8y6czpfxHVsoE/9RFCP4=
Subject key identifier:   1B:E5:87:D2:D2:2E:81:FA:91:33:7D:B4:48:83:BD:FD:DB:1A:0D:33
Certificate issuer:       /CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
Certificate serial:       18E82956B8A02C7E0B75BE8142FC7155BC68DA26
Authority key identifier: 08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3233302e302f32342d3234203d3e20323638313236.roa
Signing time:             Sat 08 Apr 2023 15:14:37 +0000
ROA not before:           Sat 08 Apr 2023 15:09:37 +0000
ROA not after:            Sat 06 Apr 2024 15:14:37 +0000
asID:                     268126
IP address blocks:        45.169.230.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e8:29:56:b8:a0:2c:7e:0b:75:be:81:42:fc:71:55:bc:68:da:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64
        Validity
            Not Before: Apr  8 15:09:37 2023 GMT
            Not After : Apr  6 15:14:37 2024 GMT
        Subject: CN=1BE587D2D22E81FA91337DB44883BDFDDB1A0D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:9b:20:80:c3:3f:ab:71:fd:f9:75:aa:b6:
                    cb:8c:5a:2f:20:02:4a:24:16:a2:e4:3d:10:e1:9f:
                    b7:dd:33:47:f0:ff:73:2c:62:45:84:59:bd:12:bd:
                    40:29:10:af:98:95:59:a2:b3:0e:b1:6d:3d:35:7a:
                    b9:02:3d:43:d2:1f:a5:a8:de:c3:ca:76:e9:60:dc:
                    1e:25:93:d7:fa:b0:38:da:21:e1:63:d5:f7:a3:c7:
                    c3:2c:02:3e:0d:5a:74:36:a0:6e:1d:ee:c6:e8:27:
                    12:34:d1:66:31:24:3e:2d:c8:40:03:b5:f8:9a:b2:
                    75:8e:f0:54:df:f4:2f:ea:12:a8:49:7b:48:b5:52:
                    53:89:80:38:60:7b:62:aa:9c:0e:52:6a:bd:27:94:
                    b0:1d:80:22:f4:5d:9e:27:f6:31:24:c3:ac:05:e0:
                    15:96:d0:30:e7:24:ab:6e:ae:dc:3a:71:a6:6c:29:
                    9a:45:04:3d:b5:2a:2e:2d:f4:d9:1d:27:38:f5:31:
                    85:94:60:27:80:1c:67:f3:a3:5c:6d:0f:4b:f7:ad:
                    30:f4:d4:6c:2d:71:f2:ea:ba:21:bf:45:45:28:6a:
                    b4:ea:66:81:1a:5b:c9:27:42:0c:f5:ff:f4:ff:d3:
                    3a:6f:da:5f:e5:27:71:ff:cf:2a:82:35:51:ef:65:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E5:87:D2:D2:2E:81:FA:91:33:7D:B4:48:83:BD:FD:DB:1A:0D:33
            X509v3 Authority Key Identifier:
                keyid:08:80:19:DA:B1:16:76:C4:E9:5D:B6:D4:5B:7C:4B:1E:6A:A1:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088019DAB11676C4E95DB6D45B7C4B1E6AA1CB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3233302e302f32342d3234203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:46:eb:2e:fe:dd:f7:3e:13:70:9d:c2:57:ee:44:47:11:92:
         08:cf:95:74:fc:26:00:14:5d:ca:13:5a:78:0d:b8:46:91:f8:
         2c:13:72:31:4f:db:3c:f8:a7:c9:38:52:07:76:a2:9b:bc:4f:
         0e:94:b4:15:ba:19:11:47:f2:50:73:48:37:d1:d5:c2:97:e0:
         71:6e:e3:ba:cb:be:54:96:ea:9d:9b:53:8a:71:dc:1e:ba:45:
         8f:32:65:b6:dc:19:37:d4:b0:da:cf:99:04:ed:b9:c8:96:29:
         8a:fc:17:29:a8:00:a9:9b:11:61:fb:5b:1c:ab:d8:b7:dc:e8:
         66:3c:4e:41:4e:06:db:4e:ef:cc:a4:bb:e6:44:ad:02:e3:34:
         5e:a9:df:66:47:6f:5f:dc:70:27:dd:04:87:9d:e1:9a:fa:c1:
         ab:64:a6:73:bd:f5:97:ba:c3:b2:59:e3:b8:95:44:31:21:d9:
         2b:aa:19:77:78:3c:9a:c8:3a:44:e3:88:57:3b:8c:77:d6:6c:
         7a:c2:68:ed:f5:a5:ca:9c:60:41:6d:2d:db:0e:e3:a0:f8:a7:
         e7:c0:11:6e:5c:36:d7:cc:f2:0f:d5:93:ba:6b:f4:2d:a2:82:
         3a:11:c3:59:62:43:1f:07:23:7e:59:f4:e0:8f:58:98:79:b6:
         f3:f6:3a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:15:12 2025 by rpki-client