Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39322e302f32332d3233203d3e20323638323637.roa
File:                     34352e3233372e39322e302f32332d3233203d3e20323638323637.roa (raw, json)
Hash identifier:          mc0p4xFbMZZRIWuoJIFh510+Hm1NtEPOAMGgmdA52BM=
Subject key identifier:   53:D2:E7:A7:2B:46:99:CA:F8:01:DB:54:DD:CF:35:CF:57:7D:07:12
Certificate issuer:       /CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
Certificate serial:       6C9849541E22740F1858065552B82A4C28199B11
Authority key identifier: D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39322e302f32332d3233203d3e20323638323637.roa
Signing time:             Fri 16 Dec 2022 15:00:01 +0000
ROA not before:           Fri 16 Dec 2022 14:55:01 +0000
ROA not after:            Fri 15 Dec 2023 15:00:01 +0000
asID:                     268267
IP address blocks:        45.237.92.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:98:49:54:1e:22:74:0f:18:58:06:55:52:b8:2a:4c:28:19:9b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Validity
            Not Before: Dec 16 14:55:01 2022 GMT
            Not After : Dec 15 15:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:3d:d1:ab:24:47:52:f6:7f:f4:b9:de:df:
                    17:7b:65:80:08:70:7e:2c:6d:70:32:0a:cd:f3:19:
                    7f:36:47:24:cf:a7:ab:c5:bc:88:86:92:62:72:51:
                    1b:9d:cf:95:67:55:ee:0b:4c:fa:44:a7:7a:39:05:
                    f3:7b:ef:ee:b7:88:8a:a5:b3:04:4c:1e:8a:31:a5:
                    c8:1c:2d:d7:16:3a:d1:68:d8:33:6f:84:cd:a0:d3:
                    07:c6:11:51:c2:10:2a:79:68:da:e3:03:75:09:1c:
                    6f:3d:eb:10:f2:c1:a2:c0:15:b6:4d:07:04:77:b1:
                    4a:d3:89:bb:6c:60:0c:5f:49:63:30:e6:46:c6:39:
                    e0:2c:cc:bc:07:05:54:2b:b1:02:f3:c9:85:23:79:
                    17:86:d3:d4:3d:81:8c:8c:27:66:bb:83:6b:63:73:
                    0f:45:0d:8d:d3:9d:b3:48:f7:ef:ad:38:fe:48:65:
                    0a:35:aa:a6:61:4f:8b:35:6c:d4:fe:79:cd:00:c3:
                    79:06:b0:50:6d:10:42:13:3a:39:ee:bd:b6:6d:42:
                    8a:38:c4:3e:26:40:91:95:df:52:b1:81:aa:ec:48:
                    94:6a:ed:8d:73:01:7a:d1:f8:5a:65:35:63:d8:86:
                    5c:23:fd:2e:95:cc:03:b6:12:5f:91:5e:2d:09:94:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D2:E7:A7:2B:46:99:CA:F8:01:DB:54:DD:CF:35:CF:57:7D:07:12
            X509v3 Authority Key Identifier:
                keyid:D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39322e302f32332d3233203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:21:f5:44:21:02:4d:e2:19:45:fa:a6:5b:d9:d2:f4:c0:5e:
         25:cd:b9:8a:5e:0e:c7:cb:68:b1:e6:66:90:24:38:66:2a:b8:
         66:a3:90:d6:aa:22:90:06:69:44:b2:5e:5e:f3:5b:70:5d:45:
         77:0f:bd:a4:ff:b2:a7:95:6b:60:11:ff:f0:69:7f:b5:52:04:
         c2:18:ef:d9:f0:fe:30:eb:be:49:f7:c4:eb:7f:f1:ec:1f:9a:
         2f:10:77:85:2f:18:1f:3a:72:9e:90:cb:88:c0:91:26:58:2a:
         f3:2b:2a:58:dd:6d:8b:79:cc:42:42:45:f1:0e:7a:c1:73:55:
         29:80:78:84:ce:fd:e6:54:af:41:df:8d:80:a7:01:7d:9e:0e:
         f3:7d:2a:ac:c6:84:9a:77:9f:99:7d:57:1a:d7:a7:74:e1:5f:
         a0:fb:d2:6c:bb:c4:2e:e4:a4:b1:71:8c:67:be:79:72:7f:94:
         8b:ff:9e:5b:e8:48:a7:02:17:28:dd:e1:10:46:0e:00:8a:9f:
         8d:52:34:00:44:0b:44:ff:02:0d:40:a2:77:ed:ea:75:a4:62:
         4c:97:37:b1:93:ec:75:7b:fa:84:bd:c3:2f:6e:11:be:49:25:
         bb:8e:90:e2:65:f9:d1:63:e1:7c:31:62:b3:58:79:b4:91:d9:
         01:59:b0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:17 2025 by rpki-client