Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39342e302f32332d3233203d3e20323638323637.roa
File:                     34352e3233372e39342e302f32332d3233203d3e20323638323637.roa (raw, json)
Hash identifier:          6fjXGVLWYpIkz7rZw5Wy5so7L/TvNLBMfgCplI0RXVs=
Subject key identifier:   56:37:9A:9B:CD:A2:0A:18:14:0D:02:21:F9:0E:F5:44:4F:80:DB:13
Certificate issuer:       /CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
Certificate serial:       0E0263A54B927DCFD87965C76F61A6E933F6611F
Authority key identifier: D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39342e302f32332d3233203d3e20323638323637.roa
Signing time:             Fri 16 Dec 2022 15:00:01 +0000
ROA not before:           Fri 16 Dec 2022 14:55:01 +0000
ROA not after:            Fri 15 Dec 2023 15:00:01 +0000
asID:                     268267
IP address blocks:        45.237.94.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:02:63:a5:4b:92:7d:cf:d8:79:65:c7:6f:61:a6:e9:33:f6:61:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Validity
            Not Before: Dec 16 14:55:01 2022 GMT
            Not After : Dec 15 15:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:18:4d:fc:31:7a:f0:5b:30:43:e2:f4:91:
                    ea:bf:93:92:c7:e2:d3:a4:be:0a:60:30:76:5d:2c:
                    01:e6:82:ac:bb:fa:a6:94:35:d2:87:fa:58:9a:70:
                    40:cc:6c:d8:c0:51:58:53:15:1a:c6:47:ad:61:87:
                    66:de:31:bf:25:11:6f:8d:a2:58:0e:f2:21:18:e4:
                    fa:31:4c:ae:c1:3d:bb:70:52:88:71:e4:ff:56:2f:
                    c7:76:98:f7:39:0d:30:ac:f4:db:c3:5d:8e:94:e1:
                    b5:3a:4c:66:f0:00:4f:66:5d:27:eb:9f:62:89:a9:
                    59:0e:1d:15:4a:2c:9f:58:70:fb:68:aa:af:65:8a:
                    18:ae:e0:d4:c4:64:12:e0:e2:d4:4f:74:f9:05:80:
                    d1:82:6b:7c:54:a9:ba:e5:26:bd:26:3c:0c:ba:14:
                    f2:d4:c8:3b:b1:61:16:db:13:e7:4d:9d:53:63:90:
                    91:25:ba:f7:ba:3a:fd:09:9c:f5:2d:b9:b4:32:fd:
                    ac:b3:e0:35:16:e8:47:3f:c9:1b:58:87:a4:65:bd:
                    d2:cd:4b:86:b6:70:d3:9f:37:42:63:fb:5b:ed:cb:
                    82:d8:56:0e:69:90:44:6d:ee:d1:21:28:26:e0:52:
                    81:00:83:cb:a7:a6:27:f3:94:25:32:28:bc:1c:be:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:37:9A:9B:CD:A2:0A:18:14:0D:02:21:F9:0E:F5:44:4F:80:DB:13
            X509v3 Authority Key Identifier:
                keyid:D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39342e302f32332d3233203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:5f:08:f1:7b:0f:a1:e5:3f:70:90:3d:45:6c:97:0b:5b:86:
         72:6b:10:fe:51:be:97:1d:db:05:e4:63:46:13:b4:b7:db:e3:
         29:44:7b:0f:32:3a:f1:33:cc:a4:40:21:ab:d5:68:bf:26:38:
         1f:77:08:53:fc:02:85:ec:4c:60:36:82:13:ca:85:df:cb:f7:
         9f:20:ea:8b:c9:3a:4c:b8:e3:d8:c7:da:18:19:ba:64:09:30:
         7a:95:f0:c5:fc:ed:0c:98:8b:19:31:15:23:c6:01:f5:8f:7f:
         7f:c1:38:35:7e:b3:ec:a9:94:6d:c0:10:8f:f5:ca:68:96:97:
         55:6a:77:7a:76:13:f7:6e:bc:27:64:2e:d7:24:bf:29:8f:e1:
         8c:e7:09:e6:2d:26:13:d4:e5:68:4e:66:c5:ec:f4:38:22:de:
         52:08:d3:ef:f8:ae:8c:29:6d:bb:71:63:2b:b7:f2:c1:da:d2:
         6b:a6:46:4e:10:b3:49:d2:d8:ac:48:ba:d3:46:7e:b2:34:9c:
         55:c3:01:48:82:6c:b2:28:09:25:46:33:be:37:ad:69:c3:13:
         d7:91:c1:e9:a8:ca:b9:2c:e7:07:e1:9b:d1:84:50:45:4c:3d:
         d0:2f:7a:f0:ef:18:30:11:35:6b:b2:2f:ae:80:b9:20:05:2d:
         87:4d:c5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:06 2025 by rpki-client