Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139342e302f32332d3233203d3e20323637393337.roa
File:                     34352e3136352e3139342e302f32332d3233203d3e20323637393337.roa (raw, json)
Hash identifier:          BbUk/juz7Xo7PVj0fwWrctTfTx1zrZsN3siMFXcFri8=
Subject key identifier:   37:55:B7:62:6D:0A:6A:65:D7:B3:3C:2E:9E:05:A5:13:8E:E3:8D:8B
Certificate issuer:       /CN=BB2CE81BD94CBC4475D2009984709FB0A6702A8E
Certificate serial:       4C15DAF8EB88E83C80CD7CE7FF88957026083C0D
Authority key identifier: BB:2C:E8:1B:D9:4C:BC:44:75:D2:00:99:84:70:9F:B0:A6:70:2A:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB2CE81BD94CBC4475D2009984709FB0A6702A8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139342e302f32332d3233203d3e20323637393337.roa
Signing time:             Sun 25 Jun 2023 12:22:28 +0000
ROA not before:           Sun 25 Jun 2023 12:17:28 +0000
ROA not after:            Sun 23 Jun 2024 12:22:28 +0000
asID:                     267937
IP address blocks:        45.165.194.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:15:da:f8:eb:88:e8:3c:80:cd:7c:e7:ff:88:95:70:26:08:3c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB2CE81BD94CBC4475D2009984709FB0A6702A8E
        Validity
            Not Before: Jun 25 12:17:28 2023 GMT
            Not After : Jun 23 12:22:28 2024 GMT
        Subject: CN=3755B7626D0A6A65D7B33C2E9E05A5138EE38D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:16:1d:87:07:41:be:18:22:f6:91:50:80:cc:
                    aa:13:fb:08:21:44:54:95:91:5c:8c:fb:72:6e:27:
                    a1:e1:04:76:81:34:9a:af:1c:d3:30:3d:d0:b3:7c:
                    02:16:2f:db:6f:0a:76:ad:ef:55:55:c5:6a:bf:2c:
                    c3:da:8a:e7:df:70:1c:49:d1:f9:06:f9:20:29:87:
                    af:67:fb:d7:9d:40:2b:0c:67:b4:a5:ea:29:80:d6:
                    91:58:e9:8e:c0:a5:56:4e:59:a4:e1:62:e5:50:ed:
                    59:4a:35:25:2f:74:60:27:6b:ea:23:50:0a:99:1d:
                    7c:fa:11:3a:dd:fa:af:5e:82:8a:13:2e:7b:bd:7a:
                    66:4b:0f:c5:1e:e5:0f:29:0b:28:2a:a1:cc:41:2e:
                    93:05:bd:1e:1f:41:11:df:b3:32:77:95:bf:03:3e:
                    b8:39:df:c4:26:a4:62:7f:a9:68:7e:9a:25:11:17:
                    19:9e:d3:9e:99:e9:e4:c7:fa:0d:29:2d:44:ef:cc:
                    c4:3d:37:51:5f:2b:0e:de:a3:35:e6:62:5e:2e:1a:
                    28:fe:7c:2d:8c:48:93:fa:4c:6b:87:00:3e:89:b4:
                    98:58:9b:ca:b0:83:d4:d1:70:ef:1a:97:e1:51:af:
                    3d:63:32:1e:37:67:71:76:64:c8:f2:7b:6c:15:45:
                    d1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:55:B7:62:6D:0A:6A:65:D7:B3:3C:2E:9E:05:A5:13:8E:E3:8D:8B
            X509v3 Authority Key Identifier:
                keyid:BB:2C:E8:1B:D9:4C:BC:44:75:D2:00:99:84:70:9F:B0:A6:70:2A:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/BB2CE81BD94CBC4475D2009984709FB0A6702A8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB2CE81BD94CBC4475D2009984709FB0A6702A8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E9EddmdqcWcGuEiL7vwDQBmZDDe32MvD9d1Pe9NoeTC/0/34352e3136352e3139342e302f32332d3233203d3e20323637393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:01:15:64:3d:f8:e3:2d:5f:28:23:aa:3f:43:e4:26:cc:c3:
         10:ec:d2:a2:95:51:72:80:e4:54:32:a0:34:30:c5:39:9a:53:
         8e:bc:f0:48:eb:1a:0b:69:1e:7d:81:c2:72:b1:4a:09:a8:dc:
         fb:60:58:0d:51:94:f5:e0:77:b1:07:5b:4d:e0:95:8b:ae:36:
         a4:d3:52:56:eb:7c:de:8c:fb:c2:87:b5:3f:22:55:88:b4:4d:
         30:25:f0:9e:18:18:03:9e:a8:4d:03:b2:63:58:37:7b:5d:6c:
         c1:46:69:34:e9:e2:ac:7b:1f:3e:6b:bc:fd:13:73:71:2c:2d:
         bf:02:31:03:25:c0:90:92:89:91:63:de:de:2c:cf:c4:00:bd:
         25:71:c9:1d:7b:0a:e1:8f:7e:7f:7f:e3:91:da:16:1a:83:04:
         14:df:7a:13:24:03:f6:69:60:ae:e9:3a:47:4a:49:06:35:c1:
         3c:0c:6f:1c:fc:c8:40:63:c0:8d:3f:d4:33:26:fc:21:9c:83:
         d5:35:e2:25:0e:90:07:d4:3e:35:60:57:18:cf:3b:5f:18:7b:
         cd:5b:a5:00:0f:00:0c:d6:e1:cc:c6:88:18:50:62:d9:eb:ed:
         20:36:56:a6:ab:da:20:1f:5a:82:7a:b4:46:df:da:46:62:dd:
         f2:28:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:28 2025 by rpki-client