Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35332e302f32342d3234203d3e20323638303239.roa
File:                     34352e3136382e35332e302f32342d3234203d3e20323638303239.roa (raw, json)
Hash identifier:          +l+EFRmO7CuOtsnTAxK1VG7mO62HsT6y3n35QaBSfVw=
Subject key identifier:   AE:22:9E:E3:70:76:07:DD:7A:79:08:52:E0:C9:AF:D1:D3:F4:75:76
Certificate issuer:       /CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
Certificate serial:       4ECDECFDF7C4A24DE3F5A36EC9EA8371E05179FB
Authority key identifier: 5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35332e302f32342d3234203d3e20323638303239.roa
Signing time:             Thu 02 Feb 2023 14:00:06 +0000
ROA not before:           Thu 02 Feb 2023 13:55:06 +0000
ROA not after:            Thu 01 Feb 2024 14:00:06 +0000
asID:                     268029
IP address blocks:        45.168.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cd:ec:fd:f7:c4:a2:4d:e3:f5:a3:6e:c9:ea:83:71:e0:51:79:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
        Validity
            Not Before: Feb  2 13:55:06 2023 GMT
            Not After : Feb  1 14:00:06 2024 GMT
        Subject: CN=AE229EE3707607DD7A790852E0C9AFD1D3F47576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:c0:e0:14:6b:f5:21:a3:c9:d3:84:8a:61:
                    75:ba:f5:dd:34:f7:b9:54:9b:b2:cd:a0:37:7a:7e:
                    1f:bf:32:80:b0:f2:40:34:66:65:80:09:55:00:15:
                    ad:d7:d0:0d:7f:aa:81:43:ec:2d:2c:20:8e:75:90:
                    3c:0e:97:ea:b0:bb:2d:9b:89:65:fb:0e:c8:4d:69:
                    9a:20:16:d9:cd:ed:a0:e2:e1:d9:c3:2f:de:a5:5f:
                    3c:74:a4:41:28:4c:d9:1a:74:89:a3:9d:ae:fb:ad:
                    14:cc:75:db:c1:dc:78:55:51:6e:e5:c3:bb:a2:4c:
                    de:61:24:5f:7a:55:5f:43:e7:99:68:52:84:fb:62:
                    14:98:d7:71:56:07:83:11:4c:4c:33:1e:f0:20:29:
                    dd:d9:b2:c3:74:64:63:b4:f6:d9:1e:e8:7d:94:60:
                    0a:d2:30:ba:19:46:6d:14:a6:ac:40:8a:95:c1:f9:
                    48:f9:7e:6d:8d:cd:84:7c:e3:c4:4a:a9:24:db:b8:
                    f9:1a:d0:99:c9:c7:49:6f:70:13:bc:98:6f:14:53:
                    a5:26:d5:2f:97:a2:ee:ac:32:e9:36:cb:2a:7e:d4:
                    6d:0b:e3:a8:a0:b0:8c:6f:20:fc:31:c0:8f:90:9d:
                    28:ed:66:0b:65:02:81:c4:11:f6:c0:83:20:88:93:
                    18:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:22:9E:E3:70:76:07:DD:7A:79:08:52:E0:C9:AF:D1:D3:F4:75:76
            X509v3 Authority Key Identifier:
                keyid:5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35332e302f32342d3234203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:61:1a:19:fe:3d:27:74:dd:b2:40:5b:d4:80:56:b4:fe:0e:
         4e:84:db:0a:96:de:a6:46:9b:b7:a0:54:78:ae:6e:69:a1:14:
         d5:20:06:ee:41:2f:61:52:02:be:c9:39:ff:85:dd:84:b4:33:
         b4:a0:3e:62:64:c5:ca:18:e7:18:f7:07:bf:55:83:1f:0f:3a:
         cc:76:61:0f:44:35:90:d0:11:c0:bc:27:ff:cd:d5:c0:66:b3:
         d3:21:97:c1:2c:e3:87:0d:b5:f4:73:38:d5:95:fa:be:d8:4c:
         6f:8b:a8:f8:83:e6:9f:c5:75:98:93:13:56:67:47:e6:be:1a:
         cc:e2:ac:97:94:01:a7:b8:53:12:69:05:fe:ca:67:cf:a1:b0:
         ce:a4:6e:40:44:07:74:a5:a8:94:1e:b4:60:47:0d:ee:40:dd:
         85:89:f9:81:08:5a:32:64:b5:77:3c:d5:22:0f:16:77:33:86:
         a2:fa:e9:55:83:ab:38:04:ae:70:aa:70:72:ba:7a:d1:4a:b3:
         f0:f6:d5:36:87:55:ce:24:12:59:5d:c3:79:3e:94:ff:2d:ef:
         cb:13:3e:62:32:a7:46:1b:4b:8c:94:c5:47:e6:5a:80:c7:5e:
         28:62:06:c4:42:21:6a:13:bc:2f:3a:4c:8d:78:e2:f8:1e:10:
         74:d3:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:17 2025 by rpki-client