Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/34352e362e3138372e302f32342d3234203d3e20323636313634.roa
File:                     34352e362e3138372e302f32342d3234203d3e20323636313634.roa (raw, json)
Hash identifier:          haaTL+S8kXxYv81MkAXnSc3ZvoryrgApGBZV4zxqaIc=
Subject key identifier:   43:26:75:55:79:D6:16:40:B1:91:71:0A:02:F9:CB:74:A3:A7:A2:36
Certificate issuer:       /CN=7AE2322E12E17A40C7D7264510CCB77A080CBFFD
Certificate serial:       593DFE7680B5D70ECCAB1CB31665F1F6D9180878
Authority key identifier: 7A:E2:32:2E:12:E1:7A:40:C7:D7:26:45:10:CC:B7:7A:08:0C:BF:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AE2322E12E17A40C7D7264510CCB77A080CBFFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/34352e362e3138372e302f32342d3234203d3e20323636313634.roa
Signing time:             Tue 25 Apr 2023 05:15:42 +0000
ROA not before:           Tue 25 Apr 2023 05:10:42 +0000
ROA not after:            Tue 23 Apr 2024 05:15:42 +0000
asID:                     266164
IP address blocks:        45.6.187.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3d:fe:76:80:b5:d7:0e:cc:ab:1c:b3:16:65:f1:f6:d9:18:08:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AE2322E12E17A40C7D7264510CCB77A080CBFFD
        Validity
            Not Before: Apr 25 05:10:42 2023 GMT
            Not After : Apr 23 05:15:42 2024 GMT
        Subject: CN=4326755579D61640B191710A02F9CB74A3A7A236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:f0:d0:36:ab:30:ab:a5:eb:81:3c:6e:c0:
                    dd:4a:fb:86:d0:cf:84:ea:8a:44:62:a5:6e:3f:e2:
                    2d:f1:41:1a:c6:64:75:18:f3:23:2d:ca:9d:00:71:
                    96:2f:cb:a5:c7:0c:c5:b6:53:c9:28:6e:79:38:b2:
                    c1:62:1c:70:f4:89:25:2c:3b:0f:14:e8:af:02:80:
                    35:ca:f3:94:df:5f:43:47:c2:61:a7:c6:92:5d:94:
                    0c:a0:7c:46:ba:82:81:5a:f6:3b:e9:1f:7f:b8:db:
                    00:e7:dc:4c:50:93:ac:c8:35:4c:67:b0:ce:01:86:
                    70:65:dd:54:76:56:6e:a7:65:7a:ad:c1:30:ed:97:
                    dd:4e:0f:56:d4:6e:f9:13:a2:69:64:2e:c6:06:6c:
                    b5:a2:c9:a0:b4:0e:14:68:26:0c:0e:e4:3c:a8:21:
                    36:c8:fb:65:29:17:de:76:1b:19:68:7a:5f:15:3d:
                    94:42:6d:de:1f:4e:85:78:db:39:5b:79:e0:53:07:
                    0a:f9:09:ee:fe:ee:fa:b6:ac:a0:8c:3d:d9:06:42:
                    33:a6:21:39:21:bb:4b:79:5f:59:35:3b:66:e8:7c:
                    e8:fc:37:a6:82:b4:c0:88:4f:c4:f0:c5:53:5d:fb:
                    88:18:28:b0:9f:9b:6b:11:aa:f5:46:be:ad:2a:3b:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:26:75:55:79:D6:16:40:B1:91:71:0A:02:F9:CB:74:A3:A7:A2:36
            X509v3 Authority Key Identifier:
                keyid:7A:E2:32:2E:12:E1:7A:40:C7:D7:26:45:10:CC:B7:7A:08:0C:BF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/7AE2322E12E17A40C7D7264510CCB77A080CBFFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AE2322E12E17A40C7D7264510CCB77A080CBFFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/34352e362e3138372e302f32342d3234203d3e20323636313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:0d:36:bd:11:c5:3a:e2:7a:ea:51:33:07:61:86:86:b3:
         6d:21:6d:0c:ea:7d:9f:98:19:fa:6d:93:d5:4b:c6:53:56:b8:
         70:06:cd:e4:f5:94:2c:8b:2a:88:ff:50:a7:15:09:ad:0c:c8:
         b5:f4:fe:b1:62:50:34:49:c8:43:5f:e4:68:07:5c:13:d0:b3:
         30:b0:90:90:0a:a7:7e:68:9f:23:d9:76:97:4b:8f:70:c5:53:
         b2:73:57:6b:87:e0:bf:57:09:7e:ea:85:5e:8c:89:cb:9a:e3:
         fb:b1:27:30:e5:ee:91:56:1d:58:a9:65:c7:b1:eb:a8:fb:55:
         92:aa:dc:ff:89:ba:b3:d8:a3:08:4b:7c:01:96:c3:36:44:fa:
         ef:05:0f:82:cb:7b:8e:b8:3c:1b:e1:38:1b:b2:f9:b2:13:7a:
         ac:3f:78:57:2b:b0:4d:75:25:af:94:25:97:b7:e8:15:d4:1f:
         8e:32:d6:b9:50:5c:e7:a4:82:da:de:b1:e5:cf:0b:34:f3:a0:
         1e:3b:9b:3f:f5:bd:f5:2d:5d:3f:e2:f0:1f:49:ae:c9:be:02:
         f9:8c:77:b8:e1:92:fc:dd:8e:9f:60:36:4b:f7:af:b5:05:f4:
         3f:d8:8f:bc:12:54:c2:b5:2e:a7:d3:d6:3c:53:07:33:bc:ca:
         76:ea:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:42 2025 by rpki-client