Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3232203d3e20323637363336.roa
File:                     34352e3232342e32342e302f32322d3232203d3e20323637363336.roa (raw, json)
Hash identifier:          5kqAhSPU4YBzgWA325IHrI57KNNbUism/EhtNeR7obs=
Subject key identifier:   CA:95:48:47:EA:53:6C:BC:E4:B7:D9:83:47:D1:25:F1:65:C9:32:DA
Certificate issuer:       /CN=CD23D971274B713E206B34F0B4A67B75AAF920F1
Certificate serial:       749DB6380C289F9710893A13FA1568362674D554
Authority key identifier: CD:23:D9:71:27:4B:71:3E:20:6B:34:F0:B4:A6:7B:75:AA:F9:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD23D971274B713E206B34F0B4A67B75AAF920F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3232203d3e20323637363336.roa
Signing time:             Mon 23 Jan 2023 03:08:48 +0000
ROA not before:           Mon 23 Jan 2023 03:03:48 +0000
ROA not after:            Mon 22 Jan 2024 03:08:48 +0000
asID:                     267636
IP address blocks:        45.224.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9d:b6:38:0c:28:9f:97:10:89:3a:13:fa:15:68:36:26:74:d5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD23D971274B713E206B34F0B4A67B75AAF920F1
        Validity
            Not Before: Jan 23 03:03:48 2023 GMT
            Not After : Jan 22 03:08:48 2024 GMT
        Subject: CN=CA954847EA536CBCE4B7D98347D125F165C932DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:d8:cc:18:64:1b:f2:1b:55:0a:1a:84:db:
                    bd:0b:f1:92:ca:3b:f0:1c:b4:57:f7:6a:91:e7:57:
                    d8:d2:54:24:00:8d:9c:ae:13:87:63:6a:8b:0e:12:
                    f2:6a:39:5b:e7:5b:25:85:b9:37:e1:21:e5:2a:47:
                    bc:b8:f7:d4:27:7f:ae:5f:e4:99:2b:b4:c9:d0:2a:
                    8e:34:2e:3f:9f:23:ec:13:19:90:57:aa:49:57:fb:
                    f3:fd:71:eb:83:cf:47:7c:14:2c:fb:2e:54:29:28:
                    cf:98:f1:ba:48:e4:8f:24:f9:d6:b3:ef:08:57:6a:
                    ba:3b:38:a6:34:5e:8f:9e:5c:51:bf:17:31:f0:09:
                    06:30:e3:3b:30:8f:0c:a7:67:5a:1a:06:31:dc:e7:
                    6c:92:6c:56:c5:e0:11:3f:36:12:02:fc:2c:b8:6f:
                    63:1f:49:a4:98:53:e3:89:4d:4b:6e:0d:71:b4:ee:
                    b7:e0:b2:22:06:ec:98:16:f1:81:28:5f:8c:ce:94:
                    e9:90:d1:d2:6e:8a:f0:53:c6:5d:18:dd:22:22:16:
                    a6:36:f5:f8:e8:a1:a1:4c:6b:d8:a5:af:fd:8d:b5:
                    64:b0:22:e2:4d:34:49:ab:96:79:c8:98:40:a2:49:
                    26:a2:8c:3c:5f:1c:9d:ad:b8:a2:d9:8d:a1:02:b3:
                    80:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:95:48:47:EA:53:6C:BC:E4:B7:D9:83:47:D1:25:F1:65:C9:32:DA
            X509v3 Authority Key Identifier:
                keyid:CD:23:D9:71:27:4B:71:3E:20:6B:34:F0:B4:A6:7B:75:AA:F9:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/CD23D971274B713E206B34F0B4A67B75AAF920F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD23D971274B713E206B34F0B4A67B75AAF920F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3232203d3e20323637363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:e8:22:8b:a2:34:72:75:70:9d:25:9d:be:ca:fa:48:99:
         2f:96:d7:aa:05:ed:c2:2f:9b:3f:5b:73:70:19:64:40:58:ae:
         b8:60:cc:93:54:6f:c1:9b:23:19:e5:d1:f3:0f:ce:6d:fa:07:
         2b:7c:f2:86:cc:e2:19:40:81:09:cf:23:15:94:c3:2c:2e:28:
         e6:ab:f0:b7:bb:de:82:38:56:f1:c1:d6:75:eb:0a:aa:aa:98:
         c2:91:a2:33:7f:f9:b5:10:cc:4f:21:13:db:1c:de:01:9a:2c:
         9c:d8:a4:cd:8c:2a:d5:21:a1:68:fc:4d:f6:8b:f9:a6:18:43:
         dd:07:f2:d6:78:7c:4d:63:b5:d4:f8:6b:47:63:f6:98:77:b2:
         33:fa:4a:1a:4e:e6:4e:6f:ed:ea:33:0c:9a:09:36:50:19:a1:
         c1:0e:bf:6c:97:95:da:fe:2d:e8:1f:82:16:47:c3:ef:aa:f4:
         1a:b8:6f:46:8c:ee:0d:21:91:71:66:04:2d:48:03:5d:b3:8b:
         25:61:31:00:d9:20:75:b0:96:ee:44:bd:15:11:4d:b6:57:96:
         64:f6:6e:fc:10:3c:10:b5:56:ef:c9:75:51:d1:17:31:50:ef:
         12:0b:97:58:5d:53:92:7c:9a:50:b8:7a:05:10:a3:b8:85:9a:
         f8:64:48:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:02:19 2025 by rpki-client