Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa
File:                     34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa (raw, json)
Hash identifier:          ONMS+LJZE4OT73LqlsaLf2Kn0IDr5VsvKUP+3Jn5R+E=
Subject key identifier:   35:9D:93:FA:CA:3B:06:5A:13:48:78:3E:11:2F:9B:C9:C2:62:E8:85
Certificate issuer:       /CN=5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115
Certificate serial:       7FA9C636B4F43E66BE8D440C33537725DED345BE
Authority key identifier: 5B:AB:3F:F3:23:D6:A7:D4:A9:7F:F7:74:35:AA:4A:D5:07:2A:01:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa
Signing time:             Tue 20 Jun 2023 17:19:19 +0000
ROA not before:           Tue 20 Jun 2023 17:14:19 +0000
ROA not after:            Tue 18 Jun 2024 17:19:19 +0000
asID:                     269433
IP address blocks:        45.185.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a9:c6:36:b4:f4:3e:66:be:8d:44:0c:33:53:77:25:de:d3:45:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115
        Validity
            Not Before: Jun 20 17:14:19 2023 GMT
            Not After : Jun 18 17:19:19 2024 GMT
        Subject: CN=359D93FACA3B065A1348783E112F9BC9C262E885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:a6:c5:45:ef:1e:6a:a3:d5:4b:cf:a7:2c:
                    15:32:7a:00:e6:67:93:f2:61:b7:b8:6b:e9:2f:8a:
                    7b:2e:67:dd:c0:21:c3:be:c9:68:25:a4:d3:3e:71:
                    c6:9e:e7:53:cd:a6:da:c0:f8:b7:3b:9f:8a:49:0b:
                    b2:52:e2:12:bc:c1:98:3f:4b:f9:a5:30:0e:df:ce:
                    d6:e0:d3:c2:a6:e6:fc:70:6c:9b:ca:94:0c:ae:c8:
                    99:6c:c2:4c:8a:4b:f5:88:1a:db:4d:25:81:ab:75:
                    ce:dc:3b:ab:55:74:06:84:89:6b:62:0d:14:0c:cd:
                    c3:2e:22:64:b1:d1:03:ca:73:d9:54:a4:f1:6a:18:
                    2d:d7:10:13:79:60:1d:72:be:a0:1c:15:4d:a1:de:
                    bc:35:d6:b4:f9:09:72:da:1c:82:88:2c:2c:6a:04:
                    69:78:83:da:39:d6:93:e2:25:a3:1b:fb:ae:fa:be:
                    e0:e9:1a:92:a6:21:6f:81:3a:3a:1a:9a:c9:c7:b2:
                    b9:36:96:35:f3:48:90:b1:a6:00:2a:c1:bd:e0:7f:
                    3f:14:f6:76:6a:aa:aa:c3:94:9f:ff:39:e2:a7:dd:
                    2c:48:57:68:24:74:40:87:1b:e4:83:33:9a:36:a0:
                    cf:c5:88:d0:f9:14:7d:76:03:31:2f:49:b5:d1:9b:
                    55:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9D:93:FA:CA:3B:06:5A:13:48:78:3E:11:2F:9B:C9:C2:62:E8:85
            X509v3 Authority Key Identifier:
                keyid:5B:AB:3F:F3:23:D6:A7:D4:A9:7F:F7:74:35:AA:4A:D5:07:2A:01:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:3d:d0:79:9c:6a:ba:32:a8:dd:f0:20:7b:f4:3c:cb:13:f5:
         18:c4:55:5b:93:a8:81:7d:cf:0f:2f:c4:71:0a:81:91:59:46:
         90:13:24:da:0e:64:84:30:cf:5c:f5:7b:c8:30:8e:83:a0:62:
         de:ef:29:84:8c:a4:de:b0:e6:52:ab:8d:f3:20:fb:55:12:0e:
         21:e8:a3:82:52:1c:67:06:fa:5b:8a:9e:b9:ff:eb:61:5c:f6:
         43:29:e8:d2:6c:7a:0b:9d:ce:77:56:3d:63:73:36:65:81:47:
         09:0b:46:98:46:4e:fa:ac:49:40:44:81:2e:14:4f:7d:cb:fc:
         c8:5b:12:74:ca:e0:47:bc:43:82:d3:89:3c:c2:a4:99:a9:7d:
         c1:10:55:52:19:15:bc:d2:45:6f:16:e7:39:ac:96:3f:fa:e8:
         94:09:79:72:c5:5a:ec:9c:43:b5:8c:26:1c:c1:5a:3f:f7:0b:
         26:c3:b0:16:1d:3a:b4:6a:fe:a3:66:d8:8c:ef:6c:59:c0:02:
         b5:37:62:c3:77:27:dc:f5:01:ca:49:81:53:ac:5c:4a:71:3a:
         bd:47:bf:f4:ff:6a:0b:dd:5f:c2:e2:f9:86:3c:26:5d:d1:f9:
         47:d5:ec:af:6f:a7:71:57:8a:0e:dd:22:af:4f:7f:87:04:70:
         cb:50:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:02 2025 by rpki-client