Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3232203d3e20323638343539.roa
File:                     34352e3136312e3132382e302f32322d3232203d3e20323638343539.roa (raw, json)
Hash identifier:          CztS36AWQ5tSK1+O+bpuLSpO6Qp4kEzv9bRqiGAFhfQ=
Subject key identifier:   F3:E2:A1:F0:87:EA:D5:6D:21:E2:FD:08:2A:8B:90:D0:B3:02:4C:73
Certificate issuer:       /CN=4AD23F69FEB6F0C4185CED1CD33614808371B5CA
Certificate serial:       2DF818915396F93871107DD04A785EAA09DD9DD1
Authority key identifier: 4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3232203d3e20323638343539.roa
Signing time:             Wed 21 Dec 2022 12:37:50 +0000
ROA not before:           Wed 21 Dec 2022 12:32:50 +0000
ROA not after:            Wed 20 Dec 2023 12:37:50 +0000
asID:                     268459
IP address blocks:        45.161.128.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f8:18:91:53:96:f9:38:71:10:7d:d0:4a:78:5e:aa:09:dd:9d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AD23F69FEB6F0C4185CED1CD33614808371B5CA
        Validity
            Not Before: Dec 21 12:32:50 2022 GMT
            Not After : Dec 20 12:37:50 2023 GMT
        Subject: CN=F3E2A1F087EAD56D21E2FD082A8B90D0B3024C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:4f:aa:6d:88:16:be:22:30:24:8c:98:89:
                    bf:eb:85:80:6f:b0:20:5e:d3:a1:09:66:ed:51:f8:
                    27:31:ea:f9:1b:52:bd:6d:54:60:db:03:84:01:47:
                    c5:19:00:92:33:02:df:e6:e3:a9:27:f3:c2:5b:52:
                    f6:5f:1d:ce:96:64:04:3b:03:83:a6:60:bd:ac:ae:
                    97:f2:4b:e3:7e:48:c0:5e:3c:0b:83:51:e0:e5:27:
                    02:62:33:ea:d7:9b:db:1d:d9:c6:94:6f:58:fc:3e:
                    ef:00:e1:a0:d9:1f:10:08:f8:43:02:43:fe:15:87:
                    76:ae:a6:4d:6c:23:e3:2b:3e:a7:8a:d7:ef:55:e9:
                    da:42:71:75:10:b4:71:4b:e0:33:2b:41:dc:13:07:
                    15:d5:42:60:08:78:0e:b8:2c:1c:cb:b0:01:0b:ae:
                    90:9a:c7:c4:f1:9c:c4:26:3c:28:86:b4:a6:cd:01:
                    ee:bc:c5:b7:9e:7b:68:5a:07:ba:85:2d:74:27:f8:
                    b9:08:93:30:ac:9d:55:0c:fd:7b:2b:d5:bc:b4:35:
                    7a:70:1a:81:df:c3:62:83:f0:1a:69:b2:53:23:4a:
                    2a:7b:27:38:d2:bf:28:e8:8e:74:62:8d:70:e5:9e:
                    17:f8:c1:f6:d7:70:2e:99:c3:85:3c:bd:f6:91:bf:
                    d1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E2:A1:F0:87:EA:D5:6D:21:E2:FD:08:2A:8B:90:D0:B3:02:4C:73
            X509v3 Authority Key Identifier:
                keyid:4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/34352e3136312e3132382e302f32322d3232203d3e20323638343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:2d:79:5b:2e:31:7c:15:df:8f:ea:72:c9:db:4c:4d:93:5c:
         96:82:b2:7c:14:16:1d:7a:ac:f3:b7:77:7f:95:fc:c0:36:0f:
         77:25:e1:9b:70:29:a7:2b:62:55:44:6c:92:56:80:f1:1a:b5:
         f9:2a:b9:12:a3:d2:8f:a3:93:bb:70:bb:c0:e8:5e:f2:24:49:
         13:29:26:e4:67:a2:11:91:cd:81:53:94:a0:76:b3:cb:04:1d:
         16:82:f4:d0:6a:cd:8d:1e:36:b0:13:d1:79:47:a2:25:53:69:
         65:eb:63:16:fc:8b:a4:5f:09:49:e0:f6:c1:14:f0:ce:bb:f0:
         ba:47:b8:4b:c2:c3:39:86:7e:82:51:83:3c:ce:6b:5e:49:ef:
         80:0d:79:9c:66:6b:38:6a:21:60:74:56:b7:1d:31:5b:f7:69:
         7a:6c:a7:4e:f7:d7:cc:fd:85:d6:4b:e2:0e:57:b2:03:6c:2a:
         d8:3e:01:ec:c3:73:6a:b4:28:a9:e0:27:e3:75:a6:8b:c7:9d:
         7f:66:6b:93:27:82:f5:1e:56:25:f5:4e:4d:44:a4:64:82:ff:
         9e:a1:0d:ce:cd:8b:a4:82:87:cd:fd:92:93:ea:41:9b:f3:3e:
         86:f3:65:db:6b:29:e8:3b:d5:42:77:74:fc:38:32:a4:f3:8b:
         35:4c:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:15 2025 by rpki-client