Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e35312e302f32342d3234203d3e20323636393431.roa
File:                     34352e3232352e35312e302f32342d3234203d3e20323636393431.roa (raw, json)
Hash identifier:          Lihn+dA/PPB0yixELO99rvujs+P9ET/N9GPHw3dm0I8=
Subject key identifier:   F5:E5:76:8B:FB:A0:2B:3C:44:B0:83:B9:EB:49:4E:E9:AE:95:4A:B3
Certificate issuer:       /CN=5940C19E46A00D616E69354C6F425903A1505095
Certificate serial:       5A99471862C3DB5A81A4770F8189D55C688E2350
Authority key identifier: 59:40:C1:9E:46:A0:0D:61:6E:69:35:4C:6F:42:59:03:A1:50:50:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5940C19E46A00D616E69354C6F425903A1505095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e35312e302f32342d3234203d3e20323636393431.roa
Signing time:             Fri 19 May 2023 18:12:53 +0000
ROA not before:           Fri 19 May 2023 18:07:53 +0000
ROA not after:            Fri 17 May 2024 18:12:53 +0000
asID:                     266941
IP address blocks:        45.225.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:99:47:18:62:c3:db:5a:81:a4:77:0f:81:89:d5:5c:68:8e:23:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5940C19E46A00D616E69354C6F425903A1505095
        Validity
            Not Before: May 19 18:07:53 2023 GMT
            Not After : May 17 18:12:53 2024 GMT
        Subject: CN=F5E5768BFBA02B3C44B083B9EB494EE9AE954AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d6:2a:ff:93:cd:66:1f:36:25:f7:c8:e2:a6:
                    4e:cc:44:86:d2:7f:a1:9a:46:16:02:35:2f:a0:23:
                    49:60:2a:b7:0e:81:00:c2:22:8c:cc:89:f1:f8:98:
                    1e:1e:26:da:86:d7:89:b4:03:01:2a:47:1c:75:d6:
                    b8:3c:27:ee:26:7e:67:e1:45:dd:ad:4d:2d:9d:66:
                    f2:77:89:57:00:6a:da:de:1a:79:bf:57:06:71:ad:
                    38:04:74:a6:19:d0:ff:1f:2b:a9:9c:d7:9c:0b:29:
                    d8:b2:c8:1d:21:a1:67:c2:96:13:22:bb:9a:b9:3a:
                    d3:36:d7:f8:32:a2:37:6f:cc:df:60:02:b0:c7:74:
                    e4:b8:77:42:2b:6e:ec:ca:17:1a:c6:02:a2:79:90:
                    b9:de:76:c8:7b:a1:47:b1:bf:30:6d:2b:6d:fe:a4:
                    a2:b7:84:92:6f:d6:19:d0:17:89:a7:c4:1e:0f:4b:
                    de:90:ff:0c:f8:f5:0c:a7:57:ef:c0:9b:c1:91:b0:
                    3a:c6:55:73:62:a7:61:1c:84:4e:66:a9:6d:6c:6e:
                    9d:84:91:9a:f5:4d:ac:60:9f:ed:b0:51:e8:91:f2:
                    a2:cb:52:74:a2:d7:34:53:b3:33:6a:9d:0d:be:52:
                    35:ab:02:28:5f:00:16:57:c0:6a:69:73:72:ed:dc:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E5:76:8B:FB:A0:2B:3C:44:B0:83:B9:EB:49:4E:E9:AE:95:4A:B3
            X509v3 Authority Key Identifier:
                keyid:59:40:C1:9E:46:A0:0D:61:6E:69:35:4C:6F:42:59:03:A1:50:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/5940C19E46A00D616E69354C6F425903A1505095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5940C19E46A00D616E69354C6F425903A1505095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e35312e302f32342d3234203d3e20323636393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:42:4e:e2:af:c2:c2:14:38:d3:17:0d:df:28:56:5e:29:b4:
         9f:29:47:65:2e:d1:d5:fc:4c:70:81:72:5b:c0:61:af:10:af:
         f6:03:9f:3a:9e:fa:fc:cf:e6:1c:d1:89:00:80:f7:08:e5:21:
         f7:05:92:1a:71:fc:3c:d8:92:1b:18:1a:68:11:34:b3:ac:bf:
         33:52:d9:4f:5d:c2:ea:5c:16:6c:88:2c:3d:85:8d:6b:62:fb:
         c4:e2:2c:f6:6e:d9:18:b8:14:a4:74:4b:26:a5:3f:ba:23:f9:
         e8:d8:2e:6e:92:7c:5e:ab:f3:4c:c2:25:6c:df:d7:60:8c:5e:
         31:eb:9f:41:1a:36:22:a8:c0:24:ee:17:da:57:d6:60:f2:20:
         ea:4f:16:6d:cf:9a:a9:a9:b4:dd:0a:81:d7:19:12:97:8e:4a:
         e4:eb:0a:ae:9f:ac:ee:fb:67:d3:87:09:d6:a2:11:db:a4:80:
         ac:67:2c:63:ac:2b:28:42:29:e2:ef:63:4b:2b:a2:0f:9b:a1:
         30:0f:2f:9a:ae:2c:d8:0d:d7:b9:e4:34:ef:3f:24:55:f9:e6:
         ba:0d:a0:17:2b:1f:2e:60:2d:67:33:3f:66:25:7e:a6:be:d4:
         74:a9:1e:3d:30:90:79:65:c6:99:21:f6:65:9a:71:33:9f:17:
         ea:d2:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:52:53 2025 by rpki-client