Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36392e302f32342d3234203d3e20323637323232.roa
File:                     34352e3232392e36392e302f32342d3234203d3e20323637323232.roa (raw, json)
Hash identifier:          5n74tE2AGDMpVyp5CcsC8bLqwvPL0SKBDa/rA62I8uo=
Subject key identifier:   BA:74:FD:A4:67:31:95:74:DF:F5:A2:32:0E:E2:9C:1D:03:4C:7A:E4
Certificate issuer:       /CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
Certificate serial:       3CEEF26A7B33989F6F46474DA25087F78F7A4495
Authority key identifier: 57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36392e302f32342d3234203d3e20323637323232.roa
Signing time:             Fri 25 Aug 2023 14:55:29 +0000
ROA not before:           Fri 25 Aug 2023 14:50:29 +0000
ROA not after:            Fri 23 Aug 2024 14:55:29 +0000
asID:                     267222
IP address blocks:        45.229.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ee:f2:6a:7b:33:98:9f:6f:46:47:4d:a2:50:87:f7:8f:7a:44:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
        Validity
            Not Before: Aug 25 14:50:29 2023 GMT
            Not After : Aug 23 14:55:29 2024 GMT
        Subject: CN=BA74FDA467319574DFF5A2320EE29C1D034C7AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:99:18:66:40:3d:75:a2:94:c2:ff:82:40:
                    ae:ba:f9:b3:8b:39:b8:bc:8c:f4:47:e5:55:f4:44:
                    80:fe:36:79:3f:60:06:76:bb:1c:b1:f1:23:bc:c5:
                    38:46:a1:df:aa:f4:9d:2a:40:0c:c1:81:4c:51:4e:
                    af:9e:c1:19:f3:e9:c2:f7:c8:a2:9d:d5:1f:dd:e3:
                    97:bc:f5:96:02:11:e4:ea:c0:93:68:bf:f2:02:3b:
                    85:36:58:e7:30:d9:09:ff:c6:20:f5:11:2f:71:2f:
                    2b:40:fc:66:69:19:43:99:dd:c4:8a:82:20:e1:8d:
                    05:8c:c1:ec:e4:76:f6:0a:81:87:af:50:ae:fb:92:
                    05:ed:e7:2c:6d:c2:b7:2e:6f:72:e6:e9:74:42:cc:
                    52:cc:f4:e4:1c:44:b4:49:00:17:f7:d8:b0:ef:73:
                    46:f2:98:9f:53:38:cb:22:83:33:e3:b7:71:ad:43:
                    89:10:e0:52:4d:ed:76:17:c4:53:35:a2:f9:47:8e:
                    05:0e:ee:06:34:ee:8c:2e:6b:78:9f:04:fa:ad:0b:
                    71:01:b2:6b:21:5d:27:ee:4d:33:76:3e:93:b4:d9:
                    e2:6e:67:83:79:b4:7c:7d:ce:61:8d:c7:f9:45:a4:
                    ef:3a:4a:77:12:a4:d0:c1:0f:6f:db:ae:3c:69:c9:
                    8e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:74:FD:A4:67:31:95:74:DF:F5:A2:32:0E:E2:9C:1D:03:4C:7A:E4
            X509v3 Authority Key Identifier:
                keyid:57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36392e302f32342d3234203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:2e:ed:0f:f1:df:de:f5:36:53:db:57:11:5d:9a:8e:f1:ca:
         ee:ae:1e:3e:9f:d0:e8:34:d8:0c:f8:da:1f:2f:03:a0:b1:36:
         f4:a7:00:7c:e2:3e:9b:97:1b:7b:77:50:0f:45:e9:2c:58:f9:
         98:51:9b:ee:d8:ca:ee:d2:eb:59:54:8c:11:ed:37:b4:2e:45:
         f4:2c:9f:c5:0b:0a:e3:1d:fa:54:0f:71:f2:33:43:94:f9:20:
         bb:4e:10:d3:19:56:22:56:ec:37:76:b1:04:28:45:b2:fa:07:
         8e:07:dc:46:de:c6:a3:c2:c4:ba:3f:8f:7f:be:8c:c4:15:42:
         bb:4a:74:8f:e6:2a:c7:d6:20:9b:33:e3:2a:0e:96:42:9c:fd:
         39:2a:c7:85:a1:6b:1f:90:bc:d0:12:18:27:00:37:fe:46:8a:
         de:ca:8b:c7:a0:50:30:89:95:9f:8d:c8:9d:c4:75:11:ac:98:
         de:54:5b:3d:22:72:86:cf:ed:9b:68:9b:db:b3:56:f4:49:23:
         fc:97:ae:cc:bd:aa:e4:d6:5e:d1:b5:af:7c:bf:fe:9f:ec:c4:
         e0:a6:1f:78:da:8e:20:13:c9:f3:05:46:fa:89:d3:a0:f0:89:
         a7:14:62:de:04:71:54:0c:13:2d:07:bd:1e:e2:79:a2:51:89:
         6c:cb:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:34 2025 by rpki-client