Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/34352e3136352e31362e302f32332d3233203d3e20323638363637.roa
File:                     34352e3136352e31362e302f32332d3233203d3e20323638363637.roa (raw, json)
Hash identifier:          uCUSwOh2ET3OB7weLFVuiuthnX4vLV951MyPZ2W691A=
Subject key identifier:   6D:EB:2A:9D:DC:0A:CE:AD:0A:A6:88:6F:73:69:2A:70:1E:B0:D1:F4
Certificate issuer:       /CN=1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44
Certificate serial:       02ED58C239CF85EB926FB88B6BB0C5F441E2C0BA
Authority key identifier: 1C:4A:D4:14:B6:D5:C6:E6:82:A2:1C:57:99:DA:3B:57:58:CB:8A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/34352e3136352e31362e302f32332d3233203d3e20323638363637.roa
Signing time:             Mon 15 Aug 2022 21:26:07 +0000
ROA not before:           Mon 15 Aug 2022 21:21:07 +0000
ROA not after:            Mon 14 Aug 2023 21:26:07 +0000
asID:                     268667
IP address blocks:        45.165.16.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ed:58:c2:39:cf:85:eb:92:6f:b8:8b:6b:b0:c5:f4:41:e2:c0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44
        Validity
            Not Before: Aug 15 21:21:07 2022 GMT
            Not After : Aug 14 21:26:07 2023 GMT
        Subject: CN=6DEB2A9DDC0ACEAD0AA6886F73692A701EB0D1F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:a9:11:b0:49:5f:99:80:5a:3c:89:54:67:
                    bc:f7:43:b7:d4:e0:14:46:9d:18:07:8f:bd:1d:e0:
                    0f:fb:c1:0a:5b:a2:6c:fa:54:71:65:c2:7f:88:2d:
                    4c:41:53:f0:c5:b1:b0:80:15:d0:b7:73:1f:16:92:
                    ed:65:96:b3:5b:26:1b:45:73:ac:e3:03:92:bd:f0:
                    e6:62:ad:a8:b3:6e:9c:ff:75:60:3b:96:2d:3f:59:
                    09:7c:06:88:3c:62:a1:be:09:d3:24:20:a2:db:4d:
                    ab:a6:9f:8f:6b:47:b9:92:ca:03:44:c7:1e:17:dc:
                    f9:77:fc:87:6a:cc:d5:c0:60:e1:e2:d6:38:20:83:
                    30:8b:31:d0:0d:c1:c7:c6:80:1a:67:2d:ff:c8:c6:
                    88:fc:90:e4:e0:c5:7c:06:4f:ef:75:dc:f9:8a:f2:
                    0d:41:cc:be:8d:51:18:eb:62:95:62:2d:ae:d9:50:
                    d2:ef:28:83:ad:ef:65:f4:34:20:af:f2:2a:85:49:
                    6a:9f:cd:fa:80:55:2a:6e:94:16:a4:80:fd:80:03:
                    77:cc:06:f3:3f:f1:d7:fd:f5:d8:2b:25:88:77:c6:
                    85:ab:d2:48:f1:27:9e:6d:39:6b:11:fa:f4:71:ea:
                    08:66:1b:7f:94:72:00:3f:1d:f8:d9:f3:1a:7c:ec:
                    a4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EB:2A:9D:DC:0A:CE:AD:0A:A6:88:6F:73:69:2A:70:1E:B0:D1:F4
            X509v3 Authority Key Identifier:
                keyid:1C:4A:D4:14:B6:D5:C6:E6:82:A2:1C:57:99:DA:3B:57:58:CB:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/34352e3136352e31362e302f32332d3233203d3e20323638363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:a3:55:f1:25:05:10:fd:90:6f:d7:1e:26:65:68:23:79:51:
         23:cf:a3:0e:36:73:70:50:21:ad:d6:95:b5:1c:d1:59:59:96:
         f2:40:92:53:62:bf:fc:f9:c5:07:16:c7:e5:0f:03:02:d9:7d:
         09:ed:03:9d:bf:0b:e7:dc:f5:95:de:8b:14:58:42:b3:cc:ef:
         87:a8:c9:92:db:88:61:87:b7:6d:20:37:c7:26:a3:be:c8:a5:
         b2:9e:7f:df:a2:ab:ae:f7:1c:80:da:7b:ea:24:76:f4:5f:56:
         31:36:df:5f:a5:f0:8e:cb:a0:1c:5b:90:6d:07:ca:aa:80:27:
         2b:d5:3c:91:80:f8:a6:f2:41:46:bb:5c:99:aa:48:66:62:c0:
         e8:d4:c5:ce:c3:b6:b3:98:f9:d9:86:c0:c5:73:dc:51:5a:e4:
         60:ac:2e:88:91:52:ad:55:39:7a:d5:91:93:70:da:b3:60:79:
         ef:ab:42:47:c8:5e:2f:a8:c8:5f:93:42:34:7b:f9:29:b9:1d:
         e4:6a:3d:ae:fc:7f:40:7c:24:42:45:bd:8a:c9:e3:0f:24:58:
         d5:85:90:a8:e4:29:32:fe:69:a5:5e:e6:27:57:97:7a:2d:0e:
         c8:e9:68:ae:49:0a:b4:ee:35:83:aa:18:88:49:c0:51:ad:6f:
         c3:12:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:15:57 2025 by rpki-client