Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/1/34352e3137382e3137342e302f32332d3233203d3e20323639303336.roa
File:                     34352e3137382e3137342e302f32332d3233203d3e20323639303336.roa (raw, json)
Hash identifier:          l0Y0h75ukX879GeSaaB5nB+yDfvIgyG7R5HD0LZbdm0=
Subject key identifier:   52:72:4C:70:91:2B:AE:50:2C:3D:F3:4C:6D:ED:17:3F:43:CD:B0:AE
Certificate issuer:       /CN=A13AF554620544DCE1A78FA175DFF98281E1B1B1
Certificate serial:       621E78656F2F694CDBE2C9136715AABAAC0957B7
Authority key identifier: A1:3A:F5:54:62:05:44:DC:E1:A7:8F:A1:75:DF:F9:82:81:E1:B1:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A13AF554620544DCE1A78FA175DFF98281E1B1B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/1/34352e3137382e3137342e302f32332d3233203d3e20323639303336.roa
Signing time:             Wed 20 Sep 2023 14:42:52 +0000
ROA not before:           Wed 20 Sep 2023 14:37:52 +0000
ROA not after:            Wed 18 Sep 2024 14:42:52 +0000
asID:                     269036
IP address blocks:        45.178.174.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1e:78:65:6f:2f:69:4c:db:e2:c9:13:67:15:aa:ba:ac:09:57:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A13AF554620544DCE1A78FA175DFF98281E1B1B1
        Validity
            Not Before: Sep 20 14:37:52 2023 GMT
            Not After : Sep 18 14:42:52 2024 GMT
        Subject: CN=52724C70912BAE502C3DF34C6DED173F43CDB0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:fe:40:63:ec:f7:1c:f0:ae:f0:36:50:02:
                    ea:8c:d0:a5:3a:a7:ee:e6:da:68:aa:1f:bf:d3:27:
                    c4:0b:76:dd:36:9f:6f:5a:8d:2f:6f:6b:47:25:75:
                    ba:71:80:7a:7e:65:a1:f4:29:7f:14:f4:80:6c:8f:
                    e0:94:39:a2:34:33:5a:b1:40:58:9a:5f:34:78:e7:
                    5f:4a:01:92:0d:73:1c:3d:bb:43:a2:97:eb:13:30:
                    d9:51:a2:5a:02:29:03:19:eb:9c:66:8e:7b:ad:a3:
                    26:1b:92:b6:f4:75:68:de:a3:2b:a0:4d:e1:5c:99:
                    df:66:75:15:7c:88:83:ac:61:35:af:94:c5:3d:29:
                    95:44:b0:8b:6f:f5:c0:ec:fc:a5:04:68:fc:e9:5b:
                    5f:22:a0:2e:44:3d:8a:ab:1d:3f:3a:6e:9d:d4:b1:
                    cc:5c:4c:b6:25:c5:bc:11:47:84:4b:bd:ce:94:b8:
                    b9:58:ee:3b:57:4a:77:47:db:86:e5:86:dd:f2:6a:
                    04:ed:f6:c6:f4:fb:b5:12:dd:26:a6:07:24:ff:7f:
                    fc:42:58:d6:b8:d1:d3:7a:ae:48:4b:14:f4:c8:2a:
                    ef:b4:98:e0:38:b2:5c:37:4a:7e:2f:39:a0:97:b0:
                    a8:67:87:46:f4:75:a3:1f:65:33:2f:e0:3f:7d:6f:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:72:4C:70:91:2B:AE:50:2C:3D:F3:4C:6D:ED:17:3F:43:CD:B0:AE
            X509v3 Authority Key Identifier:
                keyid:A1:3A:F5:54:62:05:44:DC:E1:A7:8F:A1:75:DF:F9:82:81:E1:B1:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/1/A13AF554620544DCE1A78FA175DFF98281E1B1B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A13AF554620544DCE1A78FA175DFF98281E1B1B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/1/34352e3137382e3137342e302f32332d3233203d3e20323639303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:0d:fd:7a:3e:49:5f:45:d9:1f:64:22:34:44:f5:0b:2f:
         22:8c:20:e1:2d:72:f8:f6:0c:15:ac:44:48:4d:1f:96:04:bd:
         38:da:56:25:2a:c8:d7:5b:8d:3d:cf:c2:9a:9e:75:00:f3:e8:
         5a:37:3d:9e:44:99:50:7c:c9:45:01:2c:df:d2:f6:87:37:15:
         c7:20:52:e2:cf:0f:ac:7e:af:06:27:02:6f:a0:c8:0b:a8:bf:
         95:16:a1:b1:e6:df:50:11:46:b5:b8:21:32:f6:d4:1a:0f:94:
         49:06:b4:93:3d:42:c6:49:1c:4c:02:a1:81:c7:eb:ac:4d:f6:
         22:29:9d:5e:09:3a:9c:bf:36:89:d9:37:e8:a4:83:3b:64:de:
         e9:bb:f0:88:51:f7:ed:e6:cf:4b:14:e0:1e:15:a6:dd:8f:fe:
         7f:c3:56:dc:65:78:54:46:a2:1b:d4:88:bb:5b:8a:c5:a7:55:
         9f:f0:f1:3a:48:14:2d:03:28:c5:93:67:91:43:65:a4:c3:b8:
         e6:48:f7:91:08:c3:06:29:6d:90:9c:dd:6a:8e:e2:d1:17:71:
         d4:f6:7c:4f:37:62:3c:ac:4b:58:ce:2a:15:de:d8:dd:8e:41:
         82:fd:33:8b:1f:c4:f3:4c:7d:dc:d3:57:c9:2b:59:9a:d9:43:
         63:c0:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:50 2025 by rpki-client