Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/34352e3136342e3132302e302f32322d3234203d3e20323638363233.roa
File:                     34352e3136342e3132302e302f32322d3234203d3e20323638363233.roa (raw, json)
Hash identifier:          6YypHOK4HRxhGuPO+dY1qHMTHhigg9H106srL7pD1kg=
Subject key identifier:   19:58:0A:5B:58:1D:EB:41:40:FE:FE:8C:CD:26:5E:67:EF:FB:28:13
Certificate issuer:       /CN=E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB
Certificate serial:       6D49F850B817659455A3572A62FC463BCB09F017
Authority key identifier: E5:8B:EB:71:37:C8:A8:83:82:E5:D3:B9:7D:2A:0E:11:0D:4C:50:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/34352e3136342e3132302e302f32322d3234203d3e20323638363233.roa
Signing time:             Wed 16 Nov 2022 15:20:32 +0000
ROA not before:           Wed 16 Nov 2022 15:15:32 +0000
ROA not after:            Wed 15 Nov 2023 15:20:32 +0000
asID:                     268623
IP address blocks:        45.164.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:49:f8:50:b8:17:65:94:55:a3:57:2a:62:fc:46:3b:cb:09:f0:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB
        Validity
            Not Before: Nov 16 15:15:32 2022 GMT
            Not After : Nov 15 15:20:32 2023 GMT
        Subject: CN=19580A5B581DEB4140FEFE8CCD265E67EFFB2813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:b8:bc:a0:10:ea:1a:f9:6c:8c:0b:ba:03:
                    64:93:88:cb:eb:e0:20:f6:e8:7d:fa:c4:ca:31:8c:
                    fd:a6:be:43:42:b5:09:84:b9:8e:d8:db:4b:a5:d3:
                    8a:7b:84:f6:6b:36:0f:a3:c2:da:d3:0a:1b:72:44:
                    17:e3:79:b6:61:fb:10:c8:d7:0c:87:cd:df:c6:69:
                    a3:ca:27:a9:29:be:68:a5:2b:7d:9c:53:2d:75:b7:
                    dd:5d:9d:f8:b2:93:b1:89:27:12:4f:20:3f:f8:79:
                    5c:f5:cb:5b:a4:ac:97:fc:28:0c:c0:41:4a:41:71:
                    59:47:df:44:b7:44:80:89:10:06:76:3c:6b:55:0f:
                    37:9a:a9:36:ff:0c:8f:d1:db:bb:1d:b7:2a:c3:31:
                    55:77:ec:10:22:00:80:84:df:b4:ef:99:33:65:cd:
                    9a:a5:70:33:34:a5:aa:3d:a5:64:53:89:c4:23:cf:
                    cc:1c:0c:25:5d:cc:5a:03:9d:fa:34:70:74:e0:6d:
                    34:8e:77:b6:b3:23:7b:60:e0:09:b4:d1:4e:64:da:
                    2d:83:2d:63:d0:3c:d6:65:6a:5b:a1:e3:cc:95:c7:
                    24:e1:83:42:41:4a:43:55:fb:f0:4c:42:96:d0:12:
                    b6:25:84:de:96:84:bd:02:c9:88:30:44:07:ad:a6:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:58:0A:5B:58:1D:EB:41:40:FE:FE:8C:CD:26:5E:67:EF:FB:28:13
            X509v3 Authority Key Identifier:
                keyid:E5:8B:EB:71:37:C8:A8:83:82:E5:D3:B9:7D:2A:0E:11:0D:4C:50:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E58BEB7137C8A88382E5D3B97D2A0E110D4C50BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/34352e3136342e3132302e302f32322d3234203d3e20323638363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:ba:f0:14:2e:d7:12:2c:a2:07:49:52:ad:db:9e:67:4f:74:
         44:fd:8f:98:e1:4d:c2:9a:20:b2:04:83:21:b1:74:8a:95:ca:
         c7:19:ae:d3:36:a9:b8:69:d2:a9:dc:cc:e4:4d:55:ac:56:ba:
         2a:bc:3a:09:8e:12:94:3e:ef:38:04:4f:dc:e7:85:cf:75:c7:
         a0:f1:c3:e5:76:a3:e8:2b:8e:c1:be:5a:d8:ef:31:c3:7b:f0:
         b2:4b:59:5b:4e:3d:c5:8d:65:e4:1f:83:81:94:50:f5:24:1d:
         19:6b:bf:dc:1c:1e:8e:a0:53:16:bb:36:fc:8c:56:ec:40:b1:
         c5:6e:7d:98:2c:0d:58:f7:0a:93:73:cf:d3:bc:a1:26:a4:45:
         7d:62:f0:43:41:d7:0f:6d:78:1b:6c:27:fe:12:64:91:b6:02:
         6c:b1:d6:4e:88:72:0c:0f:6e:fd:fd:2b:a1:84:8a:b4:72:46:
         54:38:27:5e:cd:d4:d4:b0:07:db:5c:26:ad:bc:80:11:5a:d0:
         dc:6e:23:93:65:ad:5c:48:f1:cd:9d:ef:d6:8a:7c:02:bc:eb:
         4a:b4:ae:db:3f:85:3c:0e:f3:85:0e:fc:7e:4b:28:30:de:ca:
         fe:a8:ee:f6:b5:17:19:30:2b:54:22:86:3f:33:43:7e:a0:4d:
         a6:c8:72:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:37 2025 by rpki-client