Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131322e302f32322d3332203d3e20323638353736.roa
File:                     34352e3136332e3131322e302f32322d3332203d3e20323638353736.roa (raw, json)
Hash identifier:          OVSnNIgUz1IdwnGZYPMKyJ20dr8sx73IGy+YrGEY6fQ=
Subject key identifier:   CF:30:0D:95:47:0D:16:A6:43:CE:03:E4:74:98:19:4C:73:46:3F:95
Certificate issuer:       /CN=75713251170AE2794778E24510E361BB3DCC6644
Certificate serial:       3E4B2539B34D14A8D31CE104DF2EE81424C3C562
Authority key identifier: 75:71:32:51:17:0A:E2:79:47:78:E2:45:10:E3:61:BB:3D:CC:66:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75713251170AE2794778E24510E361BB3DCC6644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131322e302f32322d3332203d3e20323638353736.roa
Signing time:             Wed 18 Oct 2023 12:35:04 +0000
ROA not before:           Wed 18 Oct 2023 12:30:04 +0000
ROA not after:            Wed 16 Oct 2024 12:35:04 +0000
asID:                     268576
IP address blocks:        45.163.112.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4b:25:39:b3:4d:14:a8:d3:1c:e1:04:df:2e:e8:14:24:c3:c5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75713251170AE2794778E24510E361BB3DCC6644
        Validity
            Not Before: Oct 18 12:30:04 2023 GMT
            Not After : Oct 16 12:35:04 2024 GMT
        Subject: CN=CF300D95470D16A643CE03E47498194C73463F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:d8:ef:45:fe:44:5e:76:cb:d3:05:d8:77:
                    82:c5:7a:3b:95:ea:38:bb:5a:19:c6:91:82:f2:4d:
                    15:b2:10:26:9d:72:fb:fa:5e:90:fa:8b:23:c3:72:
                    b7:c5:5a:12:52:53:ad:bd:9f:e3:98:c1:39:45:e8:
                    c1:e9:69:d5:51:8f:1e:e4:10:20:c4:3f:2d:8b:ab:
                    9f:e4:76:1c:01:4a:99:d1:f3:5d:07:fc:b2:5e:8f:
                    3a:ef:76:c5:29:b0:06:b6:bd:35:ae:30:8c:aa:e7:
                    54:39:6c:16:d9:e4:78:1e:89:f3:e1:06:5d:1a:50:
                    68:c8:9c:81:43:40:b6:2a:e7:63:c2:da:9c:31:47:
                    a0:d5:e4:8e:19:04:3b:4c:c4:94:cc:0c:50:41:3f:
                    bb:2c:a4:2e:14:7d:ef:1f:5f:e6:c4:5c:b8:0b:80:
                    b0:58:3d:e2:0d:fc:64:f7:4e:1c:eb:a8:f3:93:8d:
                    1e:22:63:ca:37:ad:dc:bc:33:bf:f1:c2:15:0e:c0:
                    ab:bd:6d:d6:59:b7:10:0f:ba:b8:66:a8:0e:ea:f6:
                    ea:61:b4:ff:c4:c6:38:65:cd:36:15:16:4c:f5:55:
                    8a:70:92:30:e8:24:82:20:ac:f7:bd:a1:63:a9:49:
                    9a:83:53:10:49:97:40:60:bd:30:b1:54:7d:ad:a3:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:30:0D:95:47:0D:16:A6:43:CE:03:E4:74:98:19:4C:73:46:3F:95
            X509v3 Authority Key Identifier:
                keyid:75:71:32:51:17:0A:E2:79:47:78:E2:45:10:E3:61:BB:3D:CC:66:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/75713251170AE2794778E24510E361BB3DCC6644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75713251170AE2794778E24510E361BB3DCC6644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/34352e3136332e3131322e302f32322d3332203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:86:33:84:4c:ff:a5:84:62:7f:a1:7e:ed:58:c0:4a:49:
         f9:aa:7e:53:5e:11:4e:12:83:24:3b:4f:3e:64:b4:80:5c:b7:
         fe:5c:21:5e:16:bf:0b:c2:98:41:96:52:14:e4:4a:7e:31:ac:
         c2:23:ae:87:d1:05:12:fd:02:01:80:49:44:fa:47:fb:e8:7e:
         28:be:0e:d6:9b:3a:99:2c:46:a7:16:a3:75:7a:be:93:96:34:
         4b:1a:88:a6:d1:66:09:d2:a5:b1:6c:5c:8c:b7:88:5b:f8:0e:
         f1:e2:12:37:87:66:33:d1:ae:cc:92:ca:fc:5f:62:37:48:0f:
         79:03:33:45:8d:a1:1c:23:ad:27:fe:1d:bb:a7:8c:ea:58:d5:
         96:ad:ea:27:e8:eb:84:9b:dc:08:45:69:5c:5c:2e:d7:ba:58:
         4d:30:8f:52:de:73:87:21:7f:0a:dd:91:5d:d9:e1:c3:95:b5:
         c0:52:8d:4d:73:39:61:e6:b3:1b:6c:f3:7e:32:e2:1f:cd:0c:
         af:c4:b5:fd:9c:63:c1:be:88:90:30:6c:eb:c6:00:c5:3f:fa:
         aa:77:03:7e:84:3d:7b:4a:05:1c:6b:90:9b:78:a9:8d:3d:fd:
         93:2e:9f:25:60:48:98:76:61:2d:7c:dc:55:6d:87:5f:ac:14:
         7f:a8:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:20 2025 by rpki-client