Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/34352e3137372e36302e302f32322d3234203d3e20323639303331.roa
File:                     34352e3137372e36302e302f32322d3234203d3e20323639303331.roa (raw, json)
Hash identifier:          UgJi6Fg328shO/jU0qBYfdTEQ3Yr47O4VMc3o8s8ZNs=
Subject key identifier:   95:B0:E1:79:CD:61:85:6E:E2:E4:58:F8:2F:A8:7C:92:C0:7E:8D:F1
Certificate issuer:       /CN=81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC
Certificate serial:       10223E56F32D35638BF975A45656C4DA7B035D1A
Authority key identifier: 81:E0:C5:E7:A0:85:3F:16:47:9E:0F:54:54:AA:1C:DC:4F:53:59:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/34352e3137372e36302e302f32322d3234203d3e20323639303331.roa
Signing time:             Fri 14 Jul 2023 01:10:54 +0000
ROA not before:           Fri 14 Jul 2023 01:05:54 +0000
ROA not after:            Fri 12 Jul 2024 01:10:54 +0000
asID:                     269031
IP address blocks:        45.177.60.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:22:3e:56:f3:2d:35:63:8b:f9:75:a4:56:56:c4:da:7b:03:5d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC
        Validity
            Not Before: Jul 14 01:05:54 2023 GMT
            Not After : Jul 12 01:10:54 2024 GMT
        Subject: CN=95B0E179CD61856EE2E458F82FA87C92C07E8DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:1f:0a:13:b7:cb:6d:aa:0c:c8:46:54:b8:
                    0c:ad:7d:e4:7f:a2:aa:08:c7:b8:ef:52:dd:8d:c2:
                    8b:51:68:c9:56:e3:89:85:c5:49:b4:0d:7f:6c:17:
                    fb:4d:45:b5:92:85:b0:c9:89:7f:23:ac:f9:94:de:
                    03:df:a2:f4:cc:1f:ad:5c:76:d4:9c:76:8e:e3:b7:
                    7e:e4:56:94:20:85:41:93:88:55:71:eb:5b:b6:6c:
                    99:df:f4:c6:65:14:ee:3b:1f:90:8a:78:74:4a:9b:
                    39:4d:1b:d7:98:82:d0:a8:cd:1f:59:a6:ba:4b:bd:
                    f4:11:61:b9:c7:6b:bc:2d:5d:ff:1e:2a:4f:95:17:
                    ac:9e:90:f9:ae:50:92:0f:3f:01:df:5e:6a:b8:8f:
                    49:5a:21:eb:e2:f3:8f:76:23:b0:d9:3b:9f:3c:54:
                    f9:ab:95:cf:b0:03:9f:08:ac:9b:28:f5:17:6b:f1:
                    d5:01:75:7f:ae:9f:88:8b:c6:b9:e9:e2:e4:8c:a0:
                    f7:a8:34:d5:32:43:e3:23:a3:d7:de:65:4f:a0:f4:
                    d6:43:86:0d:cd:d4:10:a7:30:8c:28:59:d2:3f:0f:
                    9b:8f:4c:9f:2f:90:33:81:d2:e8:44:73:df:9a:80:
                    6d:1f:bc:79:de:e4:4f:52:56:be:2b:16:93:74:99:
                    6f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B0:E1:79:CD:61:85:6E:E2:E4:58:F8:2F:A8:7C:92:C0:7E:8D:F1
            X509v3 Authority Key Identifier:
                keyid:81:E0:C5:E7:A0:85:3F:16:47:9E:0F:54:54:AA:1C:DC:4F:53:59:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/34352e3137372e36302e302f32322d3234203d3e20323639303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:91:2a:79:31:b7:dc:bb:09:60:b1:3d:01:f1:7b:3d:a4:2f:
         81:ea:55:af:58:d7:d4:f2:af:2f:74:65:ee:67:96:94:4b:4e:
         53:ae:32:1f:a9:aa:98:24:92:55:28:7d:a6:32:03:bc:31:da:
         fb:80:96:bc:10:e7:1c:9b:67:01:f4:10:7a:76:28:e2:e3:84:
         a4:47:54:5a:7b:98:36:92:b8:c7:93:62:9e:8f:8f:28:46:13:
         06:bd:f2:d3:83:b5:cb:3d:cf:12:35:d9:53:2d:bf:d1:a9:c8:
         26:62:04:0e:44:8e:2d:d2:5b:6b:00:41:ff:66:e1:d3:e9:6c:
         0c:85:45:e5:47:be:da:7c:da:9a:e7:bf:81:b0:0d:74:5d:14:
         c2:e0:0a:02:45:74:40:e3:12:b3:0d:5f:b5:cf:50:34:0d:0f:
         7c:9c:61:86:35:93:65:94:e3:04:b5:18:5b:41:6d:85:68:cd:
         5a:cc:49:ae:c2:f1:45:57:ab:33:26:e1:24:14:74:44:1f:68:
         65:46:e1:9c:bb:d9:e5:02:af:25:99:fe:ae:de:75:50:11:75:
         64:9c:90:08:b3:4c:6f:63:5e:88:5c:fd:c3:fd:a5:7f:83:4c:
         1c:aa:32:39:3a:f4:03:be:e0:67:18:db:5e:1c:66:44:6b:bd:
         e6:30:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:44 2025 by rpki-client