Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135382e302f32342d3234203d3e20323637323730.roa
File:                     34352e3233322e3135382e302f32342d3234203d3e20323637323730.roa (raw, json)
Hash identifier:          qnX1SVNbrXxjK2xvTlo1J8GYEWobu/388uzisFvNb3A=
Subject key identifier:   7D:2D:2C:7F:EE:FB:97:A7:17:C4:A9:AD:D1:59:76:5E:01:DB:89:9A
Certificate issuer:       /CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
Certificate serial:       2EBA65C74C1074B57E9C970800598DAFB4A3920E
Authority key identifier: 81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135382e302f32342d3234203d3e20323637323730.roa
Signing time:             Wed 16 Aug 2023 18:44:40 +0000
ROA not before:           Wed 16 Aug 2023 18:39:40 +0000
ROA not after:            Wed 14 Aug 2024 18:44:40 +0000
asID:                     267270
IP address blocks:        45.232.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ba:65:c7:4c:10:74:b5:7e:9c:97:08:00:59:8d:af:b4:a3:92:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
        Validity
            Not Before: Aug 16 18:39:40 2023 GMT
            Not After : Aug 14 18:44:40 2024 GMT
        Subject: CN=7D2D2C7FEEFB97A717C4A9ADD159765E01DB899A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:37:4b:8e:40:63:db:1e:74:ad:f9:36:79:
                    1f:0a:5d:cc:0e:ee:bf:8c:4a:af:db:94:b8:24:48:
                    65:76:3d:2e:a9:1e:7c:11:e0:97:26:c0:a6:81:ba:
                    46:46:59:67:6a:7b:82:01:ef:dd:43:b9:11:4f:0b:
                    ca:1d:e0:5d:1d:7c:3d:0a:df:0b:d9:67:ab:57:5c:
                    f4:dc:78:ad:47:2f:05:b8:2f:af:b9:33:33:18:6e:
                    9f:57:a9:7e:b1:b1:19:05:01:73:96:8b:c6:9e:81:
                    38:74:cc:7c:c4:ea:35:fa:07:a8:7b:46:d5:2d:ab:
                    e7:de:1b:a7:28:9e:60:7b:96:f1:88:23:82:30:9e:
                    51:67:aa:d7:5f:67:1c:0b:06:af:88:4c:27:65:7c:
                    fd:43:ee:4a:88:3b:d4:38:3a:e6:f1:4a:f4:27:04:
                    8f:62:4e:26:1a:54:9e:3d:91:7e:a5:4a:e4:63:e0:
                    2b:b6:29:db:df:22:d0:09:be:13:f7:37:02:6d:cd:
                    db:4d:68:84:b7:78:bc:ed:94:61:d1:f7:b1:75:7e:
                    de:ee:1b:ca:45:f9:a8:8f:44:97:95:4b:83:cf:85:
                    2a:7e:6b:a7:99:f2:12:18:44:16:0f:e3:4e:a9:46:
                    e7:13:82:47:dd:11:26:53:ce:08:96:d4:ce:c1:00:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2D:2C:7F:EE:FB:97:A7:17:C4:A9:AD:D1:59:76:5E:01:DB:89:9A
            X509v3 Authority Key Identifier:
                keyid:81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135382e302f32342d3234203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:ba:56:84:f4:d5:28:3f:02:0e:71:e6:ea:50:a5:c0:9f:60:
         21:ae:6e:10:9c:56:65:ab:03:76:bb:54:0b:3d:a8:a1:d9:1f:
         d8:a7:64:03:24:52:f6:9b:12:c0:b6:82:c2:d9:7e:4b:15:d4:
         ef:79:5c:c5:3e:ef:70:c6:1c:ba:6d:6c:55:30:30:8e:07:69:
         f2:33:de:41:69:53:9f:f4:72:79:99:c1:92:31:67:f6:06:d7:
         a9:a8:42:a5:c0:4d:23:d8:10:1e:c0:4c:0c:c5:24:dd:f6:34:
         d7:c9:9f:ba:72:8d:b0:6d:2e:54:47:c3:23:37:0e:c9:f2:4a:
         e6:8d:d8:1f:18:eb:ae:52:01:8d:6f:5f:78:9a:d9:5c:54:9e:
         36:6c:4e:a7:ff:74:ac:e4:90:a2:a5:f9:50:6a:61:00:25:58:
         31:5c:e1:20:2a:43:48:3c:7f:ef:e6:d8:9a:11:59:96:66:d3:
         ad:e2:ed:c8:2d:f9:c6:51:86:7a:6a:b8:5b:9b:b7:84:c0:1b:
         81:aa:3b:76:8c:66:45:cf:d0:da:f5:de:12:51:84:99:24:8e:
         c3:4a:37:c7:4c:14:ff:4e:18:e1:31:8f:ed:c3:b1:ba:a4:f7:
         fb:cf:7d:d3:8b:51:22:ef:0d:45:6e:5b:a9:69:04:48:37:38:
         09:05:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:10 2025 by rpki-client