Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33382e302f32332d3234203d3e20323636313532.roa
File:                     34352e362e33382e302f32332d3234203d3e20323636313532.roa (raw, json)
Hash identifier:          1afspvPQPqqlglLXLjPoWhXtk8nEjSTkrwFsQKyh+YQ=
Subject key identifier:   E0:A7:77:DE:A4:3E:1F:57:B5:DB:C9:BE:23:14:34:54:D1:8E:88:D1
Certificate issuer:       /CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
Certificate serial:       1C58C990701B26EE39102D80062C9EB8E2565C5A
Authority key identifier: BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33382e302f32332d3234203d3e20323636313532.roa
Signing time:             Wed 01 Mar 2023 19:20:49 +0000
ROA not before:           Wed 01 Mar 2023 19:15:49 +0000
ROA not after:            Wed 28 Feb 2024 19:20:49 +0000
asID:                     266152
IP address blocks:        45.6.38.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:58:c9:90:70:1b:26:ee:39:10:2d:80:06:2c:9e:b8:e2:56:5c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF741951CE72820C5CAEB22CA5BEBFBC47F41278
        Validity
            Not Before: Mar  1 19:15:49 2023 GMT
            Not After : Feb 28 19:20:49 2024 GMT
        Subject: CN=E0A777DEA43E1F57B5DBC9BE23143454D18E88D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:d9:21:7f:fb:7c:e2:5b:3f:68:77:db:b2:
                    89:29:04:71:c7:c0:29:28:c6:fa:5c:b8:a9:9a:a9:
                    76:55:7a:06:61:7f:1f:e5:37:d7:27:3c:14:ae:2f:
                    c6:04:bd:03:c5:7f:93:b2:a8:c1:fb:13:bb:61:14:
                    6e:49:a7:2e:a4:ee:06:41:a3:ba:e2:fc:d7:86:66:
                    cd:2c:2e:a1:94:eb:4d:0a:7a:48:57:13:a4:72:41:
                    c0:03:2e:0e:4e:bd:15:89:21:6d:42:bf:c2:8d:7e:
                    98:06:da:4e:b8:dd:a5:8d:00:de:67:66:8b:0c:1b:
                    d7:bc:d9:5e:da:d6:de:13:48:c0:36:64:35:02:79:
                    48:f5:e9:99:53:2e:69:e1:41:0f:b5:e9:ee:cb:5e:
                    06:f9:68:9c:1c:ad:e3:79:f6:2a:c2:e5:b6:0a:18:
                    7d:9c:71:3f:9c:76:00:58:02:08:e9:3b:88:42:eb:
                    1e:ec:f1:bb:57:7e:b8:47:d3:cc:58:e9:40:fb:36:
                    6f:ee:cb:4e:55:da:0e:9b:c4:c6:ef:0d:b9:2b:05:
                    f9:5e:db:8d:d1:55:ee:24:39:88:7a:73:90:b6:14:
                    db:67:17:64:6a:8f:ce:1b:e2:c2:c0:dc:7b:f8:06:
                    bb:c4:9b:4d:00:d9:c0:97:f5:46:22:81:d1:58:3c:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A7:77:DE:A4:3E:1F:57:B5:DB:C9:BE:23:14:34:54:D1:8E:88:D1
            X509v3 Authority Key Identifier:
                keyid:BF:74:19:51:CE:72:82:0C:5C:AE:B2:2C:A5:BE:BF:BC:47:F4:12:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF741951CE72820C5CAEB22CA5BEBFBC47F41278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/1/34352e362e33382e302f32332d3234203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:a6:d6:ff:05:66:45:7d:08:86:6e:45:46:a2:6d:8e:52:b2:
         c3:84:56:e5:35:13:c9:2e:7a:b1:e6:1d:49:eb:21:3e:d3:44:
         94:02:89:73:ab:30:74:ec:45:c3:e3:26:ba:6f:a7:33:e8:73:
         b4:f3:b7:4c:30:1f:ef:27:b0:32:e2:84:ee:b7:26:49:3c:81:
         3d:14:82:96:e5:a2:0c:01:c8:d6:c1:fa:ff:80:34:9c:aa:9e:
         92:15:5d:dd:b3:dd:44:d7:ff:f4:40:57:55:78:96:e9:45:4f:
         52:db:2e:fc:cc:62:2e:af:b1:d8:01:03:ef:9a:67:b1:c7:0d:
         03:41:4d:21:ee:69:ba:57:56:8c:a5:4e:ba:56:9c:2c:a4:5b:
         2c:f1:94:b9:fd:36:70:15:29:14:a6:c8:0d:5b:76:eb:bd:52:
         bc:be:92:63:cf:c8:0a:ac:c8:16:46:56:8c:2c:aa:49:b5:b9:
         c1:02:f9:76:64:e2:e0:47:69:4a:11:79:1c:86:5c:67:8b:b9:
         58:dd:82:f5:41:24:b0:de:92:5b:3e:c4:e2:bc:92:8b:2c:10:
         ff:05:77:12:16:d7:a2:0d:06:1d:df:3f:cf:9e:f2:4d:ff:b5:
         0a:c1:ca:19:3b:db:4a:33:27:8f:24:5e:a4:40:7c:3a:10:b3:
         29:a3:af:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 09:37:20 2025 by rpki-client