Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3231312e302f32342d3234203d3e20323637333339.roa
File:                     34352e3233332e3231312e302f32342d3234203d3e20323637333339.roa (raw, json)
Hash identifier:          CugvPVSIwTQTk/8zsFxYE03O6148hkL5wcwQksG8Xkg=
Subject key identifier:   7C:D9:AE:7B:BF:61:7F:0B:27:D1:41:38:AF:7B:71:EF:B3:A6:FB:F4
Certificate issuer:       /CN=A09087E55846274477AB0E4597FD754DB0509203
Certificate serial:       61ECA0E2B6958DE3586147B429768A23DF87C7E5
Authority key identifier: A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3231312e302f32342d3234203d3e20323637333339.roa
Signing time:             Sun 09 Jul 2023 04:09:03 +0000
ROA not before:           Sun 09 Jul 2023 04:04:03 +0000
ROA not after:            Sun 07 Jul 2024 04:09:03 +0000
asID:                     267339
IP address blocks:        45.233.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ec:a0:e2:b6:95:8d:e3:58:61:47:b4:29:76:8a:23:df:87:c7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09087E55846274477AB0E4597FD754DB0509203
        Validity
            Not Before: Jul  9 04:04:03 2023 GMT
            Not After : Jul  7 04:09:03 2024 GMT
        Subject: CN=7CD9AE7BBF617F0B27D14138AF7B71EFB3A6FBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:25:08:54:3e:06:df:be:ac:02:51:c0:ae:
                    91:a9:34:8a:40:d0:38:4a:29:72:f0:24:f6:97:a1:
                    35:53:41:0b:9e:3b:fb:93:fe:c2:e0:b1:20:dc:fe:
                    92:d5:31:99:36:61:42:7d:9a:8a:75:f2:63:ab:cb:
                    94:70:14:81:ee:3b:38:30:b7:f6:08:6d:b8:41:12:
                    07:a3:b9:8d:23:f5:3a:14:f2:18:61:6d:b3:f8:68:
                    50:0f:9b:f0:eb:90:66:6d:c2:67:a2:2b:77:39:9d:
                    cc:fa:0a:23:9f:00:03:f0:1b:f3:9a:d3:c4:32:d3:
                    96:ed:8c:e9:c9:89:00:38:25:89:23:2f:2c:b8:57:
                    8c:01:73:18:f5:1a:8d:34:04:61:e3:d1:37:8e:29:
                    4f:7c:7b:c1:e8:df:fc:7b:92:01:d0:7f:70:03:7a:
                    21:ae:b9:82:1e:b6:f5:37:30:3b:b5:ab:ca:d2:6d:
                    5b:1e:23:fd:8f:47:e2:6e:84:a5:bd:c4:c9:43:33:
                    c4:bb:37:c3:9c:3c:e2:42:c4:a9:77:4e:40:e2:81:
                    8b:26:7b:7b:1b:34:25:89:87:3a:9e:af:1b:e3:f1:
                    28:f1:8a:4f:70:8a:c6:cd:24:16:fb:f2:42:50:03:
                    bc:ff:d5:d5:82:2d:bf:ce:df:2a:28:6a:b4:3f:b4:
                    a9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D9:AE:7B:BF:61:7F:0B:27:D1:41:38:AF:7B:71:EF:B3:A6:FB:F4
            X509v3 Authority Key Identifier:
                keyid:A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/A09087E55846274477AB0E4597FD754DB0509203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3231312e302f32342d3234203d3e20323637333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:b3:f0:9b:43:de:99:ab:92:3b:7f:2d:2e:a9:c4:70:f5:bc:
         a7:a9:50:9a:51:cb:4d:79:7d:64:bb:d0:84:c7:cd:1a:37:f3:
         94:eb:14:c2:7b:76:10:5b:52:47:46:15:60:80:44:37:92:10:
         a9:b3:56:03:52:d5:b2:d2:8d:9a:8d:d9:00:8f:2f:fc:56:2d:
         11:04:e5:63:b5:e6:3c:3e:f6:db:d7:3b:0f:b9:7d:3b:f4:42:
         43:dc:98:08:fb:d7:3b:a0:75:d1:57:ba:f5:f8:e7:ad:1d:29:
         2a:6c:41:4d:d6:41:6f:76:27:5b:92:d2:ab:5d:82:1c:cd:ae:
         0e:18:36:59:c8:7a:a5:fb:bd:88:b7:56:1f:b0:55:89:9b:40:
         af:9e:38:dd:80:59:e7:b7:f5:fd:08:fd:c1:a6:8e:31:a1:f3:
         48:12:34:e8:db:a5:de:80:2e:32:1d:ff:f5:fa:0b:1a:89:f5:
         d8:a4:d3:96:e1:e5:04:e9:b3:58:ca:64:e9:84:47:75:15:c9:
         2d:c1:31:5a:58:cb:9a:6b:ac:5a:8a:36:13:13:62:c7:73:c6:
         da:1b:ea:29:03:01:40:e1:c1:de:70:8f:30:0d:24:b8:5b:d8:
         eb:f2:35:92:e9:12:73:6f:b5:1d:30:b3:a2:a9:9d:63:2c:57:
         ba:2e:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:26 2025 by rpki-client