Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa
File:                     34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa (raw, json)
Hash identifier:          Ad9zqCn2ulaS8OHXVkfecN2kCsq6/NwoTnfLSTKQyGA=
Subject key identifier:   34:61:25:79:C0:36:1F:AF:2C:9E:2A:59:FA:31:CC:71:45:49:0B:73
Certificate issuer:       /CN=C48F9D371DFEA1B18BDE20A84C319A09510281E0
Certificate serial:       580D15093CAE956E1F18B4B5F1CB0F81C49D6B5D
Authority key identifier: C4:8F:9D:37:1D:FE:A1:B1:8B:DE:20:A8:4C:31:9A:09:51:02:81:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa
Signing time:             Wed 17 May 2023 00:36:51 +0000
ROA not before:           Wed 17 May 2023 00:31:51 +0000
ROA not after:            Wed 15 May 2024 00:36:51 +0000
asID:                     267168
IP address blocks:        45.230.132.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0d:15:09:3c:ae:95:6e:1f:18:b4:b5:f1:cb:0f:81:c4:9d:6b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48F9D371DFEA1B18BDE20A84C319A09510281E0
        Validity
            Not Before: May 17 00:31:51 2023 GMT
            Not After : May 15 00:36:51 2024 GMT
        Subject: CN=34612579C0361FAF2C9E2A59FA31CC7145490B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:fe:1e:56:29:b6:17:39:10:1a:97:9c:2a:
                    e0:71:54:13:34:28:3a:cb:45:3f:dd:9b:1b:1b:be:
                    ba:4c:c6:44:2f:54:9c:dc:c9:c4:2c:6f:43:e6:05:
                    28:5a:08:42:e9:c1:2f:ab:74:34:49:e2:c9:d8:cc:
                    e9:51:9c:1e:86:50:59:48:f0:2f:09:39:d2:6a:2d:
                    42:aa:68:fa:35:14:5f:ba:5c:d5:e9:91:ea:c7:d8:
                    3f:9e:0c:14:a6:5f:6f:4c:1d:36:da:0e:c2:e3:e5:
                    10:c7:06:a7:bf:2f:45:03:f8:f8:47:41:21:da:5d:
                    d9:f6:9e:15:c2:f9:77:08:3a:d2:1b:03:10:59:e9:
                    0c:5f:9d:4d:05:de:14:58:03:36:b9:27:27:59:f4:
                    22:e1:06:f3:ce:39:96:24:ac:62:56:8e:c2:ac:51:
                    9b:3e:38:be:08:5d:0f:d7:2b:3d:4e:a9:e4:63:09:
                    7e:e8:f2:b3:f4:46:48:bc:6a:60:27:42:13:a5:2a:
                    2a:f0:62:dd:ad:db:64:3d:79:d0:c1:1f:3e:bb:de:
                    13:07:13:c0:4a:91:09:eb:3d:b0:a7:09:7e:61:30:
                    c2:51:98:11:b4:ce:57:c3:cf:fc:c0:3a:98:ef:71:
                    57:ed:90:f3:01:a5:d1:d7:2d:13:a8:03:2b:5d:89:
                    c5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:61:25:79:C0:36:1F:AF:2C:9E:2A:59:FA:31:CC:71:45:49:0B:73
            X509v3 Authority Key Identifier:
                keyid:C4:8F:9D:37:1D:FE:A1:B1:8B:DE:20:A8:4C:31:9A:09:51:02:81:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C48F9D371DFEA1B18BDE20A84C319A09510281E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/34352e3233302e3133322e302f32322d3234203d3e20323637313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:84:8c:49:c3:cb:76:e5:02:75:15:ab:a0:88:c9:d3:af:69:
         36:95:13:c7:e2:ca:e7:41:d1:be:50:eb:1f:6b:ae:80:a4:06:
         b1:2e:7e:4f:d5:4f:41:7c:6f:d4:7f:87:a2:6d:63:96:9d:1d:
         7d:74:f8:e1:f9:f4:7a:32:65:b5:44:15:8c:42:5d:c2:7c:f8:
         6d:61:26:33:45:00:fe:6a:72:4a:e5:05:2b:17:90:d7:59:5f:
         d7:64:29:5b:e6:c5:5b:8f:6a:5e:69:38:6d:03:61:84:81:27:
         92:11:2e:62:59:b2:d3:69:4b:42:96:e0:5d:9d:83:26:c1:f8:
         41:31:e6:4f:ac:66:3d:13:96:53:7b:4b:ce:5a:03:9e:c6:01:
         21:a3:98:2c:c1:ec:cb:7e:37:50:24:f9:1c:c8:10:c2:a5:4c:
         56:98:68:a2:17:83:87:af:5b:aa:7a:64:d4:3f:f4:31:ad:96:
         80:9d:8f:7b:ff:59:6c:f9:ac:b3:d4:7a:45:e6:cc:66:17:27:
         34:91:8d:7b:82:5d:be:8f:36:e2:c7:fb:d3:3d:2c:b0:76:a9:
         a6:20:13:5d:48:68:c4:fe:6c:c2:b7:82:12:ff:50:4a:ef:52:
         09:35:3d:48:4b:86:2e:c0:fa:21:e2:31:55:0e:db:e9:c0:3b:
         06:16:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:47 2025 by rpki-client