Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32332d3233203d3e20323637323338.roa
File:                     34352e3233322e342e302f32332d3233203d3e20323637323338.roa (raw, json)
Hash identifier:          DPAqQx3s0GR0x9PnNz1R1bCzNxM6KgF6WetGivXvpp0=
Subject key identifier:   2C:B5:F8:0D:4C:2C:19:97:EB:86:0C:3C:5D:AA:F8:9C:09:A0:6F:40
Certificate issuer:       /CN=126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9
Certificate serial:       0204A1EDC21085CF2DB4FBB444E2F2B75CBB0E73
Authority key identifier: 12:6E:BC:CB:39:E7:A8:71:3E:59:A6:7E:00:D6:B9:61:9F:D9:EF:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32332d3233203d3e20323637323338.roa
Signing time:             Mon 19 Sep 2022 15:49:50 +0000
ROA not before:           Mon 19 Sep 2022 15:44:50 +0000
ROA not after:            Mon 18 Sep 2023 15:49:50 +0000
asID:                     267238
IP address blocks:        45.232.4.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:04:a1:ed:c2:10:85:cf:2d:b4:fb:b4:44:e2:f2:b7:5c:bb:0e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9
        Validity
            Not Before: Sep 19 15:44:50 2022 GMT
            Not After : Sep 18 15:49:50 2023 GMT
        Subject: CN=2CB5F80D4C2C1997EB860C3C5DAAF89C09A06F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:d8:27:a5:db:fb:30:c6:23:9b:12:b2:88:
                    54:ea:ac:bc:2e:a5:45:9e:62:6a:64:7f:cb:a6:aa:
                    1c:2d:84:8d:38:1b:fa:d1:35:34:e3:05:08:a8:26:
                    ce:05:4d:89:c2:8e:14:d7:cc:10:43:ee:0e:82:72:
                    91:dc:53:f7:16:29:1a:59:0d:0f:a2:76:b4:1a:d0:
                    9a:2b:cb:98:6c:9c:5d:18:be:d1:20:b7:ad:19:36:
                    8b:0d:10:8e:bb:4d:ec:ed:45:af:61:ed:9a:ff:a6:
                    52:a1:ac:7a:b9:49:b9:39:6f:8a:71:44:eb:a0:37:
                    66:58:5b:b6:42:db:09:12:33:31:da:fc:79:03:c3:
                    32:d1:e2:c4:d1:6a:d0:85:15:69:26:0c:7d:a9:93:
                    a3:ee:11:95:84:f5:63:52:da:eb:38:03:3a:23:70:
                    04:8f:77:eb:27:63:ab:f6:1d:4a:ec:22:47:65:f2:
                    24:42:ad:2b:23:47:63:7d:59:45:27:48:60:00:ad:
                    ac:c6:be:31:2c:17:07:4b:50:fa:fe:79:5d:d7:04:
                    7e:bf:e9:8e:b9:64:c4:9c:07:70:8b:e5:fc:a8:bf:
                    29:e6:45:ad:03:55:b9:56:61:74:f8:af:22:12:fb:
                    7a:8d:46:d6:35:c4:79:a6:25:89:53:88:2a:ca:32:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B5:F8:0D:4C:2C:19:97:EB:86:0C:3C:5D:AA:F8:9C:09:A0:6F:40
            X509v3 Authority Key Identifier:
                keyid:12:6E:BC:CB:39:E7:A8:71:3E:59:A6:7E:00:D6:B9:61:9F:D9:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32332d3233203d3e20323637323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:cd:9b:fe:a7:73:4b:52:47:42:71:75:9d:0a:ce:c4:76:d5:
         7d:cb:70:1f:6c:03:16:b4:58:45:96:a6:71:a7:9e:b5:86:2c:
         c5:6e:75:56:f6:3d:af:03:98:1f:75:0a:00:7f:f6:b3:56:ca:
         34:73:8a:49:af:70:70:97:bb:a2:f2:a1:88:71:46:ba:23:07:
         c0:f2:0d:20:26:dd:85:60:a9:77:75:8a:70:b3:b7:9e:15:8c:
         b5:41:1c:42:ea:8d:80:6b:bd:b4:3a:83:c6:25:1a:d0:a5:04:
         32:fc:f6:be:8e:c7:7d:1f:a0:77:e3:0f:7d:70:d6:6f:8a:e7:
         b8:e8:96:16:21:d7:b4:9b:ee:dc:ef:fe:36:20:af:6b:a4:f4:
         40:fb:e0:94:6f:c6:d6:b0:7b:04:84:3f:a5:9f:cb:aa:ed:53:
         bb:2f:98:86:bd:8d:c9:a2:7d:ce:21:b0:c7:46:e9:fa:3d:ab:
         10:29:d6:13:10:88:ff:ca:d6:de:c8:d4:ad:4e:2e:e3:20:26:
         64:d8:3d:dd:28:66:b2:30:43:e7:a4:b7:18:b7:b1:0e:0c:e6:
         3a:7a:f4:f5:29:21:9b:1c:2c:07:53:38:8b:72:c8:37:c8:80:
         c9:50:51:00:bd:1b:3e:1d:87:42:ed:6c:dd:f0:82:72:2c:82:
         aa:7a:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:33 2025 by rpki-client