Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e352e302f32342d3234203d3e20323637323338.roa
File:                     34352e3233322e352e302f32342d3234203d3e20323637323338.roa (raw, json)
Hash identifier:          HUBOH7tlKdfvfKQd9MKPIT5CMoEaac0WjwaoxzKkFXQ=
Subject key identifier:   DD:05:75:69:12:C0:B6:A6:72:39:92:A2:12:E0:AB:A8:75:B5:A6:B8
Certificate issuer:       /CN=126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9
Certificate serial:       21B515C2CA0C9D6B9A7194B7E53EE8544BF66AD7
Authority key identifier: 12:6E:BC:CB:39:E7:A8:71:3E:59:A6:7E:00:D6:B9:61:9F:D9:EF:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e352e302f32342d3234203d3e20323637323338.roa
Signing time:             Mon 19 Sep 2022 15:49:58 +0000
ROA not before:           Mon 19 Sep 2022 15:44:58 +0000
ROA not after:            Mon 18 Sep 2023 15:49:58 +0000
asID:                     267238
IP address blocks:        45.232.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b5:15:c2:ca:0c:9d:6b:9a:71:94:b7:e5:3e:e8:54:4b:f6:6a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9
        Validity
            Not Before: Sep 19 15:44:58 2022 GMT
            Not After : Sep 18 15:49:58 2023 GMT
        Subject: CN=DD05756912C0B6A6723992A212E0ABA875B5A6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b7:b0:b7:2c:1b:ea:2c:84:99:6b:00:fc:47:
                    0e:b0:d5:ac:a5:43:db:bd:35:f2:e7:7b:57:66:c1:
                    7e:ef:4e:16:f8:ed:bf:23:2c:19:11:df:e1:95:0c:
                    39:a7:a1:2f:35:8c:1f:36:05:77:ab:99:cc:00:d3:
                    7a:8b:77:f4:0d:d4:60:d7:f8:8e:0c:5a:93:45:33:
                    59:7d:96:35:84:95:fd:44:dd:e6:c1:97:81:91:4f:
                    3e:8a:64:a4:1d:c3:50:69:ae:9f:5d:09:96:aa:4e:
                    b1:2d:f1:5a:09:2c:e1:25:f0:34:34:0a:83:cd:f3:
                    ba:d6:b9:e5:6e:7b:c0:49:98:8b:aa:a8:ad:dc:99:
                    c3:65:ee:ad:80:45:a2:55:66:25:8d:30:93:ae:2d:
                    2f:c2:ca:d8:5e:f8:a7:0c:11:a7:a4:34:74:b8:c1:
                    ab:8b:f9:91:b7:2b:86:0a:9c:84:a9:5a:7b:f4:bc:
                    f3:6f:28:db:de:b3:c0:d4:73:0a:b4:45:00:5e:f4:
                    8b:c1:6d:74:82:5c:50:f3:86:9b:f5:fc:f9:08:ff:
                    08:34:9c:6d:44:ff:2d:38:6f:eb:b1:2f:b5:28:9d:
                    11:4b:08:36:ab:29:db:39:4a:80:43:75:29:34:ac:
                    7d:08:30:d9:94:bd:73:fa:d0:00:04:ce:32:5f:2e:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:05:75:69:12:C0:B6:A6:72:39:92:A2:12:E0:AB:A8:75:B5:A6:B8
            X509v3 Authority Key Identifier:
                keyid:12:6E:BC:CB:39:E7:A8:71:3E:59:A6:7E:00:D6:B9:61:9F:D9:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e352e302f32342d3234203d3e20323637323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:b3:f8:df:dc:68:71:30:57:12:13:37:f7:84:83:61:bc:6c:
         2f:ee:53:17:23:5f:f2:33:21:f3:db:3b:48:e6:1a:71:8c:f6:
         b9:7c:eb:4b:5a:a8:37:94:7d:74:70:08:e0:3e:06:31:04:a8:
         a0:de:01:ce:37:38:23:07:4f:81:90:d2:77:c2:fd:5d:99:92:
         09:ee:b0:39:ba:32:49:da:74:a6:d6:5f:69:18:1b:2e:c1:f8:
         3a:cd:24:17:32:58:98:49:76:07:69:f9:04:4b:e0:b2:a2:3a:
         6a:07:9a:43:e2:75:ee:63:1a:72:1a:3c:58:8f:3f:11:11:2a:
         2d:17:16:21:9d:12:a1:2a:d0:5d:c7:cb:30:24:f6:9d:dd:66:
         cf:cd:f4:7e:42:4e:e0:89:82:46:4f:b7:85:54:47:7e:76:6b:
         d4:ae:da:c7:9d:52:5a:ac:73:15:7b:79:f0:86:cf:e7:8c:a4:
         57:76:91:2a:54:fc:da:48:bc:2e:0e:50:14:9a:25:e7:8e:dc:
         af:24:25:fe:9f:a0:69:64:8c:27:0c:d5:16:7b:c8:bc:46:72:
         bf:26:84:ae:35:33:19:ca:0b:44:18:47:95:7b:ef:5f:d2:a0:
         ce:a2:22:56:7d:d9:f1:8f:82:3f:ca:eb:19:69:7b:3a:06:a3:
         a0:c8:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:14:10 2025 by rpki-client