Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e362e302f32342d3234203d3e20323637323338.roa
File:                     34352e3233322e362e302f32342d3234203d3e20323637323338.roa (raw, json)
Hash identifier:          lrTZh6jIY1Mp03iWlGqydjc2a/A1tVTeqE0VZ3TK+GQ=
Subject key identifier:   BE:73:B2:88:11:93:31:7F:B1:A1:2B:28:E9:8F:D6:35:53:79:E3:C6
Certificate issuer:       /CN=126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9
Certificate serial:       2A6BED2CE1A65B9651279332DB5F8F57356F3161
Authority key identifier: 12:6E:BC:CB:39:E7:A8:71:3E:59:A6:7E:00:D6:B9:61:9F:D9:EF:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e362e302f32342d3234203d3e20323637323338.roa
Signing time:             Mon 19 Sep 2022 15:50:06 +0000
ROA not before:           Mon 19 Sep 2022 15:45:06 +0000
ROA not after:            Mon 18 Sep 2023 15:50:06 +0000
asID:                     267238
IP address blocks:        45.232.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6b:ed:2c:e1:a6:5b:96:51:27:93:32:db:5f:8f:57:35:6f:31:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9
        Validity
            Not Before: Sep 19 15:45:06 2022 GMT
            Not After : Sep 18 15:50:06 2023 GMT
        Subject: CN=BE73B2881193317FB1A12B28E98FD6355379E3C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a8:88:55:69:cc:c3:37:63:87:51:84:35:63:
                    0b:f3:10:7d:af:bf:0d:b3:be:63:cc:51:8e:e7:5e:
                    33:62:bd:73:5a:7f:7a:01:2c:98:49:4a:3f:81:b3:
                    11:5e:07:b9:eb:fb:07:4c:f4:49:c5:44:be:35:2a:
                    24:43:93:52:ca:62:ae:89:d7:00:79:a6:7c:ee:dc:
                    69:86:c8:db:9a:b4:59:e4:a1:9e:53:94:4a:e2:d2:
                    bf:4a:32:ea:68:ab:dc:8d:8d:b7:62:53:da:b4:6d:
                    6e:56:9c:f3:27:45:dd:89:c7:ff:e4:6c:0c:ac:7f:
                    68:82:65:6b:0e:7f:83:b9:10:f4:ef:6a:bc:05:8f:
                    44:b7:87:d1:39:8f:e5:a1:26:cc:b0:41:38:f5:47:
                    08:c2:84:81:5a:17:2a:06:26:eb:0e:82:5d:98:fc:
                    ca:e1:c7:43:5a:4b:ea:5e:65:f8:b6:ab:e0:18:d9:
                    4e:bb:18:bc:a8:75:4c:a2:02:5c:9d:d7:16:f5:bb:
                    dc:58:7b:a4:84:f0:a9:a9:5d:b8:5b:fb:7f:fc:05:
                    7a:84:4d:99:06:de:f5:26:7b:a6:a8:d7:fa:7d:ca:
                    de:df:1f:cb:ff:8a:72:52:7f:ce:3d:30:f3:ef:df:
                    5c:22:60:f2:32:3b:4b:c6:26:b8:c6:40:b8:a3:3f:
                    7a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:73:B2:88:11:93:31:7F:B1:A1:2B:28:E9:8F:D6:35:53:79:E3:C6
            X509v3 Authority Key Identifier:
                keyid:12:6E:BC:CB:39:E7:A8:71:3E:59:A6:7E:00:D6:B9:61:9F:D9:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126EBCCB39E7A8713E59A67E00D6B9619FD9EFA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e362e302f32342d3234203d3e20323637323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:98:39:6d:42:06:d2:e8:50:0b:3b:ae:87:32:91:9a:c0:03:
         93:35:0e:c0:50:06:91:8f:87:0f:df:32:67:1c:36:6d:ed:23:
         df:35:0e:58:45:be:07:31:d3:72:0e:31:e8:d7:aa:e4:83:8c:
         77:68:b7:e5:fb:c9:6d:7e:75:35:07:6c:38:85:d4:c5:8f:0e:
         66:ec:78:bb:89:36:53:f7:1c:f0:ef:c5:cf:5f:aa:16:a7:e2:
         99:82:94:18:20:95:81:49:99:7c:ee:77:12:9c:f4:ef:45:56:
         01:ee:43:af:b7:0e:b3:d9:ab:45:87:97:5c:77:34:e1:74:63:
         a0:e3:40:31:e6:01:e2:a1:bb:3f:5e:45:9f:38:ea:50:83:a7:
         94:9e:b2:83:d9:7f:57:4e:b1:4c:e9:7c:4b:b4:25:27:d2:d6:
         54:54:a7:92:92:6c:52:fc:ed:5e:17:9e:e6:40:6e:f0:0a:93:
         0b:a8:49:77:f7:3c:fb:3b:ab:d6:b8:c7:09:71:69:b1:7a:cc:
         4f:c9:8e:67:8a:19:2b:7a:6b:0f:1c:71:1e:65:2b:b7:86:78:
         2d:fe:50:16:a5:52:d5:23:0e:d7:f5:1c:95:ad:b5:a1:de:4d:
         a9:50:53:ac:e9:d8:d5:68:30:b1:a0:c6:91:bd:ee:ac:63:cc:
         bf:fb:a5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:45:36 2025 by rpki-client