Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/34352e3138312e3134322e302f32332d3233203d3e20323639313837.roa
File:                     34352e3138312e3134322e302f32332d3233203d3e20323639313837.roa (raw, json)
Hash identifier:          hw4cA7T3gTNWRMWxyxUi9ll+Ejz8jKE+sT/Hi/5k9Ag=
Subject key identifier:   5B:96:65:C4:8D:2F:F2:E3:ED:2E:B0:FA:8E:7D:E9:B7:E3:FA:A3:43
Certificate issuer:       /CN=9E96B8CD86EF2E06683517F0D4D8D96E4F76F2F6
Certificate serial:       53566EA2AD04CC3660382DBF06DEF8A0536AC528
Authority key identifier: 9E:96:B8:CD:86:EF:2E:06:68:35:17:F0:D4:D8:D9:6E:4F:76:F2:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E96B8CD86EF2E06683517F0D4D8D96E4F76F2F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/34352e3138312e3134322e302f32332d3233203d3e20323639313837.roa
Signing time:             Fri 22 Dec 2023 21:05:28 +0000
ROA not before:           Fri 22 Dec 2023 21:00:28 +0000
ROA not after:            Fri 20 Dec 2024 21:05:28 +0000
asID:                     269187
IP address blocks:        45.181.142.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:56:6e:a2:ad:04:cc:36:60:38:2d:bf:06:de:f8:a0:53:6a:c5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E96B8CD86EF2E06683517F0D4D8D96E4F76F2F6
        Validity
            Not Before: Dec 22 21:00:28 2023 GMT
            Not After : Dec 20 21:05:28 2024 GMT
        Subject: CN=5B9665C48D2FF2E3ED2EB0FA8E7DE9B7E3FAA343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:3f:b2:b7:33:ee:f9:ad:15:7f:3b:48:35:d6:
                    cd:a8:a3:63:f0:30:62:0c:8e:b0:ad:8f:cd:9f:64:
                    c7:da:db:8b:b4:61:2d:07:ca:74:79:1b:cf:1b:f9:
                    8c:30:7e:be:ed:cb:60:4a:80:11:ef:62:f6:77:0e:
                    c2:77:f1:e7:7c:d2:3d:ad:f4:d9:a7:2d:7b:bc:53:
                    63:30:1a:65:0c:5d:2a:a7:b8:89:b7:d7:69:06:cc:
                    89:e1:f4:93:a5:6e:f5:e6:e0:4d:19:c3:b2:12:c9:
                    76:21:f4:de:e8:5f:8c:24:9d:f1:1e:6d:f0:60:5e:
                    71:0f:81:a0:3b:b6:0c:f3:b2:bc:43:f4:d6:7b:a7:
                    72:0b:00:35:ce:5f:3e:e1:af:63:03:32:dc:df:d8:
                    ae:10:5f:ac:2e:19:27:5b:68:10:df:63:10:a4:a8:
                    95:d9:42:4c:6e:15:f9:f2:3f:10:4d:1a:f7:2e:f7:
                    13:3f:9c:b4:68:51:c9:eb:58:33:f0:2b:be:3d:fb:
                    0b:90:8d:b5:3c:27:38:ca:41:62:6f:19:5a:9d:01:
                    0f:bb:e3:52:1c:a4:ab:b8:1a:b8:45:e2:14:0c:66:
                    1f:fe:10:00:25:ae:d7:88:e7:19:af:42:64:60:1d:
                    d3:1b:1a:87:0e:a9:d0:3f:36:33:51:84:cf:21:9a:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:96:65:C4:8D:2F:F2:E3:ED:2E:B0:FA:8E:7D:E9:B7:E3:FA:A3:43
            X509v3 Authority Key Identifier:
                keyid:9E:96:B8:CD:86:EF:2E:06:68:35:17:F0:D4:D8:D9:6E:4F:76:F2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/9E96B8CD86EF2E06683517F0D4D8D96E4F76F2F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E96B8CD86EF2E06683517F0D4D8D96E4F76F2F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/34352e3138312e3134322e302f32332d3233203d3e20323639313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:70:eb:98:93:c8:f9:4f:4a:80:b6:a7:cd:71:10:1f:3d:02:
         31:c4:17:69:57:32:38:33:72:8c:70:ac:17:cd:95:6f:e0:11:
         bf:02:8f:44:90:15:3b:fc:09:3c:e1:80:9d:b0:79:8b:19:f8:
         8b:2d:0b:f8:f8:8c:e7:45:c1:36:1b:f3:df:32:f5:1c:20:b9:
         d6:70:17:75:53:0c:9a:07:c5:e9:06:f0:d6:0a:45:06:8d:86:
         cf:e3:98:d1:fd:cd:0d:1a:ab:eb:b1:6f:73:3b:07:77:63:65:
         4d:b8:bf:ee:36:a1:3c:aa:cf:65:9c:69:ee:8e:34:45:15:3a:
         65:bb:6f:ae:a1:d3:ac:c5:32:04:00:31:17:5f:b7:9e:1d:95:
         ce:0c:a8:d4:41:8d:e7:dc:b8:e5:15:6c:d8:58:2e:13:1a:d0:
         13:7a:45:44:fe:f3:ac:9c:8d:2f:97:f6:e7:e7:41:5a:93:c5:
         2a:17:69:da:30:e6:55:26:c3:59:85:dd:89:21:df:91:92:5c:
         73:a2:1a:31:54:a0:09:d9:d2:36:f3:af:b1:e9:66:58:6f:f1:
         78:2a:0a:01:03:99:23:e3:dc:ad:17:ff:53:4d:57:00:49:81:
         aa:b2:e4:b0:08:1f:18:59:90:2d:3e:8c:97:3e:d1:ee:a1:1e:
         09:cb:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:51:16 2025 by rpki-client