Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BYMU7yLFwDS6uAehGrakw31dwV6pZ1hmos3gDM61NNjz/0/34352e37312e3233322e302f32322d3232203d3e20323637363332.roa
File:                     34352e37312e3233322e302f32322d3232203d3e20323637363332.roa (raw, json)
Hash identifier:          T2SPdTn1l4sjJbLCbCMCzrWDRQ0YLf/zx0GR1gxc2LA=
Subject key identifier:   38:F3:2D:41:87:A4:10:B3:F1:C0:67:3B:D9:57:30:59:D4:B0:EE:BF
Certificate issuer:       /CN=B6EC6D95D54B56872143B9FC71CE9D4A6308F7F3
Certificate serial:       4C76DD1D9767148102F91D10E3DF13EADF2B109E
Authority key identifier: B6:EC:6D:95:D5:4B:56:87:21:43:B9:FC:71:CE:9D:4A:63:08:F7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6EC6D95D54B56872143B9FC71CE9D4A6308F7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BYMU7yLFwDS6uAehGrakw31dwV6pZ1hmos3gDM61NNjz/0/34352e37312e3233322e302f32322d3232203d3e20323637363332.roa
Signing time:             Wed 21 Jun 2023 13:58:42 +0000
ROA not before:           Wed 21 Jun 2023 13:53:42 +0000
ROA not after:            Wed 19 Jun 2024 13:58:42 +0000
asID:                     267632
IP address blocks:        45.71.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:76:dd:1d:97:67:14:81:02:f9:1d:10:e3:df:13:ea:df:2b:10:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EC6D95D54B56872143B9FC71CE9D4A6308F7F3
        Validity
            Not Before: Jun 21 13:53:42 2023 GMT
            Not After : Jun 19 13:58:42 2024 GMT
        Subject: CN=38F32D4187A410B3F1C0673BD9573059D4B0EEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:18:71:4b:01:b7:ab:7b:c4:f4:e3:af:a7:
                    db:1f:32:4d:29:27:52:8d:f6:2a:3b:b9:b3:d6:d3:
                    79:c4:a3:84:dd:7b:c7:13:1c:f1:d1:42:ab:1a:d5:
                    ce:cc:36:8d:71:c4:33:b9:06:fb:5b:25:91:2c:e5:
                    f3:0b:18:7c:ac:f1:e6:89:2e:85:92:4a:d6:42:9e:
                    81:73:17:34:32:86:0a:d9:4f:eb:94:30:5e:4a:3e:
                    9d:61:1d:09:2a:28:57:85:c0:0a:83:86:d8:fe:3a:
                    0e:f6:7f:85:de:8a:68:d9:2d:6e:4e:f2:a9:c7:7c:
                    f9:33:61:72:37:49:d0:a4:17:22:4d:a2:d4:96:5d:
                    fc:d0:c5:42:b6:0c:a0:33:85:a1:15:57:11:93:bf:
                    9f:df:14:9f:bd:e4:c7:f4:33:b9:ee:d5:55:fc:40:
                    bd:86:0c:c1:6e:5f:b7:44:98:d8:7f:4e:b1:51:f1:
                    1f:48:53:5d:bb:8c:d2:9d:5c:bf:4f:97:fe:0a:79:
                    16:31:31:ad:f7:ac:d5:52:09:85:c3:d3:dc:da:18:
                    16:1b:0d:e0:7e:61:38:99:1a:f5:06:d4:c8:59:9d:
                    33:26:b0:84:b8:97:1b:02:35:ad:b5:75:eb:fa:10:
                    73:22:95:01:21:1c:36:95:5d:10:14:b6:f1:d4:c1:
                    80:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F3:2D:41:87:A4:10:B3:F1:C0:67:3B:D9:57:30:59:D4:B0:EE:BF
            X509v3 Authority Key Identifier:
                keyid:B6:EC:6D:95:D5:4B:56:87:21:43:B9:FC:71:CE:9D:4A:63:08:F7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BYMU7yLFwDS6uAehGrakw31dwV6pZ1hmos3gDM61NNjz/0/B6EC6D95D54B56872143B9FC71CE9D4A6308F7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6EC6D95D54B56872143B9FC71CE9D4A6308F7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYMU7yLFwDS6uAehGrakw31dwV6pZ1hmos3gDM61NNjz/0/34352e37312e3233322e302f32322d3232203d3e20323637363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:24:c3:e1:4f:89:3e:4c:3c:f1:ec:4b:ea:c7:64:33:4e:a6:
         a5:d0:16:23:a5:fe:1c:94:0f:c7:a4:cb:65:ea:83:25:5c:d0:
         22:e3:ba:65:25:9b:23:98:fc:ec:e2:cc:89:7b:7e:48:26:0c:
         32:6b:69:c5:b5:da:1b:b2:50:a8:33:0a:47:a8:a0:cd:5f:0a:
         f7:fe:28:74:b1:7e:7f:f5:93:b1:bc:97:06:2d:b3:dc:b2:31:
         53:e8:5e:c8:09:76:d7:f6:6f:0c:57:d1:d4:b4:91:3d:5b:34:
         b4:84:bc:48:97:d0:11:58:dd:04:14:88:85:a3:4d:ff:fa:cc:
         5f:72:ab:64:78:4e:18:71:ba:58:5d:cd:77:8f:60:5b:48:79:
         a0:da:89:df:3a:41:b5:58:21:fb:cc:1a:07:a2:d0:dd:b9:87:
         15:b2:5f:43:88:3f:c7:7d:45:90:0d:75:e7:c7:12:a6:b5:0f:
         68:93:20:b3:c1:cc:fc:fb:52:fb:98:de:29:6c:da:54:4d:74:
         e5:05:fb:e6:30:73:d3:a9:d0:e3:22:f6:39:cb:f6:cd:a6:54:
         9f:1a:ac:7b:0c:11:c7:9a:d7:81:10:d6:4b:72:6a:b2:11:5d:
         82:3f:ce:f7:87:ea:14:52:47:bc:f7:60:c5:25:66:a6:21:3f:
         f8:ca:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:41 2025 by rpki-client