Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35322e302f32342d3234203d3e20323632353039.roa
File:                     3136382e3132312e35322e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          fFPB5ybwDZrD7ji6j7mY/zz3MbHjp5UK2trAlnjvzmI=
Subject key identifier:   8A:1B:3A:17:19:6E:9C:43:72:19:4B:CF:0E:5D:2A:B3:89:02:78:29
Certificate issuer:       /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial:       F7B9B8E85214F6260362E975BDECF0B4E7DE69
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35322e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 23 Jan 2023 22:16:18 +0000
ROA not before:           Mon 23 Jan 2023 22:11:18 +0000
ROA not after:            Mon 22 Jan 2024 22:16:18 +0000
asID:                     262509
IP address blocks:        168.121.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f7:b9:b8:e8:52:14:f6:26:03:62:e9:75:bd:ec:f0:b4:e7:de:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
        Validity
            Not Before: Jan 23 22:11:18 2023 GMT
            Not After : Jan 22 22:16:18 2024 GMT
        Subject: CN=8A1B3A17196E9C4372194BCF0E5D2AB389027829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:17:a4:b5:5c:a2:fa:30:14:7f:f9:fa:ef:2e:
                    31:79:1c:4e:9d:c8:f7:4f:51:96:20:a7:c3:04:72:
                    ed:0e:f7:5e:75:ff:31:3d:ee:a7:cb:17:9d:71:1a:
                    13:42:52:89:f6:5b:03:21:26:09:43:e8:87:20:14:
                    87:a5:ee:b4:2b:12:b6:b2:ad:ae:6d:c8:34:c9:64:
                    97:84:dc:de:97:26:31:0b:78:a4:5c:5e:c5:ad:54:
                    e4:af:f9:94:1e:f9:7c:73:9e:c3:76:56:df:8d:40:
                    47:a5:d2:f9:9e:40:86:fb:c0:a6:84:fb:e6:f1:da:
                    4a:2d:0a:79:75:c0:72:8d:e6:58:40:a9:5d:cb:5d:
                    de:0f:af:10:eb:2e:ff:45:ff:2c:ce:cd:b5:17:67:
                    e4:3d:d1:cf:b5:6e:38:b3:ee:41:00:03:26:15:b7:
                    d6:44:f3:54:41:2d:89:85:44:00:1f:b4:84:3e:45:
                    58:37:5a:d6:41:6d:62:de:ee:e7:a3:1e:d6:df:43:
                    c2:d3:bf:c7:a7:42:50:86:e5:42:04:c8:89:ca:61:
                    a8:b9:e2:4c:46:37:12:c9:04:29:75:54:44:eb:7c:
                    b4:3e:42:04:54:01:43:ce:70:30:0c:7a:2c:fc:e8:
                    4f:61:e4:26:d4:ef:d0:a8:24:30:a3:04:f7:e8:ee:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1B:3A:17:19:6E:9C:43:72:19:4B:CF:0E:5D:2A:B3:89:02:78:29
            X509v3 Authority Key Identifier:
                keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35322e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:5f:e9:3f:fe:fd:81:ff:13:ba:bc:74:e0:3f:d6:05:b2:ee:
         9c:e7:e8:de:6a:5f:4b:13:0b:d5:3e:ea:dd:a1:c2:a9:3a:10:
         73:f3:2e:5b:1a:1e:57:4c:68:a1:fb:31:3f:88:5e:1f:fd:77:
         d5:96:74:c3:23:f1:b2:16:c0:59:a8:5d:7d:ae:e6:6a:e4:fb:
         bd:95:2a:8f:1e:e2:76:0d:72:86:23:81:76:55:e7:40:a2:98:
         02:97:4d:86:b6:55:50:ea:a9:60:9b:63:4a:66:7e:18:22:c2:
         9c:db:1c:74:7e:df:90:28:36:df:b1:a3:e8:80:fc:17:fc:02:
         2a:ee:8f:7d:e8:da:fa:f0:4f:f6:97:99:4d:3e:f2:cb:3a:a0:
         de:b4:b8:46:e8:d8:f1:eb:7c:28:c5:51:d2:46:0f:48:8a:6a:
         d8:35:72:b6:9e:17:74:0e:33:88:2a:62:e7:f0:88:b7:db:89:
         22:49:4d:68:82:40:44:8e:4b:cd:14:1e:7b:7e:a3:a1:07:4c:
         73:8a:e2:e5:ba:ff:7f:d9:f8:a1:37:aa:65:df:c1:dc:af:42:
         e7:00:86:35:4e:80:3c:99:2d:cf:12:46:54:45:59:da:de:18:
         52:a6:49:85:47:34:ba:f8:cc:69:73:32:a5:15:ae:30:87:e8:
         8f:6d:72:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:22:31 2025 by rpki-client