Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131392e302f32342d3234203d3e20323731353131.roa
File:                     34352e3138352e3131392e302f32342d3234203d3e20323731353131.roa (raw, json)
Hash identifier:          Dq7564cM8X1vV4eEMGx13vxbLgv/3xr1jkFr6Gq6Yto=
Subject key identifier:   8C:58:09:A3:28:01:C8:8C:59:B2:D9:AD:9C:A3:0B:5B:B0:FE:19:9D
Certificate issuer:       /CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
Certificate serial:       475BC39D2CF42DC130352CD5D6BCDA7A8852A737
Authority key identifier: 5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131392e302f32342d3234203d3e20323731353131.roa
Signing time:             Thu 16 Nov 2023 22:24:00 +0000
ROA not before:           Thu 16 Nov 2023 22:19:00 +0000
ROA not after:            Thu 14 Nov 2024 22:24:00 +0000
asID:                     271511
IP address blocks:        45.185.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5b:c3:9d:2c:f4:2d:c1:30:35:2c:d5:d6:bc:da:7a:88:52:a7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
        Validity
            Not Before: Nov 16 22:19:00 2023 GMT
            Not After : Nov 14 22:24:00 2024 GMT
        Subject: CN=8C5809A32801C88C59B2D9AD9CA30B5BB0FE199D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0c:e7:a6:30:27:42:21:e4:4f:3e:3a:b6:08:
                    26:f3:40:22:22:62:96:72:fd:0e:06:78:eb:60:f5:
                    44:77:d8:28:d4:be:89:d2:78:31:cc:c3:62:ee:a6:
                    a6:28:42:92:63:d1:1b:17:88:80:bb:21:ce:38:1c:
                    0b:ab:39:a0:64:87:ff:1a:5f:bc:8c:ee:97:97:3d:
                    49:1e:d8:bd:93:39:d4:df:f3:e5:68:63:a5:e5:b7:
                    08:bc:d3:d6:78:fe:5c:73:13:2d:ba:d2:ff:0e:40:
                    dd:e4:a4:e5:24:ba:87:79:a7:f4:05:6c:54:72:b1:
                    ef:6f:82:fa:02:1b:4d:b6:78:e6:ea:58:77:d6:d0:
                    7b:1c:50:1c:27:14:89:34:62:9d:c6:85:b6:5b:13:
                    dd:b2:09:2e:3f:52:e1:48:ac:94:3b:a3:20:6a:81:
                    eb:ab:ae:25:c6:a2:11:1a:71:fd:87:56:29:87:8e:
                    31:24:72:5a:6e:7b:10:16:f2:bb:f2:4b:64:ff:8c:
                    d0:de:dc:2e:bd:cd:99:7e:21:2a:65:68:8c:f8:85:
                    6d:3a:26:de:55:03:c8:c1:00:36:ca:1c:39:8e:ce:
                    4f:f4:c9:cf:eb:6e:9b:e9:e2:31:68:b5:20:1a:af:
                    d2:58:c4:88:8d:ae:63:8c:89:80:56:df:cf:83:94:
                    64:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:58:09:A3:28:01:C8:8C:59:B2:D9:AD:9C:A3:0B:5B:B0:FE:19:9D
            X509v3 Authority Key Identifier:
                keyid:5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131392e302f32342d3234203d3e20323731353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9a:d2:df:45:34:47:73:79:e5:09:38:8e:db:93:e5:5a:7f:
         3c:1b:fb:87:96:3d:c0:11:df:c7:78:05:90:c1:9b:ac:69:d5:
         6d:b7:66:bb:66:09:6f:4d:82:d9:90:62:b5:53:23:7c:a2:fc:
         1c:c3:f9:3e:56:0d:48:95:eb:97:ad:91:3d:76:c4:60:38:35:
         1a:1c:04:0b:27:3c:d6:39:4c:c2:04:7b:36:ab:ee:f1:93:ea:
         e8:61:71:fa:5c:d5:eb:af:ab:c6:b5:3b:8b:dc:db:6a:5b:ee:
         d3:11:65:28:08:fa:15:6c:61:7d:91:41:0b:49:9d:12:f7:ee:
         70:0d:ab:b2:e2:b6:76:1e:0d:18:76:d5:5b:10:64:a3:75:ec:
         56:ea:e4:37:8f:c1:09:50:f7:03:ed:38:81:25:54:2f:2e:90:
         ca:50:2c:6a:65:b9:f2:3a:e4:b3:5f:f3:46:4d:bc:ca:5c:0d:
         00:e6:b3:30:14:86:99:87:5a:a6:46:e9:ef:24:e6:7d:16:2d:
         c5:2f:0a:a8:70:a4:3b:c2:40:b4:cf:02:fb:45:c0:03:ee:15:
         41:38:f8:51:cd:02:7a:31:a3:fb:8f:3e:27:47:58:d7:73:b3:
         15:9b:60:e3:d9:fd:14:f7:ca:00:e3:da:ac:3e:cd:50:6c:52:
         1d:6a:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:48:47 2025 by rpki-client