Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138342e302f32332d3233203d3e20323638393933.roa
File:                     34352e3137372e3138342e302f32332d3233203d3e20323638393933.roa (raw, json)
Hash identifier:          D7cWhjJjmzg8KXfKaKswFN+1d6nQ4oOsveUnk9FMZmE=
Subject key identifier:   B1:40:67:6F:F9:6A:96:28:7E:A5:FA:AE:F3:E7:B2:45:D3:FE:D1:89
Certificate issuer:       /CN=A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529
Certificate serial:       6907C426868E18EA436CE49CC74A28119887121F
Authority key identifier: A0:D7:66:0A:3C:83:EB:FF:AE:77:D7:07:A6:61:DA:8C:4D:4F:E5:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138342e302f32332d3233203d3e20323638393933.roa
Signing time:             Tue 14 Feb 2023 12:15:54 +0000
ROA not before:           Tue 14 Feb 2023 12:10:54 +0000
ROA not after:            Tue 13 Feb 2024 12:15:54 +0000
asID:                     268993
IP address blocks:        45.177.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:07:c4:26:86:8e:18:ea:43:6c:e4:9c:c7:4a:28:11:98:87:12:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529
        Validity
            Not Before: Feb 14 12:10:54 2023 GMT
            Not After : Feb 13 12:15:54 2024 GMT
        Subject: CN=B140676FF96A96287EA5FAAEF3E7B245D3FED189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:c2:46:b6:69:82:67:ac:bd:e1:6e:22:9a:
                    e0:6d:9c:50:8f:cc:e5:8d:b6:11:88:f0:56:3e:ff:
                    0a:87:a7:96:60:bf:4a:18:fd:9e:b5:d7:5c:48:25:
                    d3:2b:08:39:eb:26:e4:62:4b:62:e0:6c:b3:7a:68:
                    00:c1:5e:c6:df:22:df:78:a4:c5:f3:59:10:35:60:
                    93:78:b6:8d:e5:02:c3:bf:03:e6:8e:7b:15:9d:71:
                    e1:98:be:29:e2:d3:d3:ff:a8:6a:b5:13:3e:5c:43:
                    da:c0:2a:89:0a:86:d8:ae:85:b9:2a:51:3f:3f:63:
                    6a:81:f2:b8:02:5e:f9:68:3c:d1:bc:9b:1b:7a:6a:
                    b5:81:93:63:cf:ca:fe:96:64:fc:ed:18:1d:6b:71:
                    93:d7:8d:bf:bc:2c:3d:1b:20:c8:b8:fa:43:57:86:
                    0b:7b:2f:14:07:2d:0c:ec:26:dd:b7:c8:d3:0e:48:
                    16:46:53:a6:62:8a:79:b4:c1:a4:38:18:ba:70:c4:
                    49:17:11:0b:9c:9a:f0:aa:a4:41:13:e6:a4:dd:b3:
                    6a:9d:bd:4d:3e:93:94:43:a8:67:d1:0f:44:c0:40:
                    ea:57:54:63:9d:3f:b7:2d:8e:6b:67:db:78:77:de:
                    4e:06:cd:a5:7a:05:b4:8a:99:80:9f:65:9a:10:3e:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:40:67:6F:F9:6A:96:28:7E:A5:FA:AE:F3:E7:B2:45:D3:FE:D1:89
            X509v3 Authority Key Identifier:
                keyid:A0:D7:66:0A:3C:83:EB:FF:AE:77:D7:07:A6:61:DA:8C:4D:4F:E5:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138342e302f32332d3233203d3e20323638393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:07:b8:ea:fe:a6:09:f3:dc:c0:f1:04:0c:6f:b0:e6:ef:f9:
         82:a9:63:0f:b4:85:d3:1a:4a:55:c2:37:49:ac:cc:7a:00:86:
         10:5f:5f:ce:77:10:c2:66:3e:a9:c8:a5:c1:92:5a:1c:90:14:
         4f:ae:7f:98:0a:d3:a5:1f:ed:69:0e:fc:7d:3b:b9:ae:1e:95:
         2b:19:0c:dc:8c:bc:c7:d6:5d:a7:52:9d:b9:ed:3e:ca:3e:78:
         9b:18:ad:57:a7:d9:42:0d:56:dc:ff:56:f4:13:b8:e2:ab:a0:
         59:d7:e0:d5:2b:a4:89:77:f1:8d:ea:54:db:62:11:60:44:1b:
         da:34:10:f9:01:ef:cd:5a:34:4f:66:4a:2f:5b:fa:3e:3e:5c:
         05:b3:ca:ea:59:89:e3:f3:3e:65:ba:2f:0c:ce:4d:af:0d:bc:
         49:1c:7c:ee:2d:2e:fa:de:f2:2d:77:f3:55:5b:11:61:d6:c6:
         3e:9d:7e:cc:ec:6e:1a:08:9b:43:ac:a3:fe:9f:76:28:ce:9c:
         69:ba:93:04:4f:05:e2:9c:16:88:41:0b:91:cf:93:63:0a:e8:
         22:17:e4:3b:70:b0:f2:d7:78:b4:c1:b8:08:69:fd:4f:38:6e:
         99:97:8f:f6:4f:89:cf:9d:01:1f:e5:18:77:58:8a:f3:be:53:
         d7:b6:6c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:03 2025 by rpki-client