Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/34352e3136312e39322e302f32322d3234203d3e203532363137.roa
File:                     34352e3136312e39322e302f32322d3234203d3e203532363137.roa (raw, json)
Hash identifier:          VIJXcaw9bJP+v/cUohsAeycXxc8mSbqkCj2cnD/0q/Y=
Subject key identifier:   63:12:84:B7:E3:CA:A7:0D:E4:E8:34:66:0A:45:F9:0D:7D:FD:5B:39
Certificate issuer:       /CN=519F4C0C96D08CD1641E018E6926D91CD29D45CB
Certificate serial:       28EB79E27C86D8219988AB55F57CB5786446451F
Authority key identifier: 51:9F:4C:0C:96:D0:8C:D1:64:1E:01:8E:69:26:D9:1C:D2:9D:45:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/519F4C0C96D08CD1641E018E6926D91CD29D45CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/34352e3136312e39322e302f32322d3234203d3e203532363137.roa
Signing time:             Tue 06 Dec 2022 15:52:00 +0000
ROA not before:           Tue 06 Dec 2022 15:47:00 +0000
ROA not after:            Tue 05 Dec 2023 15:52:00 +0000
asID:                     52617
IP address blocks:        45.161.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:eb:79:e2:7c:86:d8:21:99:88:ab:55:f5:7c:b5:78:64:46:45:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519F4C0C96D08CD1641E018E6926D91CD29D45CB
        Validity
            Not Before: Dec  6 15:47:00 2022 GMT
            Not After : Dec  5 15:52:00 2023 GMT
        Subject: CN=631284B7E3CAA70DE4E834660A45F90D7DFD5B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:5c:80:63:3f:b4:ae:df:44:12:e5:fa:a9:
                    39:87:99:75:1a:6e:df:c2:c4:21:2e:a1:95:3c:a0:
                    16:b3:ba:ed:6f:a0:a5:8d:ae:51:c6:d3:4d:fa:a6:
                    61:c3:4e:f1:67:9a:25:79:e0:a1:9b:de:e9:4f:2f:
                    cf:ed:d0:57:d4:e3:0f:e4:34:57:27:44:f4:52:77:
                    0c:47:5e:bb:12:c6:a8:3f:c2:c2:dc:23:5d:f7:d5:
                    36:32:cd:42:1e:da:6d:e3:19:87:b2:dc:f4:2e:5d:
                    b4:7d:61:5d:85:79:54:41:74:f4:cc:16:68:1a:b0:
                    46:0d:83:64:8b:15:c8:be:b0:3e:70:98:d7:51:88:
                    fd:67:12:83:4b:64:50:7d:1d:98:62:7b:9b:f3:95:
                    a5:43:a6:c5:3e:04:0d:db:aa:8b:a9:f7:02:65:07:
                    95:70:a5:6c:64:4b:75:ad:f0:a3:0f:dd:20:77:f1:
                    34:10:16:34:09:a1:0e:23:8c:e9:b7:fd:cb:e7:df:
                    14:64:76:91:94:e3:6d:70:a8:cf:cb:a1:b6:58:c3:
                    f9:6b:42:a2:e5:72:d8:4f:5d:2d:60:6f:55:f2:58:
                    93:3e:4c:01:83:2c:20:0f:39:ec:9d:5d:bc:63:12:
                    93:12:df:6d:2d:52:11:b0:3e:eb:1d:5c:26:f3:48:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:12:84:B7:E3:CA:A7:0D:E4:E8:34:66:0A:45:F9:0D:7D:FD:5B:39
            X509v3 Authority Key Identifier:
                keyid:51:9F:4C:0C:96:D0:8C:D1:64:1E:01:8E:69:26:D9:1C:D2:9D:45:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/519F4C0C96D08CD1641E018E6926D91CD29D45CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/519F4C0C96D08CD1641E018E6926D91CD29D45CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/34352e3136312e39322e302f32322d3234203d3e203532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:de:ba:79:e4:61:18:ad:5b:ab:f7:c0:e4:5f:f6:b8:10:
         88:ae:a2:8e:1d:50:f0:37:fa:e0:88:5a:df:96:7c:96:fa:85:
         64:34:fe:72:c4:64:51:65:57:a5:0d:dd:f4:6d:d5:01:5e:fd:
         f2:63:53:51:03:70:05:74:92:bc:c2:4b:ae:74:a5:75:d1:17:
         d2:d0:11:10:31:ff:cd:6f:4c:d3:37:ba:d9:ca:58:05:de:be:
         3d:5a:d4:44:10:ad:ce:37:54:9f:21:71:3e:8a:59:6e:16:d5:
         55:72:56:be:92:a2:f4:ce:26:96:39:61:31:cd:47:11:b6:4b:
         1b:f2:a1:73:8f:9c:5d:26:d0:95:c8:62:16:7a:e2:d6:ab:a9:
         ca:7a:a4:12:0f:0e:5d:55:b7:e1:75:10:08:04:43:e5:5f:9a:
         69:c2:4d:4c:e3:f4:ae:a2:6f:d8:61:33:93:c8:96:d6:43:61:
         e8:d9:56:93:00:58:63:90:9a:77:87:90:6d:84:55:05:1b:4d:
         8e:66:3d:34:4c:f5:53:15:0e:0f:fb:61:ae:f2:9d:38:ae:da:
         3e:67:90:de:76:3d:a2:06:54:e5:25:ec:44:1b:cb:eb:3c:af:
         a7:68:34:37:20:3d:72:3f:05:3e:2c:16:39:25:a9:7d:85:30:
         f2:e7:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:16 2025 by rpki-client