Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231322e302f32342d3234203d3e20323639323932.roa
File:                     34352e3138332e3231322e302f32342d3234203d3e20323639323932.roa (raw, json)
Hash identifier:          4vcK6GOxhkGFIgz9/r7mmu9EcwZTuTqhk25ffmY7HVg=
Subject key identifier:   E4:EA:5A:4F:30:7F:5B:B8:DD:11:27:DC:CC:95:B9:10:A2:14:22:3F
Certificate issuer:       /CN=DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7
Certificate serial:       1B8C6498E66F8B8173BF8C966D4EA42F13621E30
Authority key identifier: DA:74:63:B0:6F:BF:78:6E:F5:A3:F0:4E:9A:D6:D9:3F:BF:28:5D:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231322e302f32342d3234203d3e20323639323932.roa
Signing time:             Sat 09 Dec 2023 15:26:39 +0000
ROA not before:           Sat 09 Dec 2023 15:21:39 +0000
ROA not after:            Sat 07 Dec 2024 15:26:39 +0000
asID:                     269292
IP address blocks:        45.183.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8c:64:98:e6:6f:8b:81:73:bf:8c:96:6d:4e:a4:2f:13:62:1e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7
        Validity
            Not Before: Dec  9 15:21:39 2023 GMT
            Not After : Dec  7 15:26:39 2024 GMT
        Subject: CN=E4EA5A4F307F5BB8DD1127DCCC95B910A214223F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:4e:89:8b:37:8c:17:ab:44:e5:4a:8b:cb:
                    b9:74:88:ed:52:47:11:f2:b0:12:6c:c8:d3:bc:e3:
                    40:23:4b:8e:30:1c:96:8b:ab:42:d0:89:d8:3a:1a:
                    cb:92:fa:d1:27:bb:9f:2b:1f:6d:85:f4:24:af:f6:
                    34:33:75:ce:ac:27:48:c7:85:7e:b0:b4:31:3e:0d:
                    a2:40:5c:33:d5:13:39:21:b4:46:7f:1d:bf:67:d6:
                    79:bb:91:d3:45:25:b3:a7:a4:d7:49:c7:e8:71:56:
                    ba:9b:5f:54:c1:c9:37:f4:04:00:04:81:7c:99:61:
                    49:70:cb:7d:76:d9:a6:2b:56:aa:81:f7:1d:c0:73:
                    11:98:98:40:ac:4a:00:93:24:7c:8f:54:f1:05:e1:
                    22:e7:37:7f:64:cb:27:de:40:0c:d3:dd:3a:c5:2a:
                    de:f5:7e:13:8f:36:c5:06:4f:f9:88:12:43:1a:4e:
                    c1:99:14:33:1e:db:e7:d0:5e:67:15:84:cb:58:60:
                    80:e3:f4:46:52:6f:25:bd:d9:cf:2e:2d:e1:69:dc:
                    c4:30:2c:29:ad:50:78:9d:8f:12:1b:81:d9:44:f7:
                    3d:4e:8d:e3:85:b4:f6:75:27:b5:2a:14:92:95:53:
                    32:e6:2a:ef:8d:37:67:39:39:a7:31:7a:a0:a0:57:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EA:5A:4F:30:7F:5B:B8:DD:11:27:DC:CC:95:B9:10:A2:14:22:3F
            X509v3 Authority Key Identifier:
                keyid:DA:74:63:B0:6F:BF:78:6E:F5:A3:F0:4E:9A:D6:D9:3F:BF:28:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA7463B06FBF786EF5A3F04E9AD6D93FBF285DC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/34352e3138332e3231322e302f32342d3234203d3e20323639323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d7:06:e2:84:01:0f:47:20:42:f8:d3:f5:ea:22:62:17:10:
         1b:58:c7:41:dd:da:f6:56:a3:09:f5:65:9c:d6:7b:3f:6b:4e:
         e6:dc:4e:57:60:50:5a:a0:b5:fc:55:f3:d8:34:d7:c7:bb:3e:
         80:44:e7:80:1c:2f:be:b2:12:50:87:0d:44:8b:66:04:97:b5:
         6c:82:7a:15:d8:b1:00:60:ef:cb:5f:11:9a:09:a1:a6:2b:54:
         ad:6f:fe:ca:1d:d8:33:20:60:87:bf:ec:50:88:de:db:27:95:
         35:c2:14:05:c4:39:59:2e:09:d1:43:4e:a5:52:ff:75:27:ff:
         5a:34:bb:25:53:b7:67:23:79:53:c4:b0:a4:a0:2a:de:ac:70:
         65:91:4f:d7:c5:9b:6b:77:d9:d1:08:a5:55:82:e0:a8:b8:a7:
         7c:45:81:c6:07:c0:b7:6c:94:35:3c:f0:e5:23:aa:f9:70:47:
         d0:45:61:dc:62:ce:59:16:01:42:fc:a6:49:4a:3d:15:6e:b1:
         95:bd:24:b9:3e:f9:cb:49:ac:6a:a8:d5:32:f5:d2:e7:eb:21:
         a7:f2:1a:47:b7:5a:f7:3c:02:d5:b5:6c:9d:a6:88:e9:8b:13:
         7d:60:f3:77:70:8f:ca:57:db:43:fe:3f:97:0f:07:b4:c5:12:
         5f:cb:72:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:51:36 2025 by rpki-client