Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138302e302f32322d3232203d3e20323638343133.roa
File:                     34352e3136302e3138302e302f32322d3232203d3e20323638343133.roa (raw, json)
Hash identifier:          RwYNtETJfYBroAuHlfBLCHo6R1OyqmqcteH3m7bgaSM=
Subject key identifier:   70:2C:CB:0F:76:E8:55:EB:5C:EF:51:C4:85:40:A6:49:EB:AA:12:22
Certificate issuer:       /CN=1EC5B0C153629EE217F98299EE68DC1F955EA3AE
Certificate serial:       3A17D7E801A4CFF5A8BD7BDCF5F2C4D5AEF36090
Authority key identifier: 1E:C5:B0:C1:53:62:9E:E2:17:F9:82:99:EE:68:DC:1F:95:5E:A3:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EC5B0C153629EE217F98299EE68DC1F955EA3AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138302e302f32322d3232203d3e20323638343133.roa
Signing time:             Wed 23 Nov 2022 19:41:08 +0000
ROA not before:           Wed 23 Nov 2022 19:36:08 +0000
ROA not after:            Wed 22 Nov 2023 19:41:08 +0000
asID:                     268413
IP address blocks:        45.160.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:17:d7:e8:01:a4:cf:f5:a8:bd:7b:dc:f5:f2:c4:d5:ae:f3:60:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC5B0C153629EE217F98299EE68DC1F955EA3AE
        Validity
            Not Before: Nov 23 19:36:08 2022 GMT
            Not After : Nov 22 19:41:08 2023 GMT
        Subject: CN=702CCB0F76E855EB5CEF51C48540A649EBAA1222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:db:56:08:eb:7c:6c:ce:e6:5c:d4:f7:66:
                    5e:bd:81:b6:c0:f0:fd:82:b8:d6:59:8f:0a:79:90:
                    e1:01:09:03:7c:ee:15:c1:c4:bf:68:bc:0c:72:41:
                    d2:e4:72:95:a5:66:8b:9c:54:a2:90:e8:7f:6d:c5:
                    a6:e4:d4:83:6e:f5:b0:c9:86:7f:a4:18:62:1f:14:
                    a4:41:43:81:ca:86:5b:87:0a:8d:01:5b:44:fa:dd:
                    74:c7:37:21:d6:9d:3f:a2:57:e2:aa:ee:4c:7f:ba:
                    ca:52:09:21:cb:d9:4f:1f:87:29:59:01:07:dc:62:
                    4b:14:f6:29:b7:b7:5e:bd:23:b5:ce:45:8e:54:35:
                    72:e6:de:22:70:7b:4c:72:82:ab:18:6f:94:81:97:
                    ac:ad:fc:48:52:f7:15:91:04:c4:01:a1:65:4c:5b:
                    63:2d:be:5e:f2:6a:b1:a9:d6:6c:e2:c1:25:4c:84:
                    c1:ef:a5:27:dc:82:af:8b:f4:0c:95:53:09:95:b1:
                    8d:39:d8:6a:b4:15:fb:f1:5b:3f:36:08:96:0a:42:
                    d2:5f:a5:bd:29:13:75:91:8f:58:15:7e:9f:0b:e1:
                    92:1b:00:13:bf:c9:ab:79:3a:e0:d4:b2:7c:11:01:
                    4e:3a:ff:af:86:a1:f0:22:28:4d:92:2f:c5:46:71:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2C:CB:0F:76:E8:55:EB:5C:EF:51:C4:85:40:A6:49:EB:AA:12:22
            X509v3 Authority Key Identifier:
                keyid:1E:C5:B0:C1:53:62:9E:E2:17:F9:82:99:EE:68:DC:1F:95:5E:A3:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/1EC5B0C153629EE217F98299EE68DC1F955EA3AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EC5B0C153629EE217F98299EE68DC1F955EA3AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138302e302f32322d3232203d3e20323638343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:09:88:41:75:96:db:ed:87:ea:09:e5:62:a6:17:c0:37:36:
         ee:7a:eb:ee:67:d5:d8:11:55:47:8c:4e:d3:25:6a:9c:2c:00:
         45:69:75:4c:f6:57:49:49:be:8c:56:30:cb:f2:60:79:8a:c6:
         27:3b:8c:4f:0e:5b:10:0e:6d:63:e3:93:77:ca:c7:4e:46:bf:
         87:23:4b:7e:ee:95:26:b7:53:6a:a6:3b:07:da:7f:d2:aa:58:
         2d:e3:41:6a:f8:65:f3:59:7c:29:64:0d:6c:ac:8d:4d:89:aa:
         df:b9:a3:5e:1e:43:86:c4:14:e6:7c:d4:ec:87:0b:dc:84:fd:
         5d:c9:d7:24:62:c8:be:3a:98:bd:e2:6c:f9:a9:fe:8e:e1:1d:
         89:b2:e2:5d:74:98:8e:96:dd:03:4a:0a:83:e1:59:ae:b3:40:
         a0:d1:72:73:d4:19:df:26:57:48:47:fd:62:bd:6f:23:cf:13:
         30:a3:46:ea:12:d2:28:de:15:5f:89:86:3b:10:44:18:93:65:
         96:1c:98:21:41:0a:eb:50:38:97:52:cd:64:a4:dc:95:12:8c:
         dd:37:df:d4:a2:dc:4c:1d:8d:74:5a:4e:3f:ec:20:63:e7:f7:
         2e:d6:16:13:c9:6e:40:24:98:4d:50:fa:c1:91:10:9c:e4:83:
         bc:93:9b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:32 2025 by rpki-client