Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/34352e372e3135362e302f32322d3234203d3e20323632373239.roa
File:                     34352e372e3135362e302f32322d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          MOOahd1l8UtbSrBIFhBjfs2NFtjvr6HCWym+pXd+DBs=
Subject key identifier:   96:D9:CE:D8:06:DC:B4:FC:FC:E2:72:1F:19:B3:32:BA:C6:57:7A:FD
Certificate issuer:       /CN=588EE00910FA303185B2D60E297C4C76D993A8E1
Certificate serial:       24C97AE28743927E1509000B119685E7AA640F94
Authority key identifier: 58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/34352e372e3135362e302f32322d3234203d3e20323632373239.roa
Signing time:             Mon 16 Oct 2023 17:52:55 +0000
ROA not before:           Mon 16 Oct 2023 17:47:55 +0000
ROA not after:            Mon 14 Oct 2024 17:52:55 +0000
asID:                     262729
IP address blocks:        45.7.156.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c9:7a:e2:87:43:92:7e:15:09:00:0b:11:96:85:e7:aa:64:0f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588EE00910FA303185B2D60E297C4C76D993A8E1
        Validity
            Not Before: Oct 16 17:47:55 2023 GMT
            Not After : Oct 14 17:52:55 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:f9:89:c0:b6:d9:35:8c:1b:95:0e:43:66:
                    4e:d6:d5:14:c9:de:3f:f7:6d:c7:f5:68:3e:20:b6:
                    3a:bf:97:d0:2c:6b:27:08:f8:58:38:d1:89:9b:44:
                    15:9d:67:4f:4f:c3:4c:b1:b9:57:ca:0c:80:c4:e3:
                    7a:7f:1c:d1:35:1f:36:1d:e3:ab:7c:4c:26:f2:4b:
                    0f:7b:70:59:c0:a7:79:00:45:6b:e1:bd:27:a3:44:
                    28:64:62:8f:b7:09:65:ac:08:aa:4c:45:aa:8b:29:
                    a0:ff:12:2c:19:4e:b9:fc:46:de:a9:04:0e:d8:cb:
                    26:65:95:5e:a7:b5:dc:ae:66:4e:6b:47:5a:e8:bb:
                    7d:4d:fd:bf:57:dd:55:2d:4a:53:0f:ce:f1:54:97:
                    6f:50:a6:f4:94:db:9a:91:83:16:3a:9c:70:e4:e0:
                    7a:ca:de:62:fd:b8:2a:aa:93:30:fd:ba:f0:75:d1:
                    a8:66:22:0b:79:4a:d6:c7:0a:80:02:ef:0f:fc:4d:
                    02:43:32:ae:34:40:56:6c:91:ff:1b:e4:c5:bb:72:
                    83:5e:49:fa:4b:8d:43:69:5c:2d:7c:d1:0f:97:36:
                    de:ae:30:5c:47:38:5e:9b:74:c6:15:e8:44:25:a2:
                    c7:aa:62:b8:77:76:6f:2a:27:b5:73:1a:81:3a:c0:
                    ef:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D9:CE:D8:06:DC:B4:FC:FC:E2:72:1F:19:B3:32:BA:C6:57:7A:FD
            X509v3 Authority Key Identifier:
                keyid:58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/588EE00910FA303185B2D60E297C4C76D993A8E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/34352e372e3135362e302f32322d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:01:5c:48:db:e7:81:4d:a9:9d:a4:94:9c:5f:07:c2:a3:0f:
         28:f1:db:4c:c9:8f:85:54:c6:b4:48:e6:87:17:1a:4f:8b:a5:
         c4:89:96:3a:78:9e:47:bd:20:33:38:5c:0d:8c:ce:b1:1a:01:
         f0:7c:92:6e:70:20:1c:4c:fd:95:9a:24:fa:49:3b:a0:d2:12:
         04:c3:ed:f5:7e:80:f4:54:4d:c6:14:76:b7:ed:5f:af:01:78:
         a7:be:44:21:7c:90:4c:43:a4:e7:0d:74:dd:3b:2b:88:3a:00:
         b8:42:dc:0b:c8:b4:f3:5e:b2:46:6d:46:52:6c:3f:45:a9:c9:
         4a:6a:86:a6:e3:8c:4e:47:ad:5c:ca:bc:ef:5f:6f:6c:96:af:
         f1:0d:62:b7:04:8a:5f:09:ae:06:50:0b:cb:1a:d7:c0:08:54:
         f2:e1:c9:65:49:5e:4b:3b:91:2d:17:ef:23:73:62:4d:d7:d0:
         f6:ba:8e:28:4a:58:4b:86:4c:b2:bf:da:32:90:32:d0:71:c1:
         44:f3:1d:68:76:4b:a6:5e:4c:47:df:e1:ec:ef:64:ac:f8:d7:
         f4:87:d2:22:90:03:b1:55:74:77:a9:60:f8:0a:28:53:64:52:
         a8:a3:47:4b:c3:7e:08:9a:c2:7a:9a:a6:b4:25:50:9f:2e:e9:
         cc:47:4a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:47:38 2025 by rpki-client