Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32342d3234203d3e20323639333931.roa
File:                     34352e3138352e3137322e302f32342d3234203d3e20323639333931.roa (raw, json)
Hash identifier:          TciC5e047X8mFStXns1QYEnXfaE0uFN41IGhW5Qoow8=
Subject key identifier:   86:BD:C6:24:5B:5A:FE:27:94:44:22:CE:2F:93:75:D1:98:F5:A8:51
Certificate issuer:       /CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
Certificate serial:       01383B0883ABEF9B652B05526DA2501E52FBB7A3
Authority key identifier: 5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32342d3234203d3e20323639333931.roa
Signing time:             Mon 15 May 2023 17:11:11 +0000
ROA not before:           Mon 15 May 2023 17:06:11 +0000
ROA not after:            Mon 13 May 2024 17:11:11 +0000
asID:                     269391
IP address blocks:        45.185.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:38:3b:08:83:ab:ef:9b:65:2b:05:52:6d:a2:50:1e:52:fb:b7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
        Validity
            Not Before: May 15 17:06:11 2023 GMT
            Not After : May 13 17:11:11 2024 GMT
        Subject: CN=86BDC6245B5AFE27944422CE2F9375D198F5A851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:51:ed:fc:88:4f:7f:f1:a0:38:be:25:4d:
                    b2:fb:04:21:11:e0:a1:ab:f3:e0:78:1e:4e:1b:ca:
                    92:f4:e1:d1:9b:ff:69:7e:16:28:b3:41:81:e2:0f:
                    74:4b:04:4d:d4:7b:f2:6d:52:5a:e9:0f:f2:56:50:
                    5d:de:ce:69:a4:86:37:55:de:f9:f5:45:b9:f9:44:
                    e0:92:2b:fc:95:b4:e8:36:94:6e:aa:26:cf:0d:c7:
                    06:53:08:4a:59:28:ba:48:eb:0f:52:db:3d:bf:18:
                    90:80:55:f4:6d:c2:fe:54:6a:e5:42:f3:b6:64:f3:
                    38:14:ef:aa:a7:b1:78:56:2b:69:bb:79:4d:93:ce:
                    2f:f6:31:bb:05:60:e8:ae:6c:0d:85:6d:8b:1a:4b:
                    f0:05:12:0f:96:67:bb:79:8b:9d:b6:2f:29:74:45:
                    89:d4:d5:9d:71:c5:58:94:77:83:24:e3:58:4c:1b:
                    72:ad:6c:f7:e6:77:39:b7:dd:49:40:ea:14:ac:b7:
                    67:ca:66:65:31:bc:4c:02:d2:b8:f7:a0:b4:19:09:
                    e1:56:5c:43:3b:d3:f4:33:ca:c5:f7:cb:56:48:07:
                    2a:d7:85:56:90:90:42:fe:7a:74:d5:6d:a8:cd:e6:
                    81:23:2b:40:c3:aa:ad:03:09:24:56:60:34:6a:5c:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BD:C6:24:5B:5A:FE:27:94:44:22:CE:2F:93:75:D1:98:F5:A8:51
            X509v3 Authority Key Identifier:
                keyid:5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32342d3234203d3e20323639333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:54:65:b5:e8:22:0e:91:39:b7:5d:04:40:13:9a:11:fc:12:
         f3:12:e3:89:f6:65:33:60:76:36:1a:0d:f0:be:35:55:9a:90:
         c3:a6:19:c5:7e:5a:67:49:c9:9d:2e:2b:16:49:34:39:cc:bf:
         a2:86:47:d5:17:5f:1c:b8:cd:6b:77:17:17:9a:15:f8:1d:19:
         fc:15:0c:0f:a7:5f:0b:7f:34:ce:d3:bc:1a:a6:50:3c:42:74:
         cc:df:a8:31:3d:b5:33:35:5c:f7:33:bd:44:33:d7:bd:69:00:
         53:7f:24:d6:ac:43:12:1f:2b:b6:02:3d:9e:85:65:15:5a:ed:
         64:26:a6:6f:2e:a1:13:a6:ca:f4:b8:ae:bf:d5:5d:ae:86:6a:
         fb:3b:60:b5:9c:2f:8c:6c:6c:06:4f:73:f2:5d:01:31:cc:9d:
         8f:ba:54:79:ce:7b:fa:0f:f1:06:e5:5a:b1:7f:7f:3c:a0:ed:
         9f:92:be:f1:27:47:44:fb:62:78:e3:76:11:27:e4:e3:03:ad:
         22:cf:9e:b1:cf:2c:11:90:c8:3e:99:29:1d:ed:a7:6e:95:d2:
         43:ec:51:92:f6:88:23:7b:02:7f:c9:b8:02:1b:60:8c:97:71:
         b8:e0:9b:f8:61:37:da:78:54:d2:49:93:85:9c:fa:b1:ca:d1:
         fd:fd:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:36 2025 by rpki-client