Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137332e302f32342d3234203d3e20323639333931.roa
File:                     34352e3138352e3137332e302f32342d3234203d3e20323639333931.roa (raw, json)
Hash identifier:          R+nIcrX5PfzGZYMJpPXGvqS96e4FcGsZYsplFSfWvzA=
Subject key identifier:   6D:FF:57:4A:3A:F7:16:7C:AD:E3:99:6E:58:90:7A:51:EA:E4:CB:74
Certificate issuer:       /CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
Certificate serial:       1A889C7497164C8563FB4B5D8CFD5B7C94CBCAF8
Authority key identifier: 5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137332e302f32342d3234203d3e20323639333931.roa
Signing time:             Mon 15 May 2023 17:11:11 +0000
ROA not before:           Mon 15 May 2023 17:06:11 +0000
ROA not after:            Mon 13 May 2024 17:11:11 +0000
asID:                     269391
IP address blocks:        45.185.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:88:9c:74:97:16:4c:85:63:fb:4b:5d:8c:fd:5b:7c:94:cb:ca:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
        Validity
            Not Before: May 15 17:06:11 2023 GMT
            Not After : May 13 17:11:11 2024 GMT
        Subject: CN=6DFF574A3AF7167CADE3996E58907A51EAE4CB74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:59:c7:da:7b:ce:f5:1a:ba:14:52:53:18:
                    55:92:4e:db:63:e7:4f:b0:86:86:e7:12:43:2e:f1:
                    cc:6d:7f:06:a6:06:d4:81:fc:88:59:30:22:26:68:
                    79:89:bf:2a:64:57:8d:0a:99:96:b4:d1:c6:3c:94:
                    07:5a:62:f9:47:53:67:36:4e:28:10:3f:62:8f:ff:
                    0e:8d:09:7c:ce:4f:84:22:ca:0a:74:65:06:94:87:
                    48:c9:03:bd:ac:b2:cc:4e:d4:4a:3a:63:e7:90:ec:
                    87:5e:c6:19:b8:a3:49:57:7d:d8:48:98:08:9e:4b:
                    aa:6d:0a:4e:c5:62:5c:c2:88:b8:98:67:f0:1e:df:
                    f1:96:55:a1:db:47:e4:d1:c0:1c:73:a1:95:67:ea:
                    87:ee:14:97:51:c2:da:b6:f0:15:77:25:08:33:55:
                    56:e5:52:57:60:e5:d4:e7:e1:e4:04:a8:86:cf:91:
                    48:ff:5c:66:3b:19:d0:6e:1e:14:21:62:93:ec:1b:
                    5e:7c:9f:93:43:44:35:ab:d0:f1:4a:b4:79:4f:54:
                    8c:33:7b:97:2f:f7:b9:14:cb:ad:9b:5c:83:89:3d:
                    68:0d:8f:a2:0a:72:c5:53:11:8d:6c:26:52:3a:62:
                    93:87:83:73:c3:83:85:70:81:2a:f1:8c:21:67:92:
                    67:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FF:57:4A:3A:F7:16:7C:AD:E3:99:6E:58:90:7A:51:EA:E4:CB:74
            X509v3 Authority Key Identifier:
                keyid:5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137332e302f32342d3234203d3e20323639333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:17:d1:8d:49:15:ce:66:76:d5:34:89:f4:11:ee:76:68:
         b8:54:b9:81:57:7f:5e:cb:bd:27:0a:bf:ff:c2:c8:6e:fd:c5:
         66:e6:77:1b:9c:5b:08:0c:24:4a:14:a1:42:3b:2b:80:ac:b5:
         00:7d:da:44:1a:5d:cc:ec:4b:ca:a3:a3:f7:f1:dc:13:ee:b8:
         a7:64:1a:13:af:9c:80:23:e7:9c:73:64:84:1f:78:01:ef:7d:
         61:86:b1:64:1c:69:ed:75:cf:30:ce:b8:6a:31:bc:a8:5d:13:
         ce:cd:60:a2:07:dc:93:cb:51:93:cc:e9:0b:1b:83:79:32:1b:
         0f:7c:d1:e7:a0:23:c3:0c:4c:cb:0c:1b:8f:34:fc:87:12:7a:
         59:64:6e:f9:c1:ec:5e:71:08:fb:1c:83:7e:a4:21:b3:a4:96:
         98:a4:74:25:5c:e7:62:69:b7:26:6e:3f:d6:3b:05:e8:6e:d9:
         aa:9e:b1:50:ae:23:5e:c6:33:76:7e:a7:34:df:68:5b:a2:6e:
         2d:98:ec:ed:24:10:02:62:2d:a2:63:7a:49:13:6d:45:94:51:
         61:6c:3a:8e:6e:76:d2:17:34:00:83:3c:dd:4e:9b:f1:4e:72:
         5e:49:dd:71:d3:cf:c1:ae:69:a6:5b:31:ab:7f:9d:ff:16:94:
         15:0c:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:22:02 2025 by rpki-client