Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e37302e302f32332d3233203d3e20323639313039.roa
File:                     34352e3137392e37302e302f32332d3233203d3e20323639313039.roa (raw, json)
Hash identifier:          xEAanyzeIuNKUSxOPdKsYq/zLJ+A6hVQC0yI5fK1sBE=
Subject key identifier:   A7:12:B4:E8:17:6E:59:B1:A9:93:0D:64:6C:EB:31:57:C9:8E:95:6D
Certificate issuer:       /CN=015FF7B2420F79D7E3FB324944FAA5AB28892563
Certificate serial:       56190BB37CDEBD855DCCA829803DB5FE4CAC5320
Authority key identifier: 01:5F:F7:B2:42:0F:79:D7:E3:FB:32:49:44:FA:A5:AB:28:89:25:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e37302e302f32332d3233203d3e20323639313039.roa
Signing time:             Wed 13 Jul 2022 01:54:23 +0000
ROA not before:           Wed 13 Jul 2022 01:49:23 +0000
ROA not after:            Wed 12 Jul 2023 01:54:23 +0000
asID:                     269109
IP address blocks:        45.179.70.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:19:0b:b3:7c:de:bd:85:5d:cc:a8:29:80:3d:b5:fe:4c:ac:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015FF7B2420F79D7E3FB324944FAA5AB28892563
        Validity
            Not Before: Jul 13 01:49:23 2022 GMT
            Not After : Jul 12 01:54:23 2023 GMT
        Subject: CN=A712B4E8176E59B1A9930D646CEB3157C98E956D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c5:7c:c5:81:cc:09:8a:79:5a:64:11:96:f9:
                    b6:27:44:b5:65:87:d6:b3:91:30:9e:72:f7:fe:24:
                    a5:a5:d7:f6:70:0b:c4:39:7e:ce:fc:72:5f:23:a5:
                    47:25:80:f0:0c:9b:c2:e5:06:54:69:5d:3f:74:52:
                    c8:9e:d2:41:97:53:4d:9d:34:ee:1f:6e:cf:c5:de:
                    1a:97:34:22:7a:ec:25:44:07:67:64:67:07:89:fe:
                    71:b0:4f:8f:92:6c:d3:34:e0:bf:fd:90:69:b5:14:
                    4a:b7:d7:38:b0:72:5e:be:cf:14:92:e6:00:bf:50:
                    09:1e:b2:76:5d:a5:cf:c7:74:c7:c7:b5:b0:5d:a9:
                    48:b2:59:e9:b3:16:9d:69:11:cf:db:76:1e:9c:ce:
                    99:2a:7f:46:51:3a:2b:06:41:35:96:b9:27:46:ab:
                    fd:0c:c5:e9:2f:c9:da:1c:7f:11:d9:ae:92:2e:d0:
                    12:87:1a:16:54:22:eb:b8:8b:51:1e:21:75:e7:47:
                    dd:32:a7:60:7c:cb:91:9d:56:fe:2c:4a:e1:0e:8f:
                    89:97:75:03:e5:03:72:e6:3c:c7:8c:fa:72:8b:3c:
                    6f:a1:97:c5:81:0f:17:9b:2c:e7:44:34:2e:70:c5:
                    64:92:6c:ba:02:ad:2c:af:50:0d:06:27:03:c6:4d:
                    06:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:12:B4:E8:17:6E:59:B1:A9:93:0D:64:6C:EB:31:57:C9:8E:95:6D
            X509v3 Authority Key Identifier:
                keyid:01:5F:F7:B2:42:0F:79:D7:E3:FB:32:49:44:FA:A5:AB:28:89:25:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/34352e3137392e37302e302f32332d3233203d3e20323639313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:4d:0f:b2:a6:6b:dd:98:c6:d1:0d:c2:28:92:b4:2b:5c:ae:
         6f:f6:20:cc:06:38:34:34:71:ee:10:6e:1a:b6:4b:bc:30:d8:
         79:b7:7c:a8:b2:55:63:a8:07:6f:c0:ad:d2:6b:31:49:ce:8e:
         d2:96:2c:62:b8:27:23:3f:dc:35:31:f6:e9:d7:19:d5:e3:43:
         da:c6:46:de:f0:e4:68:1b:98:a0:6e:36:dd:8a:32:27:4b:82:
         b9:47:4d:04:6c:e4:d2:2b:6a:1d:9d:59:d0:0e:98:2a:fd:1c:
         a4:07:b2:0b:64:c3:2f:bd:05:85:ce:89:87:4d:bc:e0:38:b5:
         17:5f:53:69:7d:8e:6f:74:7c:86:07:ec:9a:2a:3f:d1:a6:6a:
         d9:59:a5:10:ea:06:7d:86:2f:05:0f:06:e2:43:91:45:b7:57:
         92:d9:bb:6a:5a:49:80:9f:3e:22:69:6d:1f:a9:37:0f:39:9c:
         25:5d:54:90:c8:b5:27:01:3b:26:3b:2a:54:42:6f:87:a1:da:
         a4:6f:ca:44:fc:9e:ce:c5:88:ed:e8:3f:27:ff:63:af:26:8e:
         b2:ce:e4:30:6e:e0:eb:0b:1d:16:ab:da:8e:e3:72:75:ea:d9:
         86:63:eb:b6:8a:63:23:01:56:62:8a:ed:ae:0e:be:9e:41:18:
         5a:d5:01:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:54:40 2025 by rpki-client