Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e32382e302f32332d3233203d3e20323637313435.roa
File:                     34352e3233302e32382e302f32332d3233203d3e20323637313435.roa (raw, json)
Hash identifier:          Z8ZrCAQjllPTTEu6XfA06g+uZ9RCDXH+QRc3wuusQpM=
Subject key identifier:   F1:28:BF:41:F0:57:39:6A:32:FB:DC:A7:9E:83:D0:50:82:FF:2B:FC
Certificate issuer:       /CN=7B5759C375D861C7409D94AFE284881988AE6013
Certificate serial:       6FF26E205A799AB2F4FE4D64875C8518ED39E8FC
Authority key identifier: 7B:57:59:C3:75:D8:61:C7:40:9D:94:AF:E2:84:88:19:88:AE:60:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B5759C375D861C7409D94AFE284881988AE6013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e32382e302f32332d3233203d3e20323637313435.roa
Signing time:             Tue 06 Feb 2024 17:10:16 +0000
ROA not before:           Tue 06 Feb 2024 17:05:16 +0000
ROA not after:            Tue 04 Feb 2025 17:10:16 +0000
asID:                     267145
IP address blocks:        45.230.28.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f2:6e:20:5a:79:9a:b2:f4:fe:4d:64:87:5c:85:18:ed:39:e8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5759C375D861C7409D94AFE284881988AE6013
        Validity
            Not Before: Feb  6 17:05:16 2024 GMT
            Not After : Feb  4 17:10:16 2025 GMT
        Subject: CN=F128BF41F057396A32FBDCA79E83D05082FF2BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:d5:6d:79:84:90:30:b0:31:20:d5:a2:b8:
                    95:8e:d8:94:a6:2a:ab:9d:10:9c:15:c0:79:c0:6b:
                    f2:6e:da:8e:d7:98:31:83:3e:c1:9a:52:85:fd:f5:
                    05:c7:7a:4a:70:94:98:93:9b:48:65:9d:a9:fe:69:
                    be:a9:6b:69:4d:1e:18:df:66:bc:fd:1b:93:75:b2:
                    09:4c:4c:59:30:3c:dd:c1:c7:cb:eb:b9:83:a9:83:
                    3c:30:48:db:f2:46:08:0a:f9:6b:59:b0:35:0b:4e:
                    b1:fa:94:1d:5b:c5:55:cb:01:37:2b:0b:ab:0f:03:
                    c9:8d:cb:26:94:90:3e:59:e2:99:6f:be:8f:66:aa:
                    83:1d:79:90:1a:c5:bd:4f:df:f4:a2:fd:58:6b:fb:
                    87:c3:d6:a4:b8:42:34:23:62:dd:31:5d:6f:87:0f:
                    7b:f8:e5:a7:68:26:8f:7e:cd:3b:b0:6f:ca:a1:98:
                    9d:1a:02:08:7a:7a:2e:b0:8c:f0:2f:d5:b0:b8:39:
                    5c:94:b5:0b:9f:aa:62:03:b0:f0:d3:32:f8:64:65:
                    4e:af:e5:e6:d7:04:22:26:8b:58:f6:1c:82:99:01:
                    15:e4:92:86:24:c7:b2:dc:8d:e0:fd:7e:8e:70:10:
                    4f:74:ac:b2:fd:91:81:d1:e8:ab:12:89:32:39:57:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:28:BF:41:F0:57:39:6A:32:FB:DC:A7:9E:83:D0:50:82:FF:2B:FC
            X509v3 Authority Key Identifier:
                keyid:7B:57:59:C3:75:D8:61:C7:40:9D:94:AF:E2:84:88:19:88:AE:60:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/7B5759C375D861C7409D94AFE284881988AE6013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B5759C375D861C7409D94AFE284881988AE6013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/34352e3233302e32382e302f32332d3233203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:4a:13:f6:00:3a:9a:5a:be:66:0f:c7:eb:cd:8d:d1:e2:fc:
         13:88:b7:b8:85:ab:40:78:84:1e:5d:df:bb:6e:95:24:45:65:
         b4:8d:45:23:2f:e8:49:37:c2:d4:0f:42:88:db:6f:06:e7:d5:
         a5:98:8f:d2:2c:a3:44:a6:d0:52:14:6c:e5:b4:51:e4:fe:80:
         39:c2:22:1f:3c:39:72:78:cf:f2:1e:64:e2:28:29:df:f4:25:
         95:71:43:b5:d4:e1:4c:12:82:46:45:49:f1:1a:fb:6f:ec:c6:
         8b:ae:92:17:2c:62:c7:bc:20:84:e9:21:08:b8:0d:63:93:28:
         96:d5:13:38:62:09:f0:d3:ef:3e:03:e8:ba:79:c6:5b:95:9d:
         8c:c6:a9:ea:7f:28:5a:c8:2b:23:75:c3:89:35:26:87:e7:ed:
         e1:9d:96:9a:d0:f1:c0:fc:e9:3e:38:96:b9:32:79:f1:21:5e:
         fe:f0:a9:8e:e0:d2:e0:4a:9f:54:65:a1:b9:29:11:72:91:c8:
         6d:5a:4e:f4:bd:a3:59:bb:91:05:84:d4:12:db:63:11:1b:ee:
         17:1f:ec:d0:d7:d2:35:5f:0a:9b:f7:8e:e2:4f:4d:7a:95:62:
         a0:d0:51:8a:e8:70:8f:f5:90:87:d2:95:05:42:a2:2b:6b:64:
         9b:97:fa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:14 2025 by rpki-client