Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa
File:                     34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (raw, json)
Hash identifier:          vW6K5/NkTHWn7yS0+PgA7gDE50eCN2mivODBCM/S4KY=
Subject key identifier:   E6:DB:7C:B4:88:30:4E:CC:F2:8B:84:FA:FC:68:59:30:B6:B8:F7:D3
Certificate issuer:       /CN=AA12D77A3D660B58B730B5BC3AD963D31490F6A1
Certificate serial:       4FE7D97999BB7A099C986CF4AB4B7842C3680527
Authority key identifier: AA:12:D7:7A:3D:66:0B:58:B7:30:B5:BC:3A:D9:63:D3:14:90:F6:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA12D77A3D660B58B730B5BC3AD963D31490F6A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa
Signing time:             Tue 14 Mar 2023 13:37:39 +0000
ROA not before:           Tue 14 Mar 2023 13:32:39 +0000
ROA not after:            Tue 12 Mar 2024 13:37:39 +0000
asID:                     267373
IP address blocks:        45.234.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e7:d9:79:99:bb:7a:09:9c:98:6c:f4:ab:4b:78:42:c3:68:05:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA12D77A3D660B58B730B5BC3AD963D31490F6A1
        Validity
            Not Before: Mar 14 13:32:39 2023 GMT
            Not After : Mar 12 13:37:39 2024 GMT
        Subject: CN=E6DB7CB488304ECCF28B84FAFC685930B6B8F7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:7c:70:0e:02:38:5d:b7:9f:5a:bf:b6:24:
                    d0:7e:d4:c2:2e:ac:4b:66:22:39:de:59:c8:82:9a:
                    9c:40:0d:e1:2b:c7:5b:03:74:dd:2c:08:a5:51:c6:
                    8b:c4:2f:51:09:42:da:31:10:47:02:25:ac:60:eb:
                    9e:3e:b3:e4:0d:0e:4b:9b:b2:b6:b7:35:34:2d:c6:
                    42:14:2a:87:f7:bd:8b:d3:b0:2f:d9:af:c2:71:9e:
                    f5:8f:2a:1e:76:15:8f:51:1c:49:ee:81:13:8d:19:
                    4c:9e:65:51:6f:e8:e3:a1:82:ba:d5:47:83:b4:3e:
                    3e:56:2f:45:27:e0:6b:92:48:ca:e7:c7:b7:ac:28:
                    fd:d2:80:64:44:ec:08:79:80:9e:00:74:3c:b6:ee:
                    9b:ba:87:99:57:f5:09:fa:f6:39:26:7f:9b:f8:99:
                    0b:9c:da:7c:8c:a2:b4:2e:71:1f:01:0a:55:be:70:
                    1d:75:8d:7b:36:9e:f0:82:aa:cd:51:ae:f4:a9:4f:
                    57:ab:8d:bf:cd:d8:96:d0:94:3f:6e:d5:11:4a:8f:
                    00:99:36:e9:ba:81:f4:2e:29:33:25:e3:4a:09:68:
                    b0:38:be:1a:65:75:25:0c:5f:72:30:5e:a3:6f:10:
                    1f:ed:8a:45:67:e3:c5:a8:28:5d:96:ac:33:f7:82:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DB:7C:B4:88:30:4E:CC:F2:8B:84:FA:FC:68:59:30:B6:B8:F7:D3
            X509v3 Authority Key Identifier:
                keyid:AA:12:D7:7A:3D:66:0B:58:B7:30:B5:BC:3A:D9:63:D3:14:90:F6:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/AA12D77A3D660B58B730B5BC3AD963D31490F6A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA12D77A3D660B58B730B5BC3AD963D31490F6A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:ba:99:56:99:86:f6:e0:10:06:7e:29:73:b0:33:9f:86:
         e6:13:ac:08:7d:3d:d9:39:48:96:ed:8f:9c:95:b9:f9:cd:d5:
         90:a8:d7:6c:19:df:f6:81:05:82:30:30:3a:99:0b:2e:f4:2e:
         21:28:84:16:79:aa:50:9c:70:a2:17:4f:f8:6d:f1:1b:ec:27:
         2a:60:ce:b8:c1:88:2f:02:fd:8f:10:e0:ae:ef:ee:6c:16:1d:
         7e:75:9a:38:9d:4a:76:e9:57:ed:d1:33:84:4c:42:f5:fe:93:
         71:52:bc:97:3f:fb:4e:a9:41:3c:29:f3:45:1b:2b:2a:c8:20:
         81:3f:dc:c1:81:19:83:88:78:11:a2:6a:e9:e3:92:b9:1d:00:
         db:5b:79:ba:27:f4:25:48:aa:9d:e7:a2:ec:69:0f:7c:8a:03:
         3a:7c:f9:1c:00:65:a8:e6:eb:b4:40:15:fe:db:9f:88:37:59:
         88:fe:f2:7c:16:51:ca:47:a0:af:15:6a:bb:76:ed:ba:4d:ca:
         c8:af:d8:71:57:13:ec:71:d3:89:7d:c7:7c:b0:5d:4d:5e:27:
         52:bc:fc:43:f6:bb:6e:a5:e7:e5:7d:72:b3:26:f5:85:0c:d5:
         ff:68:a2:e3:58:7f:c0:50:96:58:d8:5e:8f:d2:d2:a5:02:6f:
         c1:95:0b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:43 2025 by rpki-client