Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230362e302f32342d3234203d3e20323639313439.roa
File:                     34352e3138302e3230362e302f32342d3234203d3e20323639313439.roa (raw, json)
Hash identifier:          n6hNvmdvwmQSJ1aJ+d0CpM44PtkSCI24xHnr/Qh1zqU=
Subject key identifier:   BC:EB:58:E7:9F:E1:91:60:79:46:63:91:1E:64:C4:B8:F6:09:73:22
Certificate issuer:       /CN=DC49838DC0E82146CA3629580ACAA15681626498
Certificate serial:       5762EDDA96ADA1A8C6816E58979297A8C67E33BD
Authority key identifier: DC:49:83:8D:C0:E8:21:46:CA:36:29:58:0A:CA:A1:56:81:62:64:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC49838DC0E82146CA3629580ACAA15681626498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230362e302f32342d3234203d3e20323639313439.roa
Signing time:             Fri 17 Jun 2022 14:02:18 +0000
ROA not before:           Fri 17 Jun 2022 13:57:18 +0000
ROA not after:            Fri 16 Jun 2023 14:02:18 +0000
asID:                     269149
IP address blocks:        45.180.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:62:ed:da:96:ad:a1:a8:c6:81:6e:58:97:92:97:a8:c6:7e:33:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC49838DC0E82146CA3629580ACAA15681626498
        Validity
            Not Before: Jun 17 13:57:18 2022 GMT
            Not After : Jun 16 14:02:18 2023 GMT
        Subject: CN=BCEB58E79FE19160794663911E64C4B8F6097322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:e4:c7:aa:30:7e:82:3b:37:5d:19:71:2d:
                    89:52:3f:c3:38:c1:c9:b0:ed:df:fc:11:f3:a7:fe:
                    0d:9c:1b:24:ea:fa:14:e3:5b:e0:94:eb:1f:e0:02:
                    58:37:1a:2f:cd:51:a3:ae:85:ca:f2:ab:5a:9b:e0:
                    e4:10:f4:0d:08:7c:44:fb:68:20:08:8c:7e:6e:af:
                    1a:99:b5:2d:ed:7c:4d:c5:3b:63:0b:47:7b:89:41:
                    74:71:17:35:78:05:44:36:8f:04:65:79:dd:8b:90:
                    a7:db:e0:ea:7d:02:c9:b5:dc:30:fa:0d:49:07:e3:
                    99:33:82:c4:f4:46:52:59:28:44:8f:ed:c7:17:34:
                    cc:1e:a1:58:d9:61:26:46:20:1f:94:35:b1:09:66:
                    7a:dd:27:a2:be:27:5f:66:a2:bb:ed:fc:19:ac:34:
                    ca:95:43:0b:c5:1c:70:09:2e:70:be:a3:c4:6b:0c:
                    70:d0:94:a9:b7:cf:b1:2c:26:49:36:5c:dc:7e:20:
                    fb:ae:2b:b3:35:60:63:c2:79:62:16:89:16:71:4a:
                    2d:b8:17:b2:69:e4:d2:50:03:e4:de:a6:57:2f:78:
                    9a:48:cf:85:0d:7f:5f:4b:9a:c1:49:07:cb:e6:35:
                    a9:76:69:50:8a:5c:f9:b2:9f:9a:b7:a6:36:61:e1:
                    ac:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EB:58:E7:9F:E1:91:60:79:46:63:91:1E:64:C4:B8:F6:09:73:22
            X509v3 Authority Key Identifier:
                keyid:DC:49:83:8D:C0:E8:21:46:CA:36:29:58:0A:CA:A1:56:81:62:64:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/DC49838DC0E82146CA3629580ACAA15681626498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC49838DC0E82146CA3629580ACAA15681626498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230362e302f32342d3234203d3e20323639313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:18:d6:a8:10:99:20:2b:94:d6:60:4e:d2:12:95:0e:91:81:
         15:71:5a:29:ed:61:0c:4e:2d:0d:38:ff:45:8a:bc:d5:af:f3:
         ca:f7:56:d8:51:4d:f9:47:e9:67:32:25:d9:b2:4f:f2:a0:2b:
         62:17:2c:d2:90:80:28:41:c1:b7:8d:0f:eb:52:01:f3:88:4e:
         72:fc:f8:e5:96:0e:37:a5:61:45:48:d5:95:aa:a6:e9:b2:47:
         10:35:0f:75:d4:b7:fb:28:71:e0:08:b0:98:06:e3:c5:26:0b:
         32:4b:8c:e9:dd:66:85:9c:21:17:85:d6:d3:55:4f:17:52:00:
         1a:2a:6f:86:db:4e:9b:93:e6:29:7f:5a:ed:b6:d3:39:ea:68:
         4e:8f:d5:21:bb:0d:e3:58:2e:47:2e:c1:09:e7:6b:83:1e:41:
         9c:25:91:bc:31:88:c1:cf:8e:00:51:76:6f:3e:97:e3:6c:eb:
         5b:27:48:5e:06:32:27:8a:bf:f8:2f:0a:5d:78:d0:d1:fe:06:
         88:97:89:b7:e0:1c:b0:d6:54:85:4a:c6:e3:a3:61:57:aa:45:
         50:34:af:fb:63:49:91:ca:9b:b7:20:31:5b:c0:55:28:70:b7:
         52:a9:8b:b4:1e:be:19:db:8c:a3:eb:27:8d:46:08:5b:8c:50:
         84:4d:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:05 2025 by rpki-client