Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235342e302f32342d3234203d3e20323639363939.roa
File:                     34352e3139312e3235342e302f32342d3234203d3e20323639363939.roa (raw, json)
Hash identifier:          DE273K5d9PSaMXpnyqJk7dr1abYGF6JfTYPJB0yGyXA=
Subject key identifier:   6E:A8:6A:B0:79:2C:44:A1:3D:2E:50:42:BF:D2:9C:EF:B1:40:4D:DA
Certificate issuer:       /CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
Certificate serial:       23C5CC9C67E9316C7ADD8FB9AA2E9C9DDB2F3471
Authority key identifier: 75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235342e302f32342d3234203d3e20323639363939.roa
Signing time:             Tue 05 Dec 2023 16:50:09 +0000
ROA not before:           Tue 05 Dec 2023 16:45:09 +0000
ROA not after:            Tue 03 Dec 2024 16:50:09 +0000
asID:                     269699
IP address blocks:        45.191.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c5:cc:9c:67:e9:31:6c:7a:dd:8f:b9:aa:2e:9c:9d:db:2f:34:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
        Validity
            Not Before: Dec  5 16:45:09 2023 GMT
            Not After : Dec  3 16:50:09 2024 GMT
        Subject: CN=6EA86AB0792C44A13D2E5042BFD29CEFB1404DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:f9:91:b4:62:9d:db:16:64:10:f4:b7:d9:
                    23:96:10:40:49:5b:a1:70:3e:07:62:51:a7:2a:d9:
                    76:8a:73:e1:af:00:f2:32:5d:95:41:b3:c9:4f:56:
                    16:e1:51:6c:47:dc:34:c8:97:a5:6f:8d:f2:8b:9c:
                    3a:4f:ea:49:34:6a:b3:06:1b:d6:d0:90:4f:90:97:
                    4b:40:c5:aa:1c:b7:7c:2f:e4:44:c3:72:76:34:2f:
                    88:27:88:7e:de:84:93:80:b5:00:a2:18:6e:f7:29:
                    cd:ea:d7:24:22:d5:de:2b:d7:78:e0:d3:3d:6a:40:
                    a2:61:9d:6d:97:b5:24:b3:1e:35:80:65:40:6a:8f:
                    40:90:ed:31:de:87:1c:66:a6:ec:25:2c:70:04:a1:
                    92:ac:19:d8:31:b9:45:b1:19:08:a9:f3:06:05:db:
                    7a:33:62:46:fd:7e:f4:3c:ed:7c:4a:f9:c6:a3:fd:
                    13:2d:17:f4:a7:48:a3:60:93:bd:ae:de:bc:5b:0e:
                    a8:3f:7a:65:93:c7:3f:04:95:19:3f:2d:ce:3c:8f:
                    9c:ad:a9:d1:0a:a3:4f:41:3b:6e:31:dc:38:6e:4a:
                    6e:47:73:58:ca:79:9c:eb:40:94:d3:07:81:0a:db:
                    1c:90:e4:44:1f:21:55:99:70:52:50:1f:37:e6:60:
                    c1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A8:6A:B0:79:2C:44:A1:3D:2E:50:42:BF:D2:9C:EF:B1:40:4D:DA
            X509v3 Authority Key Identifier:
                keyid:75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235342e302f32342d3234203d3e20323639363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:67:49:66:35:d5:b1:ca:ae:72:cf:43:ee:e5:be:78:43:
         70:b8:75:b1:dc:1d:9b:a8:b4:0f:93:9c:ab:b4:ab:dd:5a:64:
         94:93:17:89:4f:d5:91:b0:44:ad:e5:c4:12:13:01:4b:4d:4f:
         4d:67:4d:12:6f:be:07:57:88:ef:66:12:b5:0a:d5:b9:eb:9f:
         24:29:b8:36:e7:b6:87:13:97:f9:28:3a:1b:a6:48:e5:69:e8:
         78:34:25:a0:18:c9:da:a4:3a:ca:09:77:20:11:36:43:8a:fc:
         91:09:80:2d:de:1b:33:2f:71:59:39:c3:09:f3:9a:ef:8e:94:
         23:f9:2d:d2:da:76:d3:a1:6f:02:c9:29:4d:7e:f0:13:77:5b:
         80:22:d9:aa:cd:25:46:24:28:52:8d:d6:e6:f6:82:60:dd:ae:
         8d:44:0f:47:a0:b9:76:2e:2f:7d:c5:e7:29:d9:1f:dc:43:d6:
         21:48:38:27:15:a8:41:73:6c:b5:4e:92:d9:fc:37:71:c8:11:
         d0:8f:3c:c4:f8:3d:e7:ba:5c:c8:95:fa:2e:5f:14:1a:a9:94:
         90:65:87:88:c2:c8:1b:bd:51:21:18:e0:5e:cc:40:8b:8c:e8:
         4f:8f:d2:2a:42:91:52:3b:ed:af:3e:16:5d:71:0c:92:fd:76:
         e4:36:4f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:22:24 2025 by rpki-client