Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32332e302f32342d3234203d3e20323638323737.roa
File:                     34352e3233372e32332e302f32342d3234203d3e20323638323737.roa (raw, json)
Hash identifier:          /MGkOP+wQ1kNtoOmbtcMM4fKJWejWhCCGxpI/7gszAU=
Subject key identifier:   09:1E:EE:C7:C2:61:6E:79:9D:49:33:DC:DF:A2:B9:AB:74:B5:C8:10
Certificate issuer:       /CN=E9F384C706E4A5CEF9A232E6DB03918B52C871F1
Certificate serial:       10F8AF5EFDA81AE36AE6411507308C23D36FF59D
Authority key identifier: E9:F3:84:C7:06:E4:A5:CE:F9:A2:32:E6:DB:03:91:8B:52:C8:71:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32332e302f32342d3234203d3e20323638323737.roa
Signing time:             Sun 20 Aug 2023 15:42:54 +0000
ROA not before:           Sun 20 Aug 2023 15:37:54 +0000
ROA not after:            Sun 18 Aug 2024 15:42:54 +0000
asID:                     268277
IP address blocks:        45.237.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f8:af:5e:fd:a8:1a:e3:6a:e6:41:15:07:30:8c:23:d3:6f:f5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9F384C706E4A5CEF9A232E6DB03918B52C871F1
        Validity
            Not Before: Aug 20 15:37:54 2023 GMT
            Not After : Aug 18 15:42:54 2024 GMT
        Subject: CN=091EEEC7C2616E799D4933DCDFA2B9AB74B5C810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:7a:38:16:e9:eb:ca:e9:fe:f5:cb:15:d9:
                    d8:17:81:51:46:d6:f8:f9:86:58:af:a1:26:21:04:
                    34:56:ab:49:72:21:1d:70:c9:59:31:7b:d6:07:27:
                    37:b9:fd:e9:43:46:8a:77:15:75:a4:48:9c:32:d8:
                    ab:f9:f9:78:b4:bd:60:95:5b:45:bb:4b:ba:67:f1:
                    cc:b7:70:91:9c:4c:a2:e0:43:96:c7:21:c1:10:e7:
                    b8:6d:45:d5:ee:e6:32:d3:a4:7b:dd:1f:ba:66:96:
                    3a:76:fd:a4:89:89:f9:0e:6d:80:68:09:5c:ee:4d:
                    d1:13:ca:fb:71:37:44:73:ed:45:a1:31:dc:c0:c8:
                    58:08:5a:64:d3:48:74:b1:12:4f:2a:0d:d6:04:1f:
                    9a:f2:5e:79:27:24:f0:d4:16:35:3f:22:12:47:d8:
                    4e:4a:24:2c:12:8e:6d:cd:69:74:a5:70:81:b0:7e:
                    5b:d8:da:e5:94:0b:1b:dc:57:5b:3c:b5:a8:65:99:
                    4d:0b:d2:50:5e:e3:97:cc:11:e4:b4:88:7a:07:d5:
                    24:9d:a4:05:b0:a4:3e:03:f8:d4:02:10:8a:fa:74:
                    a9:58:7c:3b:1b:a3:fe:ae:27:af:7f:53:52:4b:75:
                    7f:d9:37:60:6d:b4:6f:8c:da:53:34:49:a8:8f:1c:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1E:EE:C7:C2:61:6E:79:9D:49:33:DC:DF:A2:B9:AB:74:B5:C8:10
            X509v3 Authority Key Identifier:
                keyid:E9:F3:84:C7:06:E4:A5:CE:F9:A2:32:E6:DB:03:91:8B:52:C8:71:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32332e302f32342d3234203d3e20323638323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:5d:9f:09:a7:61:48:99:82:04:83:f7:87:00:f1:e9:32:c4:
         7c:e0:b6:df:b3:18:a5:c6:fd:1a:08:48:15:4f:8a:0a:b9:68:
         7c:4c:44:ee:88:75:76:98:d7:b3:53:a0:e0:8e:ac:64:f1:d2:
         db:29:9c:30:fc:9c:bd:3e:91:be:01:4a:d1:84:cf:dc:9d:6b:
         ad:7a:d6:16:75:80:46:8b:66:3f:61:d8:09:4c:20:02:7c:13:
         b2:83:35:3c:1f:9b:b8:05:88:26:6e:35:91:18:f8:c7:49:c7:
         55:87:b4:62:a0:96:fb:a8:15:3b:d6:6d:fb:f4:e4:f5:db:32:
         05:63:9a:81:1e:cc:1f:16:2f:f2:f4:d8:b9:39:b5:3e:6a:f8:
         37:99:05:da:e3:c2:66:10:6b:ef:87:3a:e8:b1:a1:bb:78:fd:
         0a:0c:2c:5f:bb:71:56:73:c4:53:15:64:29:f0:c5:ea:2f:88:
         b3:30:49:be:e2:45:8b:5e:e0:96:01:68:9c:68:65:df:c9:f7:
         00:31:78:e1:1d:ea:f0:65:47:22:6a:60:a2:6d:f8:d0:30:ae:
         2d:21:ac:e4:6f:5e:68:68:b1:6a:8d:8f:97:2a:51:8a:a5:5a:
         ab:67:54:12:c1:1e:1c:ff:4e:0e:0e:1f:fa:1a:c6:cd:02:63:
         44:a0:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:51 2025 by rpki-client