Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36302e302f32332d3233203d3e20323638313837.roa
File:                     34352e3137312e36302e302f32332d3233203d3e20323638313837.roa (raw, json)
Hash identifier:          r0zdEb69ur7Im5Q9q03ExSkT41biqfNcT0+SxROpUGM=
Subject key identifier:   93:32:0E:3F:9E:63:CE:64:53:24:D9:A1:49:DF:15:84:62:25:75:07
Certificate issuer:       /CN=02CE5A602E5A896CBDC5293E334F2E37079D18D4
Certificate serial:       6C41E85CED6EA8FEBCA4901158AAF265C5FAB556
Authority key identifier: 02:CE:5A:60:2E:5A:89:6C:BD:C5:29:3E:33:4F:2E:37:07:9D:18:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36302e302f32332d3233203d3e20323638313837.roa
Signing time:             Sun 11 Sep 2022 14:20:02 +0000
ROA not before:           Sun 11 Sep 2022 14:15:02 +0000
ROA not after:            Sun 10 Sep 2023 14:20:02 +0000
asID:                     268187
IP address blocks:        45.171.60.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:41:e8:5c:ed:6e:a8:fe:bc:a4:90:11:58:aa:f2:65:c5:fa:b5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CE5A602E5A896CBDC5293E334F2E37079D18D4
        Validity
            Not Before: Sep 11 14:15:02 2022 GMT
            Not After : Sep 10 14:20:02 2023 GMT
        Subject: CN=93320E3F9E63CE645324D9A149DF158462257507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:0d:c3:aa:84:10:b3:2c:ee:0e:10:57:d1:
                    b1:6d:fb:3b:98:bd:0a:66:73:7b:6c:a3:e0:e9:2a:
                    40:b6:45:89:00:26:cd:87:d1:46:97:2f:7b:e3:16:
                    7d:ca:0c:9d:3a:5e:b4:75:46:dd:a0:15:f4:fb:29:
                    97:b6:b4:42:a9:f5:ee:f2:4c:ac:10:3b:67:17:14:
                    1f:e7:e0:c0:e7:52:75:f2:ea:e4:64:58:7d:9c:56:
                    6c:0a:3b:33:f0:52:6d:77:56:ef:ad:2b:ae:e2:51:
                    9c:dc:05:43:69:5c:36:26:e7:ea:d0:c4:ee:70:23:
                    86:55:c9:62:48:b3:4f:aa:e6:fa:e8:25:b7:e6:66:
                    30:89:95:e8:e4:6a:e1:0b:b5:5b:f0:1a:7f:ad:e5:
                    e6:1b:cb:64:2b:2d:55:a4:81:0b:4b:23:a5:29:65:
                    9c:ab:37:92:e3:fc:aa:bb:ee:26:91:35:a9:db:f9:
                    75:a1:6a:cc:ac:fe:d0:48:d6:86:c4:0e:e9:dd:4a:
                    72:23:6c:2c:a1:4c:67:3f:91:b1:13:11:fc:0c:57:
                    5c:7b:be:49:74:21:77:76:26:34:38:d3:ec:15:44:
                    ce:7b:8d:65:4c:6b:50:b2:aa:62:76:9f:39:c5:64:
                    19:49:8d:5e:3b:c9:eb:14:af:d6:c9:84:ef:bb:72:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:32:0E:3F:9E:63:CE:64:53:24:D9:A1:49:DF:15:84:62:25:75:07
            X509v3 Authority Key Identifier:
                keyid:02:CE:5A:60:2E:5A:89:6C:BD:C5:29:3E:33:4F:2E:37:07:9D:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36302e302f32332d3233203d3e20323638313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:ca:8c:e3:6d:9e:c0:d9:da:9b:ac:e6:98:29:18:5b:e6:9e:
         2b:de:91:44:f3:8e:52:0c:98:c5:68:1a:76:87:d8:91:ac:4f:
         43:1a:ec:12:3c:ae:73:20:f8:b8:7e:4a:a9:df:03:dc:66:8d:
         e4:58:06:f2:f1:38:be:b0:f0:a9:79:db:1c:3b:8c:07:a7:bd:
         73:e8:4e:18:a0:19:3a:ea:47:0e:e3:99:15:35:53:a1:42:c9:
         8e:cd:ff:a9:25:ce:86:b4:e7:91:bb:a5:cd:fe:af:25:a4:07:
         07:08:a2:fb:66:33:a4:78:0c:8a:1e:f2:42:7a:9d:29:d0:fe:
         06:d5:06:35:2b:aa:9c:33:ae:ed:eb:6c:11:57:20:28:d3:d6:
         5a:97:c8:ea:0e:16:df:72:07:4e:5d:7e:7c:b6:f2:b7:15:36:
         f4:a6:05:71:f3:60:e9:fc:26:57:fa:46:61:16:64:ad:11:4c:
         31:87:60:84:cc:3d:35:6c:30:cc:fc:61:38:ef:30:1a:b4:69:
         bf:da:1f:53:1d:a3:d4:40:49:d5:3e:51:3a:56:ab:5b:26:46:
         22:7c:bc:8c:7b:f9:72:ad:3a:6b:22:0a:85:07:27:3f:72:da:
         3f:83:2d:d3:66:22:b2:42:7c:ab:05:b5:bf:43:59:7a:0c:29:
         cc:aa:38:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:30 2025 by rpki-client