Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31362e302f32322d3234203d3e20323637333336.roa
File:                     34352e3233342e31362e302f32322d3234203d3e20323637333336.roa (raw, json)
Hash identifier:          wS/MPuF7SxkRCD2Kz7Byw2PQ9c+KDKHD6Y+hYjIALbQ=
Subject key identifier:   54:8D:3F:8F:1B:55:01:4C:CE:72:2E:8A:95:66:54:3B:7E:CB:4C:26
Certificate issuer:       /CN=6169655FCC21E18D6D1A60EEB20D16A8262DA561
Certificate serial:       24C5553B1F61FCDE2A238082C8B7DD4E7B757860
Authority key identifier: 61:69:65:5F:CC:21:E1:8D:6D:1A:60:EE:B2:0D:16:A8:26:2D:A5:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6169655FCC21E18D6D1A60EEB20D16A8262DA561.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31362e302f32322d3234203d3e20323637333336.roa
Signing time:             Fri 18 Aug 2023 01:17:56 +0000
ROA not before:           Fri 18 Aug 2023 01:12:56 +0000
ROA not after:            Fri 16 Aug 2024 01:17:56 +0000
asID:                     267336
IP address blocks:        45.234.16.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c5:55:3b:1f:61:fc:de:2a:23:80:82:c8:b7:dd:4e:7b:75:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6169655FCC21E18D6D1A60EEB20D16A8262DA561
        Validity
            Not Before: Aug 18 01:12:56 2023 GMT
            Not After : Aug 16 01:17:56 2024 GMT
        Subject: CN=548D3F8F1B55014CCE722E8A9566543B7ECB4C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:93:f3:34:4b:f9:b5:c5:6e:e2:bf:1d:0f:
                    e6:2e:d3:dc:bb:4e:e3:f9:80:9e:9f:6d:81:0e:56:
                    12:b0:61:7e:a8:f1:bf:1c:75:27:f1:e7:e3:e5:0b:
                    f2:78:ef:3d:88:fa:42:79:26:0c:87:03:70:35:ac:
                    34:3e:95:bb:98:8a:92:74:77:95:6e:cc:4d:9f:fe:
                    32:2a:e6:0d:c2:51:98:4b:d7:1d:7a:a2:2f:53:92:
                    0c:7e:ea:20:3e:5d:44:f2:2e:06:98:e8:38:21:1e:
                    a8:19:90:69:75:fc:0b:50:26:cb:fc:16:76:40:33:
                    03:3b:fd:c2:2e:5f:f1:7f:79:22:6a:94:dd:9c:df:
                    88:7f:ec:4c:e7:70:d0:db:6f:7b:ed:2a:5e:0e:fe:
                    d1:64:47:b0:fd:df:df:2f:33:e2:dd:a1:4e:04:90:
                    aa:93:63:02:aa:e3:fb:cc:90:ff:a9:a9:19:d2:50:
                    40:1e:47:b1:d0:4d:b5:86:4f:73:ea:83:83:a5:8e:
                    b0:02:06:fa:05:2a:a6:73:6b:91:72:fc:f9:8c:83:
                    fc:cf:7d:ba:e3:b9:f3:eb:f2:00:36:56:0f:95:42:
                    3c:d7:9c:ca:dd:ab:a5:52:95:4b:f9:09:5a:87:a8:
                    cb:08:b8:11:7a:3d:39:8c:e0:8c:8e:55:49:28:a0:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8D:3F:8F:1B:55:01:4C:CE:72:2E:8A:95:66:54:3B:7E:CB:4C:26
            X509v3 Authority Key Identifier:
                keyid:61:69:65:5F:CC:21:E1:8D:6D:1A:60:EE:B2:0D:16:A8:26:2D:A5:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/6169655FCC21E18D6D1A60EEB20D16A8262DA561.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6169655FCC21E18D6D1A60EEB20D16A8262DA561.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31362e302f32322d3234203d3e20323637333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:ba:c6:72:16:7e:fc:dd:14:3b:99:45:9d:f1:b5:18:c7:e6:
         c1:62:3c:db:7d:72:34:31:74:f8:af:08:3c:c7:58:3c:e4:20:
         4f:76:e2:a5:a3:e1:cb:31:03:ce:76:18:4f:49:6a:68:25:fa:
         a4:c2:9d:65:53:2a:18:17:ad:05:73:0c:07:26:ee:ec:a9:df:
         e0:d3:7c:59:55:dd:8b:0c:2d:17:81:d7:b9:40:db:c6:ca:32:
         cb:6b:c9:57:85:3a:e8:30:2f:05:b6:86:fb:8e:a0:12:86:c5:
         7b:a3:45:60:5b:b3:38:ef:d3:0a:06:59:14:c5:64:c4:6e:7f:
         2d:2e:b6:c7:c4:d0:1f:c0:13:c5:52:04:ac:ba:6c:9b:f9:69:
         c7:d7:f1:c1:f3:9c:ca:34:d9:3f:e5:25:ce:53:a9:4f:c7:95:
         9f:2a:4a:e9:22:5b:73:5b:26:5d:be:fe:cb:ad:fe:42:c5:96:
         e8:58:84:34:f3:90:85:cb:a3:54:c0:65:19:b7:35:48:aa:9d:
         56:77:34:00:36:8b:90:3c:bf:88:cc:90:e7:58:a1:d4:e0:0e:
         17:ef:6c:36:e2:5d:d0:35:ef:ec:e6:1f:a0:57:7e:74:ed:9b:
         1c:24:40:d1:ef:7a:41:18:37:39:17:8a:ae:0e:fd:e7:70:fd:
         aa:93:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:22 2025 by rpki-client