Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31392e302f32342d3234203d3e20323637333336.roa
File:                     34352e3233342e31392e302f32342d3234203d3e20323637333336.roa (raw, json)
Hash identifier:          Z7XqaWC7XfzwHmPZD4shp46Ivb8gLkYzP1+xZajKIoo=
Subject key identifier:   5E:A4:F2:58:B2:8A:98:A2:4F:FE:65:0F:80:B4:8F:1B:77:1C:29:68
Certificate issuer:       /CN=108C048048A7574A82BE3D8E849203BD34D76390
Certificate serial:       2FF3C2FE9EC782865884258A2CFD3FEFD4750FCB
Authority key identifier: 10:8C:04:80:48:A7:57:4A:82:BE:3D:8E:84:92:03:BD:34:D7:63:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108C048048A7574A82BE3D8E849203BD34D76390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31392e302f32342d3234203d3e20323637333336.roa
Signing time:             Fri 24 Feb 2023 13:31:24 +0000
ROA not before:           Fri 24 Feb 2023 13:26:24 +0000
ROA not after:            Fri 23 Feb 2024 13:31:24 +0000
asID:                     267336
IP address blocks:        45.234.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f3:c2:fe:9e:c7:82:86:58:84:25:8a:2c:fd:3f:ef:d4:75:0f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108C048048A7574A82BE3D8E849203BD34D76390
        Validity
            Not Before: Feb 24 13:26:24 2023 GMT
            Not After : Feb 23 13:31:24 2024 GMT
        Subject: CN=5EA4F258B28A98A24FFE650F80B48F1B771C2968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:c9:37:e7:50:b0:06:ea:a2:06:3b:45:74:
                    31:b2:a9:0b:81:0b:51:8d:8d:7d:3d:9f:c8:ab:f6:
                    0c:6e:cc:5e:ca:51:df:6a:db:c6:a0:f1:b3:8d:33:
                    76:53:0f:fa:7a:72:65:c8:85:f2:f5:f1:be:67:21:
                    ec:0b:72:c2:0d:57:fb:2c:24:ea:d0:ae:28:08:91:
                    2f:34:ba:50:4d:ac:2b:9b:21:e9:e7:2d:45:7b:92:
                    f7:53:d9:5b:2d:b7:43:c7:7c:a9:49:6e:09:1c:60:
                    c4:c8:c7:1a:08:15:08:ce:ac:eb:d4:63:27:fa:47:
                    1f:d4:38:46:c0:e4:51:4d:9a:6d:e5:b9:c8:52:45:
                    bc:b1:9f:5d:42:2e:26:94:79:cf:c7:d9:07:6a:fa:
                    ed:21:84:e2:ec:88:7e:be:bd:97:b2:a2:09:27:a1:
                    c6:05:8b:ab:55:31:9a:80:c0:8a:6f:59:97:3a:6b:
                    22:6f:96:41:07:6f:db:2b:d8:f1:35:0a:f4:eb:3a:
                    be:e0:64:58:6d:a8:6f:73:5b:ce:51:ac:3e:0a:64:
                    a6:da:d4:3e:e2:1a:ac:17:b1:bd:39:00:37:8d:15:
                    1a:d6:e1:d5:f5:f7:36:b9:74:de:8c:34:64:a3:b6:
                    34:f3:27:3e:4d:39:89:1c:7a:64:6d:6e:bf:84:74:
                    c4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A4:F2:58:B2:8A:98:A2:4F:FE:65:0F:80:B4:8F:1B:77:1C:29:68
            X509v3 Authority Key Identifier:
                keyid:10:8C:04:80:48:A7:57:4A:82:BE:3D:8E:84:92:03:BD:34:D7:63:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/108C048048A7574A82BE3D8E849203BD34D76390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108C048048A7574A82BE3D8E849203BD34D76390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31392e302f32342d3234203d3e20323637333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:7b:c7:b7:42:1d:35:7d:c2:1b:a4:33:50:26:19:c6:9d:89:
         2f:34:0c:70:80:d2:55:51:f1:14:2f:ce:f2:be:dd:d4:0d:94:
         a9:bc:5f:7f:ca:1c:62:fd:a2:74:ee:01:6f:8b:3a:8e:c8:08:
         a2:e4:01:0f:42:fd:1e:2c:4f:d2:7e:ee:fb:f7:38:b2:0f:dc:
         7b:64:bf:4b:61:22:bf:0b:db:2f:3a:d8:f1:05:a6:1b:64:0e:
         23:b0:bd:92:f8:4e:fb:16:fa:ae:6c:b2:0f:69:f0:5f:7e:d1:
         af:ff:84:74:82:d2:2d:ae:62:69:70:4b:06:e6:2c:72:d8:93:
         7d:8c:06:43:08:59:34:80:43:d8:c3:5b:2f:a5:d0:cc:08:d0:
         c5:27:80:8c:9c:a5:05:7b:8a:3b:01:a4:2d:0d:89:6d:c9:fd:
         f0:43:94:89:eb:cb:21:0f:9c:e6:6c:f4:e5:83:3c:e7:13:80:
         d6:72:cf:48:60:63:60:c3:d7:97:d6:11:56:c7:27:6a:59:61:
         aa:a3:05:df:71:56:ee:ca:70:5d:4f:b1:ae:6f:83:d4:2c:6e:
         77:ba:9f:14:c3:4d:9c:38:89:1c:2c:3c:83:bf:cf:cf:a3:01:
         10:90:6b:5d:31:7e:3f:4f:d0:14:12:5d:42:34:e3:66:96:35:
         1a:76:8f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:54 2025 by rpki-client