Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e302e302f32342d3234203d3e20323638333837.roa
File:                     34352e3136302e302e302f32342d3234203d3e20323638333837.roa (raw, json)
Hash identifier:          nGDVmvDU8vcFJYXmZDQ68iutHwwkL/tM5ZKzD3lkDd4=
Subject key identifier:   58:16:A8:5E:89:92:93:45:40:B5:DC:B8:06:9F:15:D4:2B:B5:65:AD
Certificate issuer:       /CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
Certificate serial:       42EDD86FECD7F9F3E5B6DA2B0643224EAE3CBE61
Authority key identifier: 49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e302e302f32342d3234203d3e20323638333837.roa
Signing time:             Mon 12 Jul 2021 20:25:08 +0000
ROA not before:           Mon 12 Jul 2021 20:20:08 +0000
ROA not after:            Mon 11 Jul 2022 20:25:08 +0000
asID:                     268387
IP address blocks:        45.160.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ed:d8:6f:ec:d7:f9:f3:e5:b6:da:2b:06:43:22:4e:ae:3c:be:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
        Validity
            Not Before: Jul 12 20:20:08 2021 GMT
            Not After : Jul 11 20:25:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:75:56:b3:7b:e7:bd:40:c7:3b:49:87:9a:
                    29:5f:ae:3e:23:c1:9d:82:c8:05:53:bb:3f:fa:54:
                    47:99:3a:a7:03:88:73:05:48:a4:09:02:3c:e0:4e:
                    39:96:99:e2:35:e8:10:fb:75:c4:bd:0e:41:28:04:
                    78:6e:f8:67:5b:0b:81:b4:8e:14:e9:8b:15:f4:69:
                    30:1a:c0:81:af:10:b3:9d:14:e0:b8:00:50:08:18:
                    91:d5:ee:0c:b5:0e:2a:19:63:67:31:a6:0b:e2:cd:
                    0c:d0:0d:6f:76:22:86:4f:2a:31:13:19:2b:44:d5:
                    44:c3:4f:82:97:cd:25:97:42:9b:ed:0c:71:be:cb:
                    f7:68:f4:42:3f:b3:48:26:af:37:3f:cd:dc:05:45:
                    6e:31:ac:66:13:87:1e:f5:67:09:ac:35:0e:5f:57:
                    a7:bc:03:27:dc:33:84:da:76:19:69:7b:a6:93:90:
                    66:00:1c:0c:ba:10:57:f9:9c:7b:71:e6:38:ee:b4:
                    31:1c:34:44:a1:34:ac:52:1d:e1:c9:03:fb:71:47:
                    33:fc:e1:d0:cf:f2:0b:df:33:a9:68:51:07:2e:7c:
                    a2:d2:22:7f:e5:a7:5e:96:23:e9:1a:22:85:c4:62:
                    06:d5:fa:9f:28:fe:cc:84:0a:86:0e:44:74:6d:0e:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:16:A8:5E:89:92:93:45:40:B5:DC:B8:06:9F:15:D4:2B:B5:65:AD
            X509v3 Authority Key Identifier:
                keyid:49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e302e302f32342d3234203d3e20323638333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:e0:1d:cf:06:a5:82:23:80:0b:72:bc:f0:13:d5:91:30:
         6b:2c:23:4f:19:37:7a:12:e7:15:b9:4b:20:7f:70:fe:39:ea:
         b3:f6:b2:60:92:0d:67:49:f4:e2:3b:81:66:d3:8c:91:77:c0:
         a4:9c:2c:0d:c6:3a:df:82:74:5d:92:13:14:da:06:26:8a:a5:
         54:de:ec:a1:f1:67:1a:1e:7a:2b:33:19:a8:c8:1c:78:5a:e9:
         c8:ce:73:00:4e:a9:70:5e:22:a1:66:af:1c:be:0e:c5:b5:35:
         b5:94:88:4d:0e:30:44:d4:d3:c9:93:b0:19:47:4d:2b:b3:f4:
         11:b8:b9:e1:3c:b7:0f:0c:07:67:c8:e9:dc:7c:1a:5c:8e:0b:
         49:99:08:e9:05:e7:36:a4:ed:41:7f:f8:06:e3:2a:91:f6:da:
         b3:56:c4:09:24:68:6e:a6:d0:6f:cc:d1:53:a1:43:8d:3c:85:
         0c:cb:4a:27:9d:7a:68:fa:9d:a7:2b:89:36:89:1c:3c:6c:cb:
         4b:37:e3:9a:85:8b:26:c0:66:2a:84:cd:43:4a:45:7c:1a:e7:
         a7:32:30:a7:4e:90:17:be:a4:80:33:c7:bd:8a:b0:18:85:02:
         b5:70:b3:9e:e0:7d:27:b3:50:2f:2a:ca:3e:0a:7f:5a:0d:0c:
         91:ae:c1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:50:05 2025 by rpki-client