Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/34352e3136332e36382e302f32322d3232203d3e20323638353539.roa
File:                     34352e3136332e36382e302f32322d3232203d3e20323638353539.roa (raw, json)
Hash identifier:          hQPcJre1n1mnKvj6XDHZbeq4DV8oZsyhLITQ7EhEkE4=
Subject key identifier:   E1:30:58:44:BF:65:B2:12:7B:E7:BF:EA:65:AB:3F:D5:0C:B4:39:74
Certificate issuer:       /CN=D952D52C9488DCC508F4E6D82D87F98C778EB09B
Certificate serial:       6F0DE5B16AC62AD046A346B8A54419955CB186A6
Authority key identifier: D9:52:D5:2C:94:88:DC:C5:08:F4:E6:D8:2D:87:F9:8C:77:8E:B0:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D952D52C9488DCC508F4E6D82D87F98C778EB09B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/34352e3136332e36382e302f32322d3232203d3e20323638353539.roa
Signing time:             Fri 17 May 2024 19:33:14 +0000
ROA not before:           Fri 17 May 2024 19:28:14 +0000
ROA not after:            Fri 16 May 2025 19:33:14 +0000
asID:                     268559
IP address blocks:        45.163.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0d:e5:b1:6a:c6:2a:d0:46:a3:46:b8:a5:44:19:95:5c:b1:86:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D952D52C9488DCC508F4E6D82D87F98C778EB09B
        Validity
            Not Before: May 17 19:28:14 2024 GMT
            Not After : May 16 19:33:14 2025 GMT
        Subject: CN=E1305844BF65B2127BE7BFEA65AB3FD50CB43974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:67:87:e5:da:ae:9f:c6:ee:37:30:81:70:
                    3c:07:f8:bf:aa:00:d2:5e:0b:ee:f4:36:3e:69:36:
                    df:dc:68:65:10:77:51:9f:7a:b2:04:ea:9f:01:f1:
                    47:c7:b5:1e:31:7f:80:e2:46:c2:7b:2b:fe:d8:08:
                    0c:7d:f4:93:56:f1:38:65:d6:ea:38:96:16:00:51:
                    8e:5c:d5:a6:44:b3:56:4c:74:79:26:eb:52:67:60:
                    de:d0:a6:53:50:c6:28:08:c0:a7:de:44:f5:de:d3:
                    b7:50:b6:3f:a2:a4:55:54:fe:b2:59:d8:23:e1:8c:
                    61:0d:15:10:3a:b4:02:78:be:44:24:9a:9c:18:01:
                    54:98:a7:51:8b:de:26:6f:84:49:d1:3a:e5:a6:bc:
                    54:80:24:f3:0e:f2:14:27:0c:5e:44:ac:20:fc:7d:
                    0c:87:d4:c9:ee:8e:99:d7:78:db:cd:67:0b:cc:7b:
                    69:5e:c9:29:25:cc:16:29:40:80:64:c1:df:76:5d:
                    fd:ae:24:8c:f3:d9:e5:c8:86:c3:2f:7f:94:e0:f8:
                    ef:e0:c2:b4:df:09:df:3a:fa:fb:c9:14:9b:3e:29:
                    05:e9:c3:03:63:27:b2:99:12:c2:ef:78:4c:57:2a:
                    e7:1e:62:c9:f1:13:11:a2:75:77:8f:0d:09:d3:c7:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:30:58:44:BF:65:B2:12:7B:E7:BF:EA:65:AB:3F:D5:0C:B4:39:74
            X509v3 Authority Key Identifier:
                keyid:D9:52:D5:2C:94:88:DC:C5:08:F4:E6:D8:2D:87:F9:8C:77:8E:B0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/D952D52C9488DCC508F4E6D82D87F98C778EB09B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D952D52C9488DCC508F4E6D82D87F98C778EB09B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/34352e3136332e36382e302f32322d3232203d3e20323638353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:78:c2:8e:15:e8:20:a2:cf:a3:97:cd:f4:09:62:3c:94:e9:
         ad:5e:09:10:ac:5d:f9:56:21:06:99:75:cc:1a:ad:ec:43:b1:
         d3:7f:72:14:4d:8b:6b:1b:f4:37:87:c7:0c:ac:f7:67:73:d7:
         08:02:b6:b3:00:d3:33:bd:d1:9f:be:10:f5:c8:0b:78:df:4a:
         e3:76:d5:c4:48:60:40:8d:b7:e3:07:85:e9:33:f8:0a:aa:9e:
         b6:c1:0a:0c:18:0a:fd:52:de:07:76:14:83:9e:16:7a:14:8f:
         8c:39:78:af:e4:d3:4b:27:62:ec:6e:ed:ff:99:60:e0:28:b1:
         36:ee:87:4c:22:c9:58:3e:9a:9d:8c:6f:b7:1a:89:4d:16:c8:
         27:22:b8:d2:3f:26:65:f1:58:a0:41:11:3f:a7:87:1f:09:73:
         19:5e:69:05:43:53:1d:14:1e:14:a1:91:63:1b:ac:7e:06:80:
         52:ad:7c:7d:52:90:72:9f:ea:8e:bd:b5:7e:5a:fb:c0:1c:d0:
         bb:06:f8:9e:19:2f:6e:06:20:de:1f:f9:cf:18:d0:cc:80:29:
         59:08:63:74:af:3a:04:bf:7a:59:d5:4e:4c:75:ce:76:39:3d:
         bf:c1:e1:6c:cb:11:99:ae:bb:9a:6b:32:38:60:f7:99:91:8d:
         5e:c5:28:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:26:30 2025 by rpki-client