Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/34352e3136332e37302e302f32332d3233203d3e20323638353539.roa
File:                     34352e3136332e37302e302f32332d3233203d3e20323638353539.roa (raw, json)
Hash identifier:          uHyytxF+8xzdXPVMsJy5BZEL9n50mm+nM0XQX23JiZY=
Subject key identifier:   53:89:11:83:84:14:C1:56:77:56:BB:9B:E8:97:76:90:F9:FA:95:C3
Certificate issuer:       /CN=D952D52C9488DCC508F4E6D82D87F98C778EB09B
Certificate serial:       332DCE57ABC3F3AC228D580130D995E97D521090
Authority key identifier: D9:52:D5:2C:94:88:DC:C5:08:F4:E6:D8:2D:87:F9:8C:77:8E:B0:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D952D52C9488DCC508F4E6D82D87F98C778EB09B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/34352e3136332e37302e302f32332d3233203d3e20323638353539.roa
Signing time:             Fri 17 May 2024 19:33:05 +0000
ROA not before:           Fri 17 May 2024 19:28:05 +0000
ROA not after:            Fri 16 May 2025 19:33:05 +0000
asID:                     268559
IP address blocks:        45.163.70.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2d:ce:57:ab:c3:f3:ac:22:8d:58:01:30:d9:95:e9:7d:52:10:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D952D52C9488DCC508F4E6D82D87F98C778EB09B
        Validity
            Not Before: May 17 19:28:05 2024 GMT
            Not After : May 16 19:33:05 2025 GMT
        Subject: CN=538911838414C1567756BB9BE8977690F9FA95C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:b5:db:76:7f:e2:74:3a:e0:15:76:ed:7e:
                    8a:43:02:d9:0f:dc:e4:b3:92:59:b2:99:71:63:0a:
                    68:60:33:c8:f0:08:2e:0b:25:5a:43:e0:48:93:38:
                    8a:a6:f7:af:86:11:70:7b:6c:9f:3b:4a:64:a5:02:
                    68:24:ba:00:b3:f0:0c:40:b2:44:31:3c:c8:7b:1a:
                    d2:73:51:f3:9d:1f:b9:54:12:f6:79:1f:4c:d4:a2:
                    4a:60:47:fc:19:85:90:24:5f:8f:cf:30:8b:05:a6:
                    0b:89:53:eb:c7:52:de:69:ca:13:9b:6f:ef:d4:f5:
                    44:b1:26:73:92:9e:75:bb:62:5b:eb:e0:44:c8:b9:
                    43:94:af:e8:49:a8:8e:83:b6:94:25:e8:46:ac:97:
                    67:45:2e:73:b6:44:da:fb:62:d4:d6:5d:09:91:4f:
                    5a:66:49:62:28:d1:23:de:72:6a:5d:24:30:4e:0f:
                    df:9a:b4:23:41:6e:d5:01:3c:ee:7a:ce:aa:3c:bd:
                    92:43:63:4e:41:11:9e:30:79:a2:f4:e4:f0:69:12:
                    a3:1d:52:26:5d:a0:29:aa:f5:32:6a:0f:96:0f:8e:
                    59:72:58:31:d1:28:a3:ad:b8:73:27:a4:66:85:4b:
                    a2:77:67:ff:ee:65:c9:e0:6b:b9:df:fa:9d:9c:fa:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:89:11:83:84:14:C1:56:77:56:BB:9B:E8:97:76:90:F9:FA:95:C3
            X509v3 Authority Key Identifier:
                keyid:D9:52:D5:2C:94:88:DC:C5:08:F4:E6:D8:2D:87:F9:8C:77:8E:B0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/D952D52C9488DCC508F4E6D82D87F98C778EB09B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D952D52C9488DCC508F4E6D82D87F98C778EB09B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/34352e3136332e37302e302f32332d3233203d3e20323638353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:85:6b:93:c2:cc:a0:36:e5:20:5c:ff:89:02:e8:10:cc:5a:
         2f:5a:3c:d6:04:df:02:a6:98:7d:78:0e:c0:54:73:e7:6c:e8:
         ee:91:2c:92:c2:60:6e:08:a9:a7:ad:d7:27:8f:47:bf:e3:ed:
         45:f1:23:99:11:20:18:77:9b:55:51:b0:dc:5c:50:08:87:df:
         35:43:af:e6:cd:24:aa:4d:3b:fa:62:6a:3d:df:95:34:68:84:
         87:89:f4:67:44:d7:fc:c5:61:cd:95:06:cf:25:f3:13:33:87:
         47:21:28:25:e4:4e:fa:94:c3:9c:be:8c:f8:1b:80:e1:39:f0:
         db:09:3a:73:d4:ce:47:76:e2:87:38:dc:b6:f4:06:d7:89:33:
         bd:98:b6:cf:bf:39:09:a4:6a:99:be:8f:a2:92:b6:06:7b:f3:
         cc:c4:3b:3f:42:b8:c7:27:6c:4f:8c:2b:f9:46:2d:57:77:2a:
         fe:f7:05:b0:de:8e:25:38:fb:47:b8:9f:9a:6e:d2:67:07:eb:
         65:ff:41:e3:43:34:83:41:4f:59:9d:cf:a8:8a:26:93:5c:cc:
         0c:7a:43:50:f8:71:da:17:2b:01:1e:da:44:aa:57:6c:73:f5:
         8d:50:84:2f:af:34:d2:d4:88:f6:f8:39:14:4d:d3:35:c6:87:
         a8:89:6c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:33 2025 by rpki-client