Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiJ2SCddXHCTRufbMDXyCfKmMM8sf5ehXWCEZiQJYAYx/0/34352e3233322e3132382e302f32322d3232203d3e20323637323638.roa
File:                     34352e3233322e3132382e302f32322d3232203d3e20323637323638.roa (raw, json)
Hash identifier:          edgjWePFsd4xXeNjIKP95BguTIzLMkX4G3V40hMuFoQ=
Subject key identifier:   F4:B7:7B:00:DA:D7:5F:26:56:74:59:9E:B2:6E:7A:8A:7F:77:E3:01
Certificate issuer:       /CN=F7749D7484D7AD3E363034A189502B2D22BA8726
Certificate serial:       7473CE75CF89D40DEF2DD3692E601E32251AB9AA
Authority key identifier: F7:74:9D:74:84:D7:AD:3E:36:30:34:A1:89:50:2B:2D:22:BA:87:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7749D7484D7AD3E363034A189502B2D22BA8726.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiJ2SCddXHCTRufbMDXyCfKmMM8sf5ehXWCEZiQJYAYx/0/34352e3233322e3132382e302f32322d3232203d3e20323637323638.roa
Signing time:             Sat 05 Aug 2023 19:08:28 +0000
ROA not before:           Sat 05 Aug 2023 19:03:28 +0000
ROA not after:            Sat 03 Aug 2024 19:08:28 +0000
asID:                     267268
IP address blocks:        45.232.128.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:73:ce:75:cf:89:d4:0d:ef:2d:d3:69:2e:60:1e:32:25:1a:b9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7749D7484D7AD3E363034A189502B2D22BA8726
        Validity
            Not Before: Aug  5 19:03:28 2023 GMT
            Not After : Aug  3 19:08:28 2024 GMT
        Subject: CN=F4B77B00DAD75F265674599EB26E7A8A7F77E301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:8d:9f:95:fe:93:e2:41:af:26:4e:d4:82:
                    94:47:27:77:7d:da:35:4b:cb:f5:b0:f3:f0:ee:2c:
                    7e:91:70:1c:46:9e:04:80:4d:68:92:7f:ed:8a:cd:
                    e8:2a:e8:32:e5:5f:01:04:23:85:78:b1:23:6b:07:
                    43:58:67:3d:79:3f:4f:85:5f:db:51:16:a5:38:6e:
                    f8:8f:a5:9c:be:08:58:e8:1c:b0:bb:bf:e9:c5:fe:
                    fd:fe:b9:87:39:fb:04:3d:c1:49:d1:e5:ca:49:fe:
                    87:fa:73:14:3a:ea:3f:e7:06:94:bb:3d:e8:d8:c1:
                    50:34:ce:c5:85:f5:0b:69:45:fc:d0:44:73:4a:4c:
                    b1:e3:fe:31:4f:fc:7f:10:ee:5d:8a:e7:2e:f4:cd:
                    12:87:ff:ee:d0:64:9f:ac:96:ae:e9:ca:e3:27:f1:
                    65:d9:ee:bb:df:98:b4:5f:89:b8:be:1b:cc:dc:2f:
                    16:26:62:64:30:57:9c:d6:83:03:86:40:69:ea:0e:
                    0d:45:fa:79:18:32:35:a4:9b:d5:91:ae:3d:14:11:
                    96:92:90:5c:4d:88:fc:20:2d:34:27:c0:ec:ff:58:
                    05:c0:20:4d:9f:e6:b1:9e:93:47:f9:b0:89:4d:67:
                    d4:5d:af:c7:8b:d2:0a:47:a9:7e:8e:53:1f:cd:5c:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B7:7B:00:DA:D7:5F:26:56:74:59:9E:B2:6E:7A:8A:7F:77:E3:01
            X509v3 Authority Key Identifier:
                keyid:F7:74:9D:74:84:D7:AD:3E:36:30:34:A1:89:50:2B:2D:22:BA:87:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiJ2SCddXHCTRufbMDXyCfKmMM8sf5ehXWCEZiQJYAYx/0/F7749D7484D7AD3E363034A189502B2D22BA8726.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7749D7484D7AD3E363034A189502B2D22BA8726.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiJ2SCddXHCTRufbMDXyCfKmMM8sf5ehXWCEZiQJYAYx/0/34352e3233322e3132382e302f32322d3232203d3e20323637323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:47:ed:5a:b3:54:8f:c6:9f:bc:e1:e4:73:4a:5b:00:71:cc:
         8c:85:44:ac:87:91:32:d5:74:7e:8b:e9:0a:6a:db:33:bb:1c:
         82:34:84:ad:13:72:64:4f:ea:22:a3:e9:48:bb:06:35:47:45:
         81:ff:c4:67:0f:a6:5c:26:07:94:d9:4b:85:8c:2c:a1:f4:f1:
         14:59:63:5e:0d:26:16:7e:4d:ce:dd:36:76:c8:8c:58:7b:d5:
         54:d0:a6:d0:d4:99:ef:5f:e9:3f:6b:29:54:a6:04:b6:a5:00:
         32:7d:ac:bb:fa:d3:9d:86:3c:bf:99:ea:a1:06:9b:42:8e:a0:
         6c:21:2e:68:26:59:d5:cd:20:41:45:79:49:63:a7:cf:81:7d:
         da:6f:26:00:ac:67:e8:3e:e5:52:0b:55:82:87:88:d6:06:eb:
         40:74:1a:19:ce:24:97:64:52:9b:43:95:66:dd:94:51:d9:7f:
         40:48:89:af:6c:14:60:88:db:40:e0:06:71:ce:03:8f:5b:82:
         0c:e4:65:36:83:f3:87:78:30:d0:fd:b6:dc:ad:4e:7b:8c:cf:
         78:5e:ce:03:ed:82:29:16:f3:77:e1:08:2b:f7:dd:b9:c7:89:
         34:cd:93:07:83:e2:09:4d:ff:f6:cb:68:12:18:15:52:65:3a:
         7b:9d:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:31:44 2025 by rpki-client