Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/34352e3136322e32342e302f32322d3232203d3e20323638353235.roa
File:                     34352e3136322e32342e302f32322d3232203d3e20323638353235.roa (raw, json)
Hash identifier:          4Z7W9tHRgtBHf2piukObqfofp1Iq7eaQb+S02wQvv5o=
Subject key identifier:   A8:C7:AA:2F:AC:17:73:8C:AF:65:8C:17:76:19:78:FF:49:5B:F5:EA
Certificate issuer:       /CN=45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E
Certificate serial:       7BD91DF77337A5D210AFAFD63FEFE27B823F2409
Authority key identifier: 45:E5:1F:7A:FA:B4:62:AF:21:B2:4B:AF:B1:AA:33:B0:83:E3:DC:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/34352e3136322e32342e302f32322d3232203d3e20323638353235.roa
Signing time:             Tue 23 May 2023 16:40:01 +0000
ROA not before:           Tue 23 May 2023 16:35:01 +0000
ROA not after:            Tue 21 May 2024 16:40:01 +0000
asID:                     268525
IP address blocks:        45.162.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d9:1d:f7:73:37:a5:d2:10:af:af:d6:3f:ef:e2:7b:82:3f:24:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E
        Validity
            Not Before: May 23 16:35:01 2023 GMT
            Not After : May 21 16:40:01 2024 GMT
        Subject: CN=A8C7AA2FAC17738CAF658C17761978FF495BF5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:11:a1:e5:01:8c:28:13:45:50:ec:36:fd:
                    24:17:47:02:f8:05:31:92:a6:68:9d:d2:a9:00:7e:
                    a7:d2:3f:04:19:68:ea:be:64:e4:b3:f8:1a:9f:99:
                    a7:e4:5a:9b:21:be:39:97:6c:03:22:1f:ef:81:85:
                    53:53:6e:4c:9c:18:7c:69:3d:36:2e:ae:62:2c:82:
                    b1:75:69:61:7f:fb:a1:43:d2:9f:2f:1f:3b:35:cf:
                    14:8d:1d:fc:78:07:ef:f9:f5:6f:84:c1:e5:c3:96:
                    20:11:6c:1d:d1:d5:d9:b5:2b:cb:cc:58:39:0e:1e:
                    aa:7e:f6:3b:4b:62:6f:54:69:c6:91:86:75:6b:c7:
                    9a:ee:42:1a:b6:cf:aa:17:22:78:54:17:11:36:2c:
                    f3:a9:10:d2:db:89:6e:63:5b:21:ce:c7:7c:ad:b4:
                    da:67:4b:b0:62:4f:71:61:98:1e:7d:d5:4f:0a:af:
                    83:95:d1:7d:d5:fd:12:e6:ab:29:c1:86:5f:fb:3d:
                    df:09:c5:7e:43:15:59:d4:7a:e0:af:8f:67:56:6a:
                    fc:02:97:75:50:fa:1b:b7:a9:61:6b:5e:9f:18:de:
                    b9:b2:e0:c9:a0:a6:ce:82:68:ed:e8:c1:f4:51:1f:
                    14:6c:6e:d2:73:27:9b:ae:8e:eb:46:ed:fd:3c:21:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:AA:2F:AC:17:73:8C:AF:65:8C:17:76:19:78:FF:49:5B:F5:EA
            X509v3 Authority Key Identifier:
                keyid:45:E5:1F:7A:FA:B4:62:AF:21:B2:4B:AF:B1:AA:33:B0:83:E3:DC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/34352e3136322e32342e302f32322d3232203d3e20323638353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:cc:d8:e6:d4:f3:0e:21:7b:14:49:ac:46:fc:d5:a8:3b:6a:
         f0:74:6a:b8:d3:81:8f:da:68:78:04:14:d2:4b:2e:15:2e:3d:
         cc:d8:25:35:d7:d4:3e:17:3b:38:10:5c:32:58:1b:47:6e:a2:
         92:b0:ad:fc:4f:68:ca:42:9d:f8:a1:b3:a5:9f:bd:16:95:c0:
         7c:6c:2a:21:1a:46:0d:24:d0:38:ec:49:5a:f5:fa:77:70:7a:
         5a:75:83:bd:57:d0:c0:23:e3:6c:5a:7f:12:36:25:73:2b:9c:
         d4:51:e2:44:16:50:46:0b:f3:9a:58:4c:69:11:80:db:0e:83:
         52:dc:0e:f3:46:eb:c0:c8:10:16:70:1a:ab:d4:02:fd:6b:9e:
         07:17:ab:01:31:de:d9:68:0c:fd:c8:a0:cf:d0:de:97:8a:09:
         f1:ae:3b:52:dd:2d:dc:9c:97:19:d8:69:d5:04:e1:38:a2:11:
         5d:c8:4e:ce:18:5d:06:6d:e7:f8:4b:d0:19:92:3c:0b:77:5c:
         25:e0:a9:16:b0:65:a3:cc:c5:dd:16:74:b1:2a:04:ce:c9:92:
         f7:5d:bb:2c:4f:f8:a8:2e:11:c0:56:7a:c1:a9:09:89:ee:f4:
         65:b1:bc:a1:7b:d1:ff:2e:6b:7a:cc:e2:84:9b:27:39:f1:db:
         69:9d:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:07 2025 by rpki-client