Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/34352e3136322e32342e302f32332d3233203d3e20323638353235.roa
File:                     34352e3136322e32342e302f32332d3233203d3e20323638353235.roa (raw, json)
Hash identifier:          dpr3FSzjHk/6YFLG15aPxJxCnCqG7yKHebh2Bo8etLE=
Subject key identifier:   FD:6F:63:16:27:00:E7:9F:51:A2:2D:FD:F2:85:B3:00:68:1B:86:96
Certificate issuer:       /CN=45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E
Certificate serial:       4861577EF8BE8DA13574355BE6029B5E8594813C
Authority key identifier: 45:E5:1F:7A:FA:B4:62:AF:21:B2:4B:AF:B1:AA:33:B0:83:E3:DC:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/34352e3136322e32342e302f32332d3233203d3e20323638353235.roa
Signing time:             Tue 23 May 2023 16:40:01 +0000
ROA not before:           Tue 23 May 2023 16:35:01 +0000
ROA not after:            Tue 21 May 2024 16:40:01 +0000
asID:                     268525
IP address blocks:        45.162.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:61:57:7e:f8:be:8d:a1:35:74:35:5b:e6:02:9b:5e:85:94:81:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E
        Validity
            Not Before: May 23 16:35:01 2023 GMT
            Not After : May 21 16:40:01 2024 GMT
        Subject: CN=FD6F63162700E79F51A22DFDF285B300681B8696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:ad:33:4d:7e:70:b2:f2:97:0f:d2:d2:60:
                    e4:37:88:44:f7:db:8c:d3:77:a9:8f:40:8d:0e:cb:
                    00:89:0e:6c:e6:db:2a:ed:9c:24:5e:22:06:ec:0e:
                    dd:3b:4d:36:c7:64:68:97:f9:2a:6a:7b:a4:77:2a:
                    ad:d6:f3:fb:e7:bc:da:00:c9:77:9f:cd:9b:b0:85:
                    59:f4:e4:77:39:ff:68:1b:9c:28:d0:0e:11:5e:21:
                    21:6a:04:9f:f1:00:bd:c6:ba:8e:84:b9:94:31:4c:
                    1b:ed:0f:63:23:3a:79:ff:20:cf:cf:bb:46:d8:1a:
                    c1:34:51:74:bb:04:8a:1d:3c:43:4e:b4:ad:7d:5d:
                    20:a8:58:2c:f7:9f:70:4b:58:b0:d9:01:98:1a:79:
                    97:a6:80:6a:38:8c:c6:ce:28:f3:51:ee:0d:57:b0:
                    45:4f:5e:1d:3d:ea:13:1a:99:b0:16:e9:50:0b:e2:
                    4d:0f:e4:a0:79:98:3b:e7:18:3b:d7:44:f0:d1:40:
                    4d:43:61:3d:94:eb:e2:63:4c:dd:ea:ff:77:a9:74:
                    25:16:d9:b6:84:06:6a:c6:a7:e4:3b:3c:9a:5f:da:
                    62:d5:f1:d5:8f:84:f6:94:31:bf:16:d7:84:cd:84:
                    d0:35:de:c9:f9:42:ed:0e:9a:56:fa:d2:b4:4e:b2:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6F:63:16:27:00:E7:9F:51:A2:2D:FD:F2:85:B3:00:68:1B:86:96
            X509v3 Authority Key Identifier:
                keyid:45:E5:1F:7A:FA:B4:62:AF:21:B2:4B:AF:B1:AA:33:B0:83:E3:DC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45E51F7AFAB462AF21B24BAFB1AA33B083E3DC2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Emt1mtQ9se2CBh5GHbFwZYoBBMUCcHkR5RuJnZUgzuwm/0/34352e3136322e32342e302f32332d3233203d3e20323638353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:fe:fe:58:74:e3:01:98:4c:2a:df:bf:7e:de:f2:b3:1b:
         65:53:9c:45:ff:72:e2:ef:65:09:80:6a:f8:1c:b0:7e:d2:b1:
         ec:8d:c4:85:0a:fb:b4:57:86:2a:b9:77:e5:db:12:de:57:85:
         b8:df:52:13:b8:63:71:8a:d5:be:1d:8a:3f:0f:c2:9b:f8:91:
         97:1a:d8:c3:0f:d0:2b:8d:2d:b5:96:e3:50:fc:43:04:ba:45:
         64:8f:54:d0:af:74:81:7b:73:d0:92:cf:fb:73:2b:46:25:79:
         a6:57:89:fa:1a:98:30:dc:0b:34:40:2a:fd:74:1d:e7:ec:66:
         cf:40:10:e9:22:eb:74:db:63:2c:be:03:dc:ab:5a:b8:4a:a5:
         b3:16:f1:a5:eb:e5:a8:d1:46:37:de:02:f2:75:8e:d0:b4:04:
         54:0a:4c:27:f8:5f:a7:08:2b:09:52:ba:16:c7:a9:de:14:04:
         33:ca:26:0e:d3:44:73:92:bd:50:09:cd:65:0f:76:64:e1:dc:
         18:03:c3:f2:aa:65:5b:ac:bc:60:fb:89:78:fc:d1:08:f8:21:
         05:be:5c:ce:ec:5f:cf:87:12:aa:f9:81:cb:5f:8c:3c:bd:62:
         34:1e:1a:ce:a5:e8:2b:ca:bb:6f:75:29:ff:73:66:5e:99:3f:
         33:bf:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:31:47 2025 by rpki-client