Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/34352e3136342e3138342e302f32332d3233203d3e20323638363333.roa
File:                     34352e3136342e3138342e302f32332d3233203d3e20323638363333.roa (raw, json)
Hash identifier:          /l/6YxjxsAuLVEEsQcMFupFm1sNpVBVE/nuXX3NRwak=
Subject key identifier:   7B:6B:42:87:5F:C9:89:DA:F5:80:95:0C:5D:8F:51:06:A1:88:D1:61
Certificate issuer:       /CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
Certificate serial:       7317616E59465FA0A928D3274F82BC98BA6676C4
Authority key identifier: 5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/34352e3136342e3138342e302f32332d3233203d3e20323638363333.roa
Signing time:             Mon 20 Nov 2023 18:16:41 +0000
ROA not before:           Mon 20 Nov 2023 18:11:41 +0000
ROA not after:            Mon 18 Nov 2024 18:16:41 +0000
asID:                     268633
IP address blocks:        45.164.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:17:61:6e:59:46:5f:a0:a9:28:d3:27:4f:82:bc:98:ba:66:76:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
        Validity
            Not Before: Nov 20 18:11:41 2023 GMT
            Not After : Nov 18 18:16:41 2024 GMT
        Subject: CN=7B6B42875FC989DAF580950C5D8F5106A188D161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:d1:0a:be:36:85:a2:0c:29:27:5a:ea:e9:
                    34:46:36:51:2e:74:ac:5c:8e:67:aa:f0:45:15:71:
                    c0:04:23:51:a5:de:46:28:71:63:72:31:4a:ce:16:
                    ef:50:9d:61:11:38:df:b8:9c:67:b9:18:27:0f:67:
                    a5:79:f9:d0:b4:b9:cc:3b:72:60:8a:46:77:1e:d5:
                    a0:52:fc:ff:8d:63:e4:22:47:af:bb:e5:34:d2:2b:
                    49:3b:f5:5c:17:17:94:9c:97:38:20:43:a3:36:e7:
                    66:50:ab:47:d6:6d:02:ea:ac:b6:10:55:1b:92:c1:
                    bc:91:53:a6:73:b5:05:c4:e5:bf:2b:eb:e8:82:03:
                    4a:f1:15:bd:3d:2a:05:cf:58:3b:3e:e9:74:ed:38:
                    6d:61:1c:74:f8:cc:ab:ad:bf:8c:14:4c:96:05:02:
                    37:20:f4:78:a2:fe:38:43:ba:aa:a7:0c:40:63:bd:
                    09:9c:1b:11:3d:9f:f1:67:47:c9:53:00:35:e2:4a:
                    68:6a:3d:ed:07:63:69:7f:5b:3b:7e:b9:89:e1:60:
                    5a:aa:d1:f6:e0:dd:b9:ba:d7:13:d1:4c:ee:63:ee:
                    66:54:c0:3f:3b:a7:c6:d9:8a:34:fa:1f:fb:8d:18:
                    93:92:26:a9:e8:c4:78:66:b7:1e:7b:a7:de:17:6c:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6B:42:87:5F:C9:89:DA:F5:80:95:0C:5D:8F:51:06:A1:88:D1:61
            X509v3 Authority Key Identifier:
                keyid:5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/34352e3136342e3138342e302f32332d3233203d3e20323638363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:3e:df:2c:28:21:dc:17:17:fd:df:2b:8d:6e:d2:5a:2a:
         d3:c2:6f:75:ff:11:c1:37:0b:e7:cc:bb:52:c4:98:ab:c0:6b:
         29:b3:6d:74:d3:3e:c9:47:62:9f:5d:c9:e8:49:59:6e:f6:41:
         57:7d:93:df:87:4e:a8:d0:8c:57:09:38:9c:38:6a:7b:cc:65:
         6f:d4:b3:a1:51:0d:c6:01:95:67:9b:ac:e2:68:fd:8f:ef:13:
         0b:f8:79:1b:f0:48:4d:18:c0:b8:b4:1c:47:06:a4:5b:ba:73:
         10:14:e5:21:f2:8c:7f:3a:b4:87:26:6d:45:69:e9:9f:a6:25:
         ff:07:b2:08:34:af:50:92:8c:30:77:66:76:10:75:e2:2d:59:
         2c:27:6d:8d:e9:65:d5:ec:ed:cd:18:8c:f5:c9:0e:05:b8:08:
         47:e1:9c:5d:f1:5a:b3:87:c9:e0:22:86:f6:da:6c:c9:e8:70:
         19:c6:a5:10:72:33:0a:c4:a0:8e:28:94:85:9f:c2:47:12:47:
         38:72:16:4d:fa:df:50:9b:fe:2c:0c:7d:94:a4:eb:9a:c5:e0:
         bf:81:8c:bf:1a:04:08:90:57:bb:35:1b:05:f1:3e:ca:88:92:
         5e:8b:c7:9a:08:7b:ea:e8:3a:f9:70:40:2d:9a:f5:46:2a:e0:
         44:d2:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:38:30 2025 by rpki-client