Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa
File:                     34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa (raw, json)
Hash identifier:          9RsI8s0/tORPnXhDIVdCM8UMvdck0QOlVm1XCI/XZnU=
Subject key identifier:   88:2B:60:A7:CE:9E:27:18:62:CE:A9:CB:A6:69:1C:F8:74:18:AA:FA
Certificate issuer:       /CN=BA7E89727323D83349D5995D267D020FF0260C80
Certificate serial:       3A898191A2DE2B6269C1FC1737A55FF3D402AD7D
Authority key identifier: BA:7E:89:72:73:23:D8:33:49:D5:99:5D:26:7D:02:0F:F0:26:0C:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA7E89727323D83349D5995D267D020FF0260C80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa
Signing time:             Tue 13 Jun 2023 16:31:01 +0000
ROA not before:           Tue 13 Jun 2023 16:26:01 +0000
ROA not after:            Tue 11 Jun 2024 16:31:01 +0000
asID:                     269111
IP address blocks:        45.178.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:89:81:91:a2:de:2b:62:69:c1:fc:17:37:a5:5f:f3:d4:02:ad:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA7E89727323D83349D5995D267D020FF0260C80
        Validity
            Not Before: Jun 13 16:26:01 2023 GMT
            Not After : Jun 11 16:31:01 2024 GMT
        Subject: CN=882B60A7CE9E271862CEA9CBA6691CF87418AAFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:a2:20:8e:89:ca:cc:12:87:3e:82:83:27:
                    7b:ae:63:14:e6:6b:97:ce:69:25:29:44:cb:3e:44:
                    15:f9:49:a8:10:a2:3e:01:6c:20:e4:0a:9d:d4:b1:
                    26:eb:1b:57:5e:07:21:8a:7b:8f:b6:6d:d8:1d:dd:
                    af:df:9e:c6:e8:1e:5d:e6:c4:46:62:c1:93:1d:39:
                    61:b9:91:b7:81:52:d0:27:db:c8:13:a9:62:71:b7:
                    1e:8b:2b:4f:56:d6:ac:b2:ab:00:fa:ba:31:ac:b1:
                    03:b0:ab:7e:cf:40:85:82:2b:a4:bf:36:46:6c:22:
                    69:3d:6b:0e:74:06:26:d8:dc:07:dd:73:22:69:0e:
                    36:bb:a9:f6:ce:98:3f:bf:ac:a4:2f:88:44:ac:b6:
                    f0:29:b9:15:dc:4d:56:a0:9a:b9:86:39:4a:4c:96:
                    32:e2:a3:7c:7e:59:49:f7:4d:d0:d9:3c:84:07:d5:
                    44:04:f3:2f:a0:a1:25:92:88:13:3f:ba:a6:73:1f:
                    88:b2:3f:b0:c7:0d:0b:e2:2f:d8:f4:5b:d9:d9:10:
                    05:ea:8a:d3:f8:7c:e8:ea:af:72:8c:a7:59:d3:c9:
                    15:fd:3a:9e:4c:91:73:c8:e9:cb:2d:37:40:7b:5d:
                    5d:d9:76:4c:92:cb:9c:8b:7d:05:a5:e0:04:3c:c1:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2B:60:A7:CE:9E:27:18:62:CE:A9:CB:A6:69:1C:F8:74:18:AA:FA
            X509v3 Authority Key Identifier:
                keyid:BA:7E:89:72:73:23:D8:33:49:D5:99:5D:26:7D:02:0F:F0:26:0C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/BA7E89727323D83349D5995D267D020FF0260C80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA7E89727323D83349D5995D267D020FF0260C80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/0/34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:ba:7c:4b:b6:44:fb:39:3b:ec:bf:ca:0f:dd:1c:1b:3d:
         a8:39:67:0d:28:5b:e9:73:2e:24:9a:87:97:53:77:14:8a:e0:
         4c:57:5b:56:81:62:27:c2:51:ac:20:06:2a:6d:7c:e0:9e:ae:
         9b:08:75:d7:5c:e7:24:0b:d4:ad:66:43:78:fe:19:3d:28:1e:
         74:99:cb:a4:e9:98:1c:56:d3:d6:54:64:5d:50:e7:cc:d7:4f:
         98:d4:75:e7:bc:d4:49:da:60:2f:00:51:1d:4e:7b:f0:91:40:
         5b:9b:fc:4b:be:cb:a4:48:19:83:f4:b2:e1:c2:88:b5:63:de:
         11:0f:89:38:a8:de:ae:d2:82:6a:c6:07:f7:b4:79:35:43:f6:
         d1:3c:9f:d4:66:c2:80:2d:87:b0:44:b6:99:c9:ab:13:83:3e:
         1c:8c:68:45:4d:c8:44:25:ad:8b:2b:52:2e:7b:0b:4b:56:a8:
         54:dd:f9:5f:37:21:e2:98:59:98:04:6e:59:4c:b2:3a:bc:f9:
         d3:d6:7f:2d:ea:9c:f6:69:d6:b6:62:a8:4f:ac:fc:b4:29:52:
         3e:e6:b4:36:1d:72:4e:07:96:47:49:fc:29:24:02:bc:23:8a:
         f1:57:8b:c5:4a:11:1a:e7:e9:84:f9:6a:5b:42:03:fc:dd:09:
         36:28:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:16:10 2025 by rpki-client