Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3233203d3e20323639333539.roa
File:                     34352e3233302e38342e302f32332d3233203d3e20323639333539.roa (raw, json)
Hash identifier:          Szjl6qzIWU0ue0T9VJEX7dDPPtGtU+XOEWmii2tx4Vo=
Subject key identifier:   56:59:33:E6:8F:36:B6:70:3A:AB:77:E1:34:A1:85:E3:33:DC:CD:1D
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       10131B8F1E7BA6695639441F284B6B876CD6425D
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3233203d3e20323639333539.roa
Signing time:             Mon 26 Aug 2024 19:33:08 +0000
ROA not before:           Mon 26 Aug 2024 19:28:08 +0000
ROA not after:            Mon 25 Aug 2025 19:33:08 +0000
asID:                     269359
IP address blocks:        45.230.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:13:1b:8f:1e:7b:a6:69:56:39:44:1f:28:4b:6b:87:6c:d6:42:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 26 19:28:08 2024 GMT
            Not After : Aug 25 19:33:08 2025 GMT
        Subject: CN=565933E68F36B6703AAB77E134A185E333DCCD1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:99:ab:1a:f4:41:5a:ea:29:c6:65:99:c1:
                    d9:88:d0:53:72:90:05:70:2c:f5:af:df:00:c8:4d:
                    e8:4c:6f:b3:9a:91:65:c5:60:91:99:ce:9f:ee:89:
                    0e:e0:55:86:d1:fc:1d:9f:97:df:30:cd:d7:8a:1e:
                    99:76:2c:eb:66:d6:f8:a9:65:6c:02:05:52:6a:f2:
                    4c:8b:df:39:92:89:41:d0:af:26:9e:dd:b6:35:07:
                    ab:95:5f:dd:95:71:87:31:34:d4:74:b2:1e:43:90:
                    f7:fb:ea:d6:4d:84:5c:ad:33:74:85:e9:10:97:c9:
                    18:c2:ab:3e:15:85:7f:bf:9b:1d:34:5b:9e:7c:1a:
                    f0:b1:e3:7d:f1:66:2f:2c:20:5a:54:11:06:ec:8e:
                    2c:6c:dd:4b:ca:a0:a7:17:4e:53:5b:56:7e:aa:ec:
                    6d:82:dc:72:f0:34:51:2f:7d:e7:97:a0:36:32:28:
                    7d:9e:2e:88:c9:b0:fe:6d:25:3d:26:24:a2:f4:bd:
                    e8:3a:25:8b:a9:63:73:cd:d6:4d:d4:a4:93:06:0b:
                    68:10:db:8d:86:be:de:c1:57:66:db:56:94:f7:e9:
                    3e:0e:72:2e:9f:58:81:6b:48:32:8a:ab:76:60:d4:
                    2b:3f:c8:a0:82:5c:e1:7c:6d:cc:32:3c:f4:fa:28:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:59:33:E6:8F:36:B6:70:3A:AB:77:E1:34:A1:85:E3:33:DC:CD:1D
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3233203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:aa:04:f1:6d:e8:56:1d:37:62:f7:f9:50:92:56:48:aa:4b:
         9d:eb:e6:84:d2:8a:64:32:bf:f9:85:2b:dd:8e:ba:13:79:1b:
         30:97:47:a1:3c:6f:77:dc:e5:d5:95:7b:ec:b1:7f:f2:78:23:
         05:30:f2:b4:fb:ce:4e:51:0a:1d:3a:d9:67:b2:f4:cd:92:65:
         09:e2:fb:f1:7f:f6:75:27:c8:fd:f0:15:52:17:27:df:9a:df:
         5c:2c:ab:dc:8f:99:1d:aa:b7:5d:6e:2e:ee:3e:b4:33:f8:80:
         69:71:f6:ba:29:7e:df:ef:54:08:6f:0e:a4:eb:83:3f:d3:24:
         eb:ee:3e:eb:d8:44:85:8e:26:9a:96:6d:2f:0f:19:32:5c:2e:
         51:35:a1:66:9e:be:42:3b:cd:1b:d0:20:e0:4d:e0:5a:57:46:
         05:6e:45:f6:08:01:d3:5d:1b:85:76:10:49:b3:ff:a5:ec:d8:
         58:68:f4:fd:ac:16:ae:1e:ae:49:23:20:1e:20:11:22:c6:fa:
         64:d9:29:bd:60:bd:05:2d:4d:a3:d6:31:76:30:e6:1c:41:f3:
         7e:c0:2e:8f:8e:f9:7c:fe:63:16:4b:4e:15:4f:1f:e5:f6:55:
         1d:c3:b5:1d:83:d3:5f:90:77:ea:99:c7:01:f9:ff:df:4e:8b:
         7e:bc:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:54:28 2025 by rpki-client