Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138342e302f32332d3233203d3e20323637323731.roa
File:                     34352e3233322e3138342e302f32332d3233203d3e20323637323731.roa (raw, json)
Hash identifier:          FSiH4BOziWxdhIKNjDXxg8in7JsEFR9H2WI2YM1u758=
Subject key identifier:   16:40:3F:95:E9:FE:C3:7E:D4:CB:1D:42:83:0D:20:93:51:37:94:D8
Certificate issuer:       /CN=444ECE2EC776570CD1C53B9537FD85C174CA3339
Certificate serial:       2DEFF31429359D86128A68879A91E0B14E11D6B9
Authority key identifier: 44:4E:CE:2E:C7:76:57:0C:D1:C5:3B:95:37:FD:85:C1:74:CA:33:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/444ECE2EC776570CD1C53B9537FD85C174CA3339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138342e302f32332d3233203d3e20323637323731.roa
Signing time:             Thu 13 Jul 2023 22:35:45 +0000
ROA not before:           Thu 13 Jul 2023 22:30:45 +0000
ROA not after:            Thu 11 Jul 2024 22:35:45 +0000
asID:                     267271
IP address blocks:        45.232.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ef:f3:14:29:35:9d:86:12:8a:68:87:9a:91:e0:b1:4e:11:d6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444ECE2EC776570CD1C53B9537FD85C174CA3339
        Validity
            Not Before: Jul 13 22:30:45 2023 GMT
            Not After : Jul 11 22:35:45 2024 GMT
        Subject: CN=16403F95E9FEC37ED4CB1D42830D2093513794D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:7f:9d:12:12:cd:1b:18:d8:95:ab:27:03:
                    73:a3:5f:d9:7d:f0:de:6e:2e:51:d7:0a:a2:29:d3:
                    d7:a3:bf:9a:7c:44:36:39:8f:cd:f3:70:52:7a:47:
                    a5:5e:cf:95:66:c3:98:60:f6:05:03:bc:cd:a6:f7:
                    4e:66:36:f0:73:7d:73:ec:33:1f:15:f4:76:8d:3a:
                    1e:21:63:9e:e0:8a:0a:86:6e:45:84:b6:c7:b8:b6:
                    01:21:27:fa:74:7b:19:3c:90:ca:d5:06:b8:6e:c2:
                    a6:24:ae:a1:76:cc:81:66:06:41:4c:b6:3d:0e:fc:
                    7c:a3:f3:3e:3d:5f:0a:1e:50:70:95:bb:20:c0:d9:
                    72:0e:20:08:32:ba:7f:28:68:41:70:44:a9:6c:e3:
                    7c:1c:20:65:96:91:61:e4:4b:b0:65:0c:2c:be:12:
                    2e:54:ea:7c:52:a5:27:ce:e3:93:b7:1d:2c:aa:9b:
                    69:df:0b:79:2a:40:93:b5:f9:a8:17:d5:31:d2:66:
                    99:33:f4:c1:1e:06:df:b1:9c:44:80:18:10:a8:5d:
                    c1:da:2a:c8:36:6e:67:92:ae:c3:7b:3d:c9:26:ed:
                    5a:4d:ee:85:9f:6f:54:fd:0c:70:23:a3:63:58:8f:
                    8e:e1:1c:17:cd:89:6e:c9:f0:55:cc:ca:f1:4e:83:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:40:3F:95:E9:FE:C3:7E:D4:CB:1D:42:83:0D:20:93:51:37:94:D8
            X509v3 Authority Key Identifier:
                keyid:44:4E:CE:2E:C7:76:57:0C:D1:C5:3B:95:37:FD:85:C1:74:CA:33:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/444ECE2EC776570CD1C53B9537FD85C174CA3339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/444ECE2EC776570CD1C53B9537FD85C174CA3339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138342e302f32332d3233203d3e20323637323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:ca:75:90:23:e4:dd:2d:6c:64:f8:b6:42:0f:1f:8d:4b:
         22:a1:6a:e2:55:f0:a4:e5:ce:5a:3e:1e:17:2c:e4:2b:d8:1a:
         18:79:25:e8:72:88:36:f6:45:a5:78:ee:6a:61:01:49:a7:85:
         d4:54:e2:8e:4d:cd:45:b5:82:4f:90:2b:86:33:54:5a:b0:02:
         94:ef:15:44:8b:95:fc:cb:ba:c3:36:85:48:8a:65:ea:31:83:
         60:57:81:04:e5:b0:2f:cb:71:a9:54:a2:ea:af:11:c3:95:85:
         9e:81:02:f2:12:0d:3e:1c:5b:09:32:65:cf:00:b9:da:21:69:
         e2:77:0a:c3:08:5e:8c:71:4f:63:af:67:02:61:10:d4:db:99:
         ae:09:89:59:63:0f:2e:b0:ac:20:86:96:64:2b:9c:bc:2c:a4:
         14:d9:d4:e4:34:d2:d6:73:3f:25:47:9f:86:d3:43:75:6b:36:
         53:4a:16:99:55:32:fd:63:3a:78:16:1a:a8:9d:7a:ac:8c:0b:
         ae:3e:e0:dd:6e:c1:c7:36:27:a4:2e:7b:27:ef:1d:89:be:a6:
         ad:68:29:dd:2d:ca:8c:4d:dc:c7:e8:5e:3f:fe:ee:17:d8:9c:
         15:15:95:20:50:00:76:d7:53:88:96:93:9d:27:43:24:94:81:
         b5:d0:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:03:59 2025 by rpki-client