Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/34352e342e3231322e302f32322d3234203d3e20323636303631.roa
File:                     34352e342e3231322e302f32322d3234203d3e20323636303631.roa (raw, json)
Hash identifier:          DwMIy7XkMWdTmHiJSnbdlc4PvuF/kh5+64x2QvHZ6Fo=
Subject key identifier:   CB:75:D2:E5:5C:66:B9:76:19:EC:27:26:0B:50:10:AA:63:A8:2D:A9
Certificate issuer:       /CN=901122F2D1C80D8CD2B84C52693263E57928B4CE
Certificate serial:       6F099C756AE808D7D77CBA6CE620D9A56BB7E9FB
Authority key identifier: 90:11:22:F2:D1:C8:0D:8C:D2:B8:4C:52:69:32:63:E5:79:28:B4:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/34352e342e3231322e302f32322d3234203d3e20323636303631.roa
Signing time:             Fri 17 Nov 2023 19:15:04 +0000
ROA not before:           Fri 17 Nov 2023 19:10:04 +0000
ROA not after:            Fri 15 Nov 2024 19:15:04 +0000
asID:                     266061
IP address blocks:        45.4.212.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:09:9c:75:6a:e8:08:d7:d7:7c:ba:6c:e6:20:d9:a5:6b:b7:e9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901122F2D1C80D8CD2B84C52693263E57928B4CE
        Validity
            Not Before: Nov 17 19:10:04 2023 GMT
            Not After : Nov 15 19:15:04 2024 GMT
        Subject: CN=CB75D2E55C66B97619EC27260B5010AA63A82DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:5c:43:b0:23:9f:db:b4:22:b6:10:b6:83:
                    dd:04:6f:3f:c5:28:48:34:1d:26:28:ee:03:9c:d4:
                    4c:55:0f:9a:d4:06:ef:6e:5e:1f:ac:09:3b:c8:65:
                    37:fe:f3:ec:3d:9a:af:8d:5c:e4:2b:29:1b:a7:df:
                    a6:d5:f0:8b:c4:ae:8f:bb:75:ce:2f:a0:f6:db:39:
                    63:ce:d9:5b:22:55:db:42:98:12:4f:24:6e:8c:5f:
                    c5:1e:2b:22:4e:1c:7f:98:b9:d4:3d:33:ab:7b:7f:
                    67:de:14:03:a9:53:70:e8:6a:eb:c2:2c:82:ec:3a:
                    15:be:d2:52:19:5e:7f:37:63:9a:e6:a0:d2:48:6b:
                    5f:2c:95:72:4f:87:2b:50:1f:c1:84:c6:20:e5:65:
                    04:08:69:ea:96:29:78:8b:dc:32:9b:31:69:c3:04:
                    8b:8a:bf:cf:2a:0e:b6:6c:44:74:a0:4e:be:6d:5b:
                    a7:24:5d:b2:5c:df:6c:64:77:67:4e:a9:83:56:88:
                    60:d4:e6:e0:d2:f1:56:f1:af:5b:47:81:66:10:0e:
                    1c:59:78:db:f1:f3:12:98:40:0b:0c:16:6c:3a:fe:
                    09:b9:57:17:57:b9:0d:20:7d:12:11:05:fb:cd:3a:
                    63:db:d4:ff:5b:ae:0d:60:12:23:c1:9e:78:55:42:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:75:D2:E5:5C:66:B9:76:19:EC:27:26:0B:50:10:AA:63:A8:2D:A9
            X509v3 Authority Key Identifier:
                keyid:90:11:22:F2:D1:C8:0D:8C:D2:B8:4C:52:69:32:63:E5:79:28:B4:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/34352e342e3231322e302f32322d3234203d3e20323636303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:76:c7:c8:64:24:0a:fb:3b:c5:1f:f3:80:b4:9c:1a:0f:
         b6:1f:d3:73:24:27:a5:ab:e8:ec:80:ca:eb:75:87:d9:7f:60:
         18:0a:93:2b:9d:ab:97:d7:a5:ef:85:b2:16:25:8c:32:e1:ec:
         27:98:c5:97:ce:b7:92:0d:58:b8:81:7c:23:5b:95:73:9f:29:
         2c:64:60:09:d8:05:9b:f9:e0:a7:da:01:f2:dc:2b:75:76:40:
         a7:df:ff:5f:c2:7b:53:1a:7f:e8:77:77:f9:cf:63:f0:31:81:
         5d:ee:0a:b2:a5:e8:04:23:5a:f7:c8:82:f4:7c:49:b4:b3:74:
         93:2f:6c:02:44:6a:88:4d:fe:11:a5:e3:a5:eb:96:a1:d4:5c:
         41:58:0a:8b:86:fa:ea:ba:a7:da:ed:f9:36:d6:a8:a3:f2:89:
         1a:8c:c3:db:62:c3:4f:ad:1d:63:fd:25:9c:ee:71:42:f4:1e:
         69:40:5e:27:0e:c3:00:aa:f8:f4:7e:69:2a:60:20:7d:59:f0:
         ad:4c:aa:df:14:3e:98:b4:87:85:d3:0b:e1:bc:9d:ea:ad:22:
         e1:7e:63:ed:ee:d3:2c:de:24:2a:e4:ae:3a:16:b5:1d:80:0a:
         b2:c6:a7:8a:26:91:19:88:15:16:c8:3d:68:d1:22:4a:18:37:
         51:e6:63:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:39 2025 by rpki-client