Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/34352e3136332e37362e302f32322d3235203d3e20323638353531.roa
File:                     34352e3136332e37362e302f32322d3235203d3e20323638353531.roa (raw, json)
Hash identifier:          8jJEevumzBMq09Kt3N9WGpvYzr2/xQRyYM0AGI3TNfs=
Subject key identifier:   34:BE:4A:D4:0B:99:C0:F7:FD:A2:25:E5:EB:7D:52:4C:6B:05:17:E2
Certificate issuer:       /CN=5BA58ACA99EA7C19D0EA367263785249E0CC1B77
Certificate serial:       5153D6CA5EBC873C1969E3028B0400C246AB265C
Authority key identifier: 5B:A5:8A:CA:99:EA:7C:19:D0:EA:36:72:63:78:52:49:E0:CC:1B:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BA58ACA99EA7C19D0EA367263785249E0CC1B77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/34352e3136332e37362e302f32322d3235203d3e20323638353531.roa
Signing time:             Tue 13 Jun 2023 15:00:00 +0000
ROA not before:           Tue 13 Jun 2023 14:55:00 +0000
ROA not after:            Tue 11 Jun 2024 15:00:00 +0000
asID:                     268551
IP address blocks:        45.163.76.0/22 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:53:d6:ca:5e:bc:87:3c:19:69:e3:02:8b:04:00:c2:46:ab:26:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA58ACA99EA7C19D0EA367263785249E0CC1B77
        Validity
            Not Before: Jun 13 14:55:00 2023 GMT
            Not After : Jun 11 15:00:00 2024 GMT
        Subject: CN=34BE4AD40B99C0F7FDA225E5EB7D524C6B0517E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:88:ef:a8:9c:63:6a:b3:9d:5c:f2:5c:69:69:
                    21:61:f9:1c:f7:03:4a:75:58:4b:dd:88:a3:dc:d6:
                    b4:64:be:a5:d6:4d:00:ee:bc:85:7e:4c:7e:d8:ea:
                    fa:19:fe:85:94:1a:6c:8c:81:17:d4:f0:83:0c:35:
                    df:41:1e:3b:39:89:3f:59:e2:3a:86:8d:9d:ec:81:
                    3b:ab:49:a3:73:54:2d:04:9d:6b:93:87:88:f8:77:
                    95:f7:a0:28:45:af:f3:9a:ed:e0:4b:88:bd:31:c0:
                    67:18:eb:6e:25:11:48:d8:20:60:04:9a:11:44:c8:
                    bf:e0:63:b9:c3:3c:cc:2d:18:52:6c:1a:51:e6:05:
                    f7:13:09:62:74:1d:4c:a1:cf:54:a2:4b:6b:62:74:
                    6e:eb:bf:ba:92:c1:b3:9a:b0:af:09:ac:25:04:0c:
                    55:d2:22:b1:aa:c8:b0:2f:f6:60:55:9d:80:49:5f:
                    f1:92:5f:ee:a7:03:9c:33:ea:4f:e0:ee:51:d6:f2:
                    14:76:b2:20:32:b6:65:e0:4e:79:ac:1c:31:e0:6f:
                    43:59:86:7b:9c:c8:1b:43:18:d6:c1:73:74:d0:89:
                    18:20:35:90:2f:4d:29:16:0c:1b:ab:68:83:72:14:
                    f7:01:2d:0d:6b:f3:99:bb:1e:6d:10:4a:d5:b5:37:
                    1e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BE:4A:D4:0B:99:C0:F7:FD:A2:25:E5:EB:7D:52:4C:6B:05:17:E2
            X509v3 Authority Key Identifier:
                keyid:5B:A5:8A:CA:99:EA:7C:19:D0:EA:36:72:63:78:52:49:E0:CC:1B:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/5BA58ACA99EA7C19D0EA367263785249E0CC1B77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BA58ACA99EA7C19D0EA367263785249E0CC1B77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/34352e3136332e37362e302f32322d3235203d3e20323638353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:72:23:e9:89:69:29:30:af:b0:8a:2b:f7:d5:16:4e:ec:ad:
         42:23:6e:ab:76:40:37:68:c1:98:62:23:45:11:13:70:2b:34:
         a0:fa:54:af:f2:c6:c2:61:ce:00:9c:ee:bb:9e:66:7c:80:00:
         88:a6:95:3f:28:63:a9:34:a5:6f:42:55:c4:bb:9e:4e:7c:3c:
         65:fa:38:e3:a2:f1:31:30:4d:87:8b:b7:f3:f6:79:79:82:a0:
         82:38:75:1e:65:db:60:c1:f8:29:38:6c:8c:60:e9:72:83:65:
         dc:c2:49:d5:98:47:a3:0a:e0:57:cb:aa:c5:0a:2d:5a:69:13:
         d3:2e:e9:c0:a9:45:55:d5:ee:9a:5e:8b:e5:7e:6d:69:7b:a6:
         b1:4f:87:36:c0:12:7b:af:fa:7e:52:9d:1f:59:f9:fb:ca:1f:
         9e:de:44:65:51:76:6e:31:37:ab:e3:cf:95:84:ad:31:e7:12:
         2d:27:fd:9f:9d:5f:e4:9b:be:c4:17:46:9d:f6:de:cd:a2:95:
         2b:73:12:73:52:94:38:13:75:97:33:00:e5:42:18:ca:85:14:
         78:cc:a4:17:fc:f7:98:30:71:15:a3:00:c4:0f:f5:c1:29:a5:
         89:36:1b:ce:de:17:d3:b5:e6:8f:48:49:fc:ff:66:66:b9:8f:
         c0:16:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:05 2025 by rpki-client