Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32322e302f32342d3234203d3e20323637303038.roa
File:                     34352e3232372e32322e302f32342d3234203d3e20323637303038.roa (raw, json)
Hash identifier:          MnSccMzYO14CGVwvgg4d+9BN0KUZAmnjvQlofa/rrBw=
Subject key identifier:   7C:56:F9:77:03:FA:58:EB:42:2D:3C:E2:B6:FE:F6:CE:1C:2E:AC:29
Certificate issuer:       /CN=E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E
Certificate serial:       2359A11E9334708EFA82C815A21853161024A8A0
Authority key identifier: E2:3D:CD:E6:C1:D8:FF:F1:C5:AB:1C:6F:4B:2D:E3:07:83:FE:55:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32322e302f32342d3234203d3e20323637303038.roa
Signing time:             Fri 05 May 2023 19:04:45 +0000
ROA not before:           Fri 05 May 2023 18:59:45 +0000
ROA not after:            Fri 03 May 2024 19:04:45 +0000
asID:                     267008
IP address blocks:        45.227.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:59:a1:1e:93:34:70:8e:fa:82:c8:15:a2:18:53:16:10:24:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E
        Validity
            Not Before: May  5 18:59:45 2023 GMT
            Not After : May  3 19:04:45 2024 GMT
        Subject: CN=7C56F97703FA58EB422D3CE2B6FEF6CE1C2EAC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:98:4e:05:d6:6c:fe:25:5a:6b:21:93:99:
                    20:1d:1f:75:ce:e8:71:6b:b6:d3:8d:b0:d1:be:38:
                    69:31:25:85:44:5b:96:22:ba:6a:16:f2:46:3d:5f:
                    c9:c1:13:85:1a:6b:81:a3:12:02:1d:df:c0:ba:20:
                    35:cf:bf:ea:74:10:1e:2f:3d:75:4f:fb:97:bd:8d:
                    87:2b:22:b5:87:d6:7a:bf:bb:a9:54:b6:c9:fb:5e:
                    c2:ba:80:85:54:42:38:85:bb:3a:40:d7:97:15:4e:
                    0e:07:df:90:07:fe:51:11:51:4e:bc:23:76:99:13:
                    25:ef:90:56:70:7b:1f:a2:5b:a1:dc:bb:17:ee:ef:
                    37:97:55:4b:b8:4c:2f:0f:2c:3d:bf:f2:2c:3c:57:
                    44:43:dd:fa:a2:99:06:86:78:a0:86:73:d4:0a:77:
                    8a:8c:46:8d:02:0d:c6:59:a9:a9:d3:f4:ae:33:e7:
                    e3:d5:e4:4f:db:f7:f5:ef:f4:26:80:a0:7d:89:22:
                    d3:d1:e0:c3:55:a4:2f:72:b5:84:ee:fc:59:6e:95:
                    4b:96:24:8d:41:b6:5d:2e:90:bc:9d:4d:cc:19:31:
                    d7:e2:43:15:b0:a1:c8:4f:a3:65:88:44:2d:49:78:
                    2d:32:d9:47:a9:cc:ed:e7:d0:a5:16:16:be:7d:7b:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:56:F9:77:03:FA:58:EB:42:2D:3C:E2:B6:FE:F6:CE:1C:2E:AC:29
            X509v3 Authority Key Identifier:
                keyid:E2:3D:CD:E6:C1:D8:FF:F1:C5:AB:1C:6F:4B:2D:E3:07:83:FE:55:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32322e302f32342d3234203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:70:28:39:65:22:74:72:f9:68:9e:af:06:b3:4d:21:be:
         ef:56:78:ea:3b:73:c1:d6:82:de:ed:98:39:bb:b0:f1:f3:2d:
         2b:72:17:47:f7:66:ef:03:37:c2:eb:98:a9:42:cf:ee:67:70:
         d7:88:9a:dc:23:55:22:0c:62:2f:79:b5:6b:20:5c:42:b7:a8:
         24:2b:83:dd:e8:26:6d:d9:10:6f:49:66:2d:c6:84:40:6f:24:
         f5:72:68:69:88:f1:13:b4:e0:73:cc:4b:2c:bd:eb:9f:a0:4d:
         60:b3:05:70:26:e3:4d:40:de:5e:1e:ee:b6:5c:e4:fa:b2:97:
         fd:a4:84:f9:bd:f0:7d:ee:43:9a:84:32:14:08:16:19:c2:26:
         1c:a2:70:76:fa:92:46:7c:0e:2a:88:f0:c9:58:3e:d1:10:75:
         9d:6b:09:b8:40:fb:59:dd:24:34:bd:d5:f3:c1:9e:ed:07:e3:
         a4:31:c8:9f:74:6f:da:f1:d3:41:89:d5:af:c4:d9:b2:65:60:
         2d:88:39:b4:b0:87:32:af:55:c3:ad:be:84:e1:14:92:0e:9f:
         9c:cf:b4:7d:70:da:3f:44:39:1d:38:11:d3:8e:ef:fe:b6:99:
         af:ee:30:f7:70:c6:73:e6:52:7c:d7:a1:d0:d2:98:f2:07:d7:
         e6:6a:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:07 2025 by rpki-client