Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/34352e3138302e34302e302f32322d3332203d3e20323639313330.roa
File:                     34352e3138302e34302e302f32322d3332203d3e20323639313330.roa (raw, json)
Hash identifier:          uVnh3kaXO42P5alrJT5ZHpMcZm9WcwHQ4h0TisyRC74=
Subject key identifier:   01:DB:CF:0D:A0:E9:1D:52:13:81:06:73:26:59:FA:4A:05:EA:EB:C0
Certificate issuer:       /CN=51842747F56E225B7BC340E292FA8A1A30A25FC6
Certificate serial:       63B72462259B48267AC4730F6F31FA7C8A627761
Authority key identifier: 51:84:27:47:F5:6E:22:5B:7B:C3:40:E2:92:FA:8A:1A:30:A2:5F:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51842747F56E225B7BC340E292FA8A1A30A25FC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/34352e3138302e34302e302f32322d3332203d3e20323639313330.roa
Signing time:             Thu 14 Sep 2023 12:22:53 +0000
ROA not before:           Thu 14 Sep 2023 12:17:53 +0000
ROA not after:            Thu 12 Sep 2024 12:22:53 +0000
asID:                     269130
IP address blocks:        45.180.40.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b7:24:62:25:9b:48:26:7a:c4:73:0f:6f:31:fa:7c:8a:62:77:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51842747F56E225B7BC340E292FA8A1A30A25FC6
        Validity
            Not Before: Sep 14 12:17:53 2023 GMT
            Not After : Sep 12 12:22:53 2024 GMT
        Subject: CN=01DBCF0DA0E91D52138106732659FA4A05EAEBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:31:f5:34:a7:f3:39:84:cf:32:f9:eb:5e:
                    8c:24:d2:9f:4b:d1:a6:7e:9a:74:68:1d:82:b3:cb:
                    f7:e4:05:6d:57:e6:0e:03:b8:09:b0:f0:d6:49:a4:
                    48:33:08:f5:2c:f1:d2:63:d4:6c:66:9d:f4:fb:ea:
                    c7:ed:c0:2d:4e:9e:14:91:de:a4:23:e6:fa:25:a0:
                    4a:c5:b2:72:fe:c8:60:e8:d9:f9:30:1c:b4:de:34:
                    05:b0:7e:9f:44:8c:b1:be:01:d2:8d:01:16:af:68:
                    d3:e9:90:72:54:c5:d9:c6:60:93:71:b1:64:a5:af:
                    cb:07:33:61:d4:53:10:ad:42:92:af:db:96:67:73:
                    df:4b:81:01:d7:be:b4:df:18:23:62:02:98:67:62:
                    6b:8f:8e:4a:08:68:6c:8f:26:ea:8b:75:af:c6:f1:
                    b1:05:03:dc:3a:f6:67:21:83:67:7d:45:ae:bd:be:
                    e6:81:22:d7:96:89:fe:6e:e0:29:25:af:5f:12:d5:
                    a3:dc:7a:21:2d:ca:bf:63:4d:f0:0d:e9:8d:0c:c9:
                    6f:50:b6:14:90:1a:f3:ea:54:df:83:05:66:6c:c7:
                    b2:23:63:6e:21:ed:29:15:39:7b:43:ac:14:1e:21:
                    e2:48:bc:cf:03:2c:70:29:14:c0:c9:37:52:79:67:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DB:CF:0D:A0:E9:1D:52:13:81:06:73:26:59:FA:4A:05:EA:EB:C0
            X509v3 Authority Key Identifier:
                keyid:51:84:27:47:F5:6E:22:5B:7B:C3:40:E2:92:FA:8A:1A:30:A2:5F:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/51842747F56E225B7BC340E292FA8A1A30A25FC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51842747F56E225B7BC340E292FA8A1A30A25FC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/34352e3138302e34302e302f32322d3332203d3e20323639313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:9e:7b:08:2f:0c:c0:ee:09:8f:1a:df:1a:44:6d:d7:e4:a8:
         3b:3b:8c:ff:fb:e8:7e:2e:ff:63:61:c0:25:1a:3a:bd:57:9c:
         91:04:29:15:03:f7:7e:5d:23:34:f2:d0:d6:fc:44:60:dd:e9:
         cc:13:ac:d8:e6:ca:23:b8:a7:3e:22:af:35:06:1e:8d:cf:e3:
         b1:13:a8:70:94:7c:a1:de:b2:7c:55:bf:f1:56:e9:32:ba:e4:
         3c:39:e8:4d:be:9c:33:a0:06:d7:8c:e3:ea:0b:3a:11:de:13:
         c4:95:17:78:2b:76:5f:0c:d9:f1:3f:3e:f9:a0:1a:53:36:55:
         fa:90:3c:6a:74:85:ff:12:59:9f:86:be:7d:63:fb:c4:b4:80:
         e8:9a:1f:6f:b1:a9:8f:40:56:99:95:d9:04:4e:71:45:cd:eb:
         04:bd:88:29:f6:bb:ea:51:89:42:65:c0:53:94:85:f9:d4:8b:
         ee:46:b3:ff:9c:3a:92:1a:13:4a:27:3d:d5:fd:3b:6c:7d:67:
         fe:bf:e1:af:98:ee:98:7c:03:bf:37:79:f2:ff:b7:5b:58:17:
         b6:a0:ab:ee:9f:e2:e1:af:b7:2c:a3:61:1f:49:84:47:49:50:
         c9:55:82:13:3e:ea:fa:d5:a3:f1:28:af:b3:68:e3:9a:f0:1e:
         49:4a:c0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:15:49 2025 by rpki-client