Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33352e302f32342d3234203d3e20323639363635.roa
File:                     34352e3139312e33352e302f32342d3234203d3e20323639363635.roa (raw, json)
Hash identifier:          MqUhtW+6OrvQW9ZXS/UW5dBJ7ZTWFR32XSfRnHVzbXo=
Subject key identifier:   88:15:2B:1F:FF:7B:D1:B3:FB:AC:D5:92:2D:F4:41:01:97:41:83:0C
Certificate issuer:       /CN=01E1936D951009EDC365E2731189930C5096C583
Certificate serial:       1EBDEC9DF77F0D7D2900A2397A72156905F00F65
Authority key identifier: 01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33352e302f32342d3234203d3e20323639363635.roa
Signing time:             Mon 04 Sep 2023 17:50:45 +0000
ROA not before:           Mon 04 Sep 2023 17:45:45 +0000
ROA not after:            Mon 02 Sep 2024 17:50:45 +0000
asID:                     269665
IP address blocks:        45.191.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bd:ec:9d:f7:7f:0d:7d:29:00:a2:39:7a:72:15:69:05:f0:0f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E1936D951009EDC365E2731189930C5096C583
        Validity
            Not Before: Sep  4 17:45:45 2023 GMT
            Not After : Sep  2 17:50:45 2024 GMT
        Subject: CN=88152B1FFF7BD1B3FBACD5922DF441019741830C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:15:ba:63:da:e2:48:3f:41:82:1f:c6:a1:
                    88:fc:d3:5d:c9:9d:5f:39:25:de:01:87:58:49:27:
                    7a:af:02:94:07:2f:78:ca:ed:6d:81:8e:59:b4:51:
                    12:05:60:fb:1c:d7:8d:3f:39:fc:e7:b6:28:70:18:
                    df:15:97:58:7b:4a:78:3f:b4:c9:2c:c2:9f:e1:a8:
                    a1:2c:a5:c0:11:28:2c:de:24:d9:e5:7d:73:32:44:
                    29:6d:5d:7c:94:72:39:e2:60:b0:12:d2:2a:65:e7:
                    71:90:b9:83:c2:c7:e3:b9:18:7c:ac:ec:b3:f9:85:
                    96:76:ae:5e:cf:58:0a:58:ce:bc:82:47:37:2a:d0:
                    ed:1f:76:3a:8e:5b:e4:cb:13:45:91:ce:a3:cb:1e:
                    16:ac:e7:36:7d:d9:95:5d:af:1b:2b:08:91:17:02:
                    33:6f:20:fd:eb:40:c7:b4:da:54:e5:1e:c2:ba:27:
                    ee:6d:0f:22:b7:5b:ec:0b:01:e4:53:6d:4b:a9:c2:
                    64:36:c4:c0:ff:2a:fd:41:eb:c3:d3:fd:0e:9d:b2:
                    f7:4f:6d:eb:e7:ab:0c:27:fb:b4:7e:2b:19:c0:f8:
                    20:a4:f2:60:79:eb:7d:a1:f2:87:89:3c:aa:93:ac:
                    b2:77:83:92:86:7b:ee:64:90:9c:df:16:8b:28:c4:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:15:2B:1F:FF:7B:D1:B3:FB:AC:D5:92:2D:F4:41:01:97:41:83:0C
            X509v3 Authority Key Identifier:
                keyid:01:E1:93:6D:95:10:09:ED:C3:65:E2:73:11:89:93:0C:50:96:C5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/01E1936D951009EDC365E2731189930C5096C583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01E1936D951009EDC365E2731189930C5096C583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33352e302f32342d3234203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         eb:2b:92:ed:98:02:5e:d3:fa:00:17:27:e6:d0:06:94:44:f0:
         a3:83:f2:1a:2d:86:30:ff:38:36:c3:88:37:63:8e:ad:35:02:
         dc:cf:0f:05:10:53:59:15:ff:39:b2:1a:c7:d5:0c:8a:c3:c8:
         83:63:c3:62:7d:64:a1:70:25:90:bb:68:e7:3f:dc:7c:ae:d6:
         9a:1c:c9:17:c6:38:b7:80:76:4b:20:e5:f2:34:5b:b3:42:aa:
         2c:24:17:40:f0:94:4d:25:93:08:21:26:24:f9:91:0c:a3:3e:
         68:88:8b:09:41:3a:04:2c:72:70:b5:30:2c:b5:16:61:1e:71:
         2c:35:f0:e0:2b:53:70:e4:1a:76:bd:f6:1a:e8:95:46:21:23:
         38:0b:a6:61:2d:9d:3d:2a:2d:39:ad:71:c6:93:d0:bf:03:21:
         48:c0:c3:6b:39:64:4b:a4:38:82:97:2e:d3:94:96:d4:6b:7b:
         71:09:0c:d3:3d:01:18:12:fb:a1:a9:97:0e:3c:01:39:f7:0f:
         0d:11:cd:bf:6e:2b:09:13:6a:77:8b:b1:31:89:83:f0:b7:b8:
         30:cd:41:0b:2d:42:30:4f:10:ba:05:f7:1f:a2:95:37:45:b7:
         48:80:cb:d3:05:40:26:18:8d:75:06:c7:cc:5f:8b:c3:4e:12:
         d3:e3:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:38:09 2025 by rpki-client