Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3131302e302f32342d3234203d3e20323639343633.roa
File:                     34352e3138372e3131302e302f32342d3234203d3e20323639343633.roa (raw, json)
Hash identifier:          mqq+DmOvDmb7sA4ieWzcPlwSC9PoJ9sr0BEmlwpgN8A=
Subject key identifier:   07:37:54:83:FA:19:AB:5F:26:1D:53:AD:61:92:C6:BD:5C:75:A1:CC
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       438EB44C1E0BC2FD7CCEAAF630F29F227BC46048
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3131302e302f32342d3234203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:34 +0000
ROA not before:           Thu 03 Nov 2022 18:38:34 +0000
ROA not after:            Thu 02 Nov 2023 18:43:34 +0000
asID:                     269463
IP address blocks:        45.187.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8e:b4:4c:1e:0b:c2:fd:7c:ce:aa:f6:30:f2:9f:22:7b:c4:60:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:34 2022 GMT
            Not After : Nov  2 18:43:34 2023 GMT
        Subject: CN=07375483FA19AB5F261D53AD6192C6BD5C75A1CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:0c:ad:53:9e:0e:6e:54:15:08:9d:8b:6a:
                    e6:ec:11:4d:32:97:0e:9c:b1:1a:ed:0e:3e:e4:34:
                    99:9f:fb:38:da:7c:12:9e:3a:27:ff:0c:b8:d6:95:
                    4d:1d:98:39:f1:2e:1e:80:c1:ec:81:20:06:ca:3f:
                    67:39:c0:0a:ec:8b:4d:2c:21:af:f9:1a:5a:75:1c:
                    29:6a:20:92:cf:46:68:53:59:36:e8:63:5f:c9:07:
                    0d:84:c7:66:e9:af:f3:43:12:e2:0b:84:46:1c:db:
                    a3:09:fe:b5:ee:3a:f7:09:0e:9a:6e:46:37:81:7b:
                    fd:9c:7a:7d:aa:cd:b9:e3:5c:f0:7e:c8:b0:e5:41:
                    e9:68:3a:66:b0:16:3b:1f:27:38:25:80:ff:20:cc:
                    c3:b9:c5:7b:dc:f2:9e:d0:a4:e2:5c:78:a4:c5:7d:
                    75:e5:7a:5f:dd:11:06:94:07:3c:b4:79:6c:23:d7:
                    27:f9:52:7e:2c:0d:dc:54:c2:1e:57:6f:35:f4:7f:
                    0c:ae:c2:99:32:28:2c:44:ab:cf:87:57:7b:ba:07:
                    c2:b9:5c:ac:e8:9b:50:4a:a5:4a:0c:d4:84:1e:a8:
                    dd:05:7f:80:8a:8d:76:78:79:77:62:28:99:dd:18:
                    b3:0a:2f:4d:2e:0e:1b:9a:a6:9d:5b:a7:92:2b:4e:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:37:54:83:FA:19:AB:5F:26:1D:53:AD:61:92:C6:BD:5C:75:A1:CC
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3131302e302f32342d3234203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:98:f3:0c:f3:86:0e:c8:24:ef:0d:0f:43:5a:d2:9c:d0:d5:
         47:73:9d:c7:6d:e3:7b:17:59:8a:ec:69:67:06:ff:a7:1f:d8:
         ee:e4:da:0e:fc:2c:2b:52:c7:d3:08:29:62:02:0a:fb:db:37:
         4a:17:69:d9:41:b5:82:3c:43:c1:a0:7d:18:be:b8:a3:35:64:
         9b:64:ac:41:13:f3:dc:e1:31:9d:42:61:a7:83:7c:fc:aa:7c:
         4e:a7:ed:01:3a:d0:ae:b5:e1:95:1b:9c:c6:03:df:12:12:ea:
         fd:22:89:75:44:b6:a1:7f:59:8b:17:89:57:35:54:af:7a:aa:
         ee:9c:e4:2e:e3:e4:9d:af:de:cb:5f:63:a7:71:60:45:e0:da:
         4e:1a:f8:5d:9e:ae:17:ee:2f:5d:6a:12:3b:aa:c0:21:a3:aa:
         31:73:85:a1:96:d1:fd:71:10:ab:b0:75:9b:a6:c3:bf:dd:2c:
         18:f9:3b:70:6d:00:64:41:2d:8a:7f:06:24:fb:90:8f:d2:99:
         b7:a1:e7:a3:72:80:ca:47:63:cb:b8:17:1a:5c:36:26:d5:72:
         f9:c6:da:26:a3:2b:85:3e:4e:54:bd:89:54:aa:5c:b2:9b:f7:
         cc:8e:19:b4:7b:80:d4:54:01:b5:bc:e6:a5:5d:9e:0c:14:c7:
         9a:8a:70:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:10:31 2025 by rpki-client