Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/34352e3233382e3132382e302f32322d3332203d3e203533323330.roa
File:                     34352e3233382e3132382e302f32322d3332203d3e203533323330.roa (raw, json)
Hash identifier:          IhUn8c4MS9Znn/YWAkBO3Gv2soJCL09j4VnKmczZ+kE=
Subject key identifier:   1B:8E:18:A8:85:83:BE:21:D3:8D:C6:45:96:DE:92:46:86:FC:2A:25
Certificate issuer:       /CN=72D9D42F7D2DF211472D29F406E50CA72428589F
Certificate serial:       64240906F8A2CF1DA41B6111DB4A0CA304137919
Authority key identifier: 72:D9:D4:2F:7D:2D:F2:11:47:2D:29:F4:06:E5:0C:A7:24:28:58:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D9D42F7D2DF211472D29F406E50CA72428589F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/34352e3233382e3132382e302f32322d3332203d3e203533323330.roa
Signing time:             Mon 05 Jun 2023 12:36:01 +0000
ROA not before:           Mon 05 Jun 2023 12:31:01 +0000
ROA not after:            Mon 03 Jun 2024 12:36:01 +0000
asID:                     53230
IP address blocks:        45.238.128.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:24:09:06:f8:a2:cf:1d:a4:1b:61:11:db:4a:0c:a3:04:13:79:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D9D42F7D2DF211472D29F406E50CA72428589F
        Validity
            Not Before: Jun  5 12:31:01 2023 GMT
            Not After : Jun  3 12:36:01 2024 GMT
        Subject: CN=1B8E18A88583BE21D38DC64596DE924686FC2A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:75:cf:fa:cb:e0:bc:7d:fb:67:ae:65:11:3e:
                    d3:96:45:eb:27:61:c4:3c:51:0e:53:19:96:e4:45:
                    08:24:96:65:86:75:38:04:47:41:6c:cb:16:9b:ab:
                    69:fa:d6:f6:d6:72:13:3b:49:fd:cf:25:1b:5e:fe:
                    7f:0b:ff:34:4d:70:d4:20:55:87:4c:71:0d:13:ba:
                    b3:9c:cf:4e:a6:0a:5e:19:17:35:48:39:90:68:b8:
                    b1:5d:33:8f:8d:8b:7c:f6:a5:b4:df:6b:87:69:fc:
                    42:53:49:eb:3f:f3:72:ae:10:3c:e0:e7:d0:3e:73:
                    a3:7e:fb:29:89:4d:ab:85:3f:a5:71:ee:3c:b3:20:
                    28:f4:5e:25:db:df:c9:a6:ed:b9:84:56:6c:ee:07:
                    b1:ae:fa:ed:bc:04:dc:4b:41:ad:50:c2:4c:50:76:
                    13:00:de:be:e8:ed:f6:8d:e1:40:38:86:cc:a7:cb:
                    25:f6:a5:55:17:68:29:54:74:6f:f9:4e:09:43:2d:
                    53:ef:a4:bb:64:c1:e2:af:94:82:2b:2e:de:12:83:
                    e2:93:f4:5e:44:e9:70:19:76:8d:8f:89:2f:e1:08:
                    10:43:27:9c:85:25:4c:a0:97:27:6d:3f:fe:96:79:
                    85:d8:f3:d1:72:bd:05:ad:e7:77:ca:bb:c8:e1:93:
                    11:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8E:18:A8:85:83:BE:21:D3:8D:C6:45:96:DE:92:46:86:FC:2A:25
            X509v3 Authority Key Identifier:
                keyid:72:D9:D4:2F:7D:2D:F2:11:47:2D:29:F4:06:E5:0C:A7:24:28:58:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/72D9D42F7D2DF211472D29F406E50CA72428589F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D9D42F7D2DF211472D29F406E50CA72428589F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/34352e3233382e3132382e302f32322d3332203d3e203533323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:93:bc:33:8b:0b:a0:6d:df:8c:2a:9f:a1:e8:0e:cc:1c:bf:
         90:b1:5a:51:49:80:a9:b0:56:fd:80:10:cf:34:f5:33:6d:55:
         6c:f4:58:a8:f3:52:d6:7a:95:98:b3:73:14:9a:4e:91:25:c3:
         1f:6e:7e:7f:6d:39:92:e1:e6:e8:71:1b:4f:49:f0:da:5e:5c:
         1b:cf:65:d0:91:6e:2c:92:b6:c2:03:14:52:b2:05:4e:2f:2a:
         e4:cf:10:29:03:ed:85:ee:ad:98:9a:bb:75:fd:75:03:26:9e:
         6e:bc:75:8b:72:88:3c:11:5d:ea:4e:22:89:ea:ad:49:7e:7a:
         4f:9a:b0:d5:fb:74:06:18:14:86:42:76:b6:e1:cf:b2:c3:d8:
         1a:54:a8:7d:cc:9f:e8:e8:bb:34:61:8b:49:f5:b1:14:f7:3f:
         fb:47:54:82:50:30:52:00:54:ef:0b:96:ce:53:d3:19:d2:73:
         49:65:bc:a3:e0:a6:5f:a9:61:f5:58:56:ff:e8:81:df:09:ad:
         b0:ea:45:62:fa:28:69:8e:2b:ee:c1:03:80:59:00:41:31:6f:
         c3:51:31:d8:1a:04:e7:13:49:53:6b:35:37:71:cd:13:1a:81:
         62:ee:a3:68:95:ec:3e:2a:2c:45:a1:91:95:6d:f0:f4:d5:c9:
         42:63:7c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:50 2025 by rpki-client