Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138302e302f32322d3332203d3e20323636323636.roa
File:                     34352e36352e3138302e302f32322d3332203d3e20323636323636.roa (raw, json)
Hash identifier:          H5aIlKECnCZi0hUn6Oepd6eA/OnUr6Vpmd5GxBaXyy4=
Subject key identifier:   DF:2A:0A:AE:B5:45:DB:16:C1:1F:0F:F3:88:6B:ED:F3:2B:A9:1D:F9
Certificate issuer:       /CN=FD874116DB78A7ED2BE150325A5CF55C8B6625FA
Certificate serial:       1102DFD0257D1A197B9B366E87792FD9C77D11A7
Authority key identifier: FD:87:41:16:DB:78:A7:ED:2B:E1:50:32:5A:5C:F5:5C:8B:66:25:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD874116DB78A7ED2BE150325A5CF55C8B6625FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138302e302f32322d3332203d3e20323636323636.roa
Signing time:             Wed 24 May 2023 05:52:42 +0000
ROA not before:           Wed 24 May 2023 05:47:42 +0000
ROA not after:            Wed 22 May 2024 05:52:42 +0000
asID:                     266266
IP address blocks:        45.65.180.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:02:df:d0:25:7d:1a:19:7b:9b:36:6e:87:79:2f:d9:c7:7d:11:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD874116DB78A7ED2BE150325A5CF55C8B6625FA
        Validity
            Not Before: May 24 05:47:42 2023 GMT
            Not After : May 22 05:52:42 2024 GMT
        Subject: CN=DF2A0AAEB545DB16C11F0FF3886BEDF32BA91DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:31:d9:35:50:be:c4:45:f2:a5:55:92:9c:
                    2a:8f:ca:ce:7a:e3:61:58:8b:6d:5b:5f:8d:87:cc:
                    bc:73:90:4a:cd:1c:67:98:03:b2:04:2d:df:50:9f:
                    73:1f:dc:7a:c7:e6:99:42:b5:a8:1e:29:4c:52:16:
                    f6:98:6e:3e:3c:a3:7e:58:ed:57:c5:ab:52:a2:db:
                    8b:ef:c0:fe:91:ca:51:52:0c:3d:4d:fb:79:d4:63:
                    f1:09:14:4b:d7:b7:9c:05:2a:d9:8c:a3:e0:75:89:
                    71:01:e8:40:9d:71:c0:ab:0c:5c:6e:9a:6e:7d:12:
                    f6:44:ca:03:8e:c2:5c:58:8f:3a:fc:85:4f:6c:e5:
                    b2:4b:c3:bf:58:6d:2a:20:77:d3:63:fc:b2:9a:bb:
                    e7:34:f8:3d:b9:24:4b:33:a9:f2:af:2f:c0:4c:6d:
                    53:24:14:6b:3e:db:ab:d0:d5:6f:50:cf:b2:ac:97:
                    92:87:ba:e3:1e:a7:32:39:42:07:23:d0:f4:c0:a0:
                    1e:92:86:8e:9f:de:de:dc:67:e6:97:97:aa:1b:74:
                    a8:ea:8c:cc:08:0f:a7:92:6a:aa:08:92:3d:72:b0:
                    11:f1:58:d8:36:68:fc:7b:0f:f3:08:e0:1e:23:2d:
                    2a:d3:a4:38:dd:fa:ef:b7:fa:6d:76:20:d2:cf:59:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2A:0A:AE:B5:45:DB:16:C1:1F:0F:F3:88:6B:ED:F3:2B:A9:1D:F9
            X509v3 Authority Key Identifier:
                keyid:FD:87:41:16:DB:78:A7:ED:2B:E1:50:32:5A:5C:F5:5C:8B:66:25:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/FD874116DB78A7ED2BE150325A5CF55C8B6625FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD874116DB78A7ED2BE150325A5CF55C8B6625FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138302e302f32322d3332203d3e20323636323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:8f:35:7e:5a:dc:f2:4a:1c:c6:e7:a6:9f:89:5e:2f:fa:22:
         2d:a7:63:c5:c2:5d:7f:bd:a1:81:1b:2c:42:21:ff:3d:23:71:
         d9:47:e1:6a:5b:1b:8f:6a:4c:69:03:7b:de:d2:39:a9:c6:69:
         30:8c:73:26:38:f2:5b:74:34:c6:08:cf:1f:34:10:aa:c0:0c:
         d3:05:9f:83:f7:8d:0c:49:ce:41:a5:b5:d4:cb:d3:8e:d9:ce:
         46:0e:76:39:e2:04:90:46:eb:58:98:a2:22:8b:3a:c8:fd:ec:
         c2:3c:3f:be:b7:82:11:8c:0f:11:ae:dd:19:9c:ae:87:cd:52:
         fb:2f:3c:95:1e:f5:a8:f2:9b:2c:80:c9:07:9d:1d:32:67:7d:
         40:12:d4:57:99:01:92:aa:ce:77:55:3c:a7:3e:01:88:dd:6d:
         09:98:c0:a4:ea:e0:2c:ab:10:bc:6e:a1:c6:ac:e2:1b:54:86:
         55:d5:4c:1b:fa:b9:38:ad:57:2a:fe:8d:21:da:db:50:e4:50:
         d8:dd:c3:c7:a2:c6:87:63:79:e0:ac:9c:5a:9d:ac:5c:ec:59:
         11:3a:5e:1b:36:70:a3:f9:8a:4f:15:cf:0e:81:66:d2:40:c7:
         86:e2:eb:05:fa:71:80:7a:58:c9:df:eb:45:d4:72:28:06:cd:
         9e:6f:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:50 2025 by rpki-client