Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138322e302f32332d3233203d3e20323636323636.roa
File:                     34352e36352e3138322e302f32332d3233203d3e20323636323636.roa (raw, json)
Hash identifier:          pkifAJ838E6TmwOslcykaxFSTdnPeSl2SFKcd2BrsHY=
Subject key identifier:   16:71:CF:63:52:EA:C0:D6:69:00:0A:20:CD:0B:76:0B:D2:52:7D:B0
Certificate issuer:       /CN=CE3E8E6F884C4D121D237CD7FF88F7D48A2166F1
Certificate serial:       5F2965F78A49FAA8270733DBA9F31D6C9A5EFB84
Authority key identifier: CE:3E:8E:6F:88:4C:4D:12:1D:23:7C:D7:FF:88:F7:D4:8A:21:66:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE3E8E6F884C4D121D237CD7FF88F7D48A2166F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138322e302f32332d3233203d3e20323636323636.roa
Signing time:             Tue 26 Sep 2023 20:46:53 +0000
ROA not before:           Tue 26 Sep 2023 20:41:53 +0000
ROA not after:            Tue 24 Sep 2024 20:46:53 +0000
asID:                     266266
IP address blocks:        45.65.182.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:29:65:f7:8a:49:fa:a8:27:07:33:db:a9:f3:1d:6c:9a:5e:fb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE3E8E6F884C4D121D237CD7FF88F7D48A2166F1
        Validity
            Not Before: Sep 26 20:41:53 2023 GMT
            Not After : Sep 24 20:46:53 2024 GMT
        Subject: CN=1671CF6352EAC0D669000A20CD0B760BD2527DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:8e:f1:a4:5d:60:26:ac:cf:bf:32:28:86:
                    73:12:4d:a0:59:a3:a8:67:15:dd:36:4d:ed:30:81:
                    66:a4:15:82:11:4a:24:95:25:fb:c6:e9:d0:df:10:
                    10:8c:d0:e9:8a:ae:3a:fb:79:50:f6:df:a1:96:9d:
                    81:bf:8f:3d:aa:bf:91:b6:5c:02:dc:41:ce:38:49:
                    2b:ef:88:f9:29:53:fd:73:65:10:f8:e0:24:40:5f:
                    a1:01:d2:49:61:c1:d9:20:d1:bb:4a:f3:9a:3f:d5:
                    df:57:eb:9b:d8:76:bc:97:41:92:dd:f4:62:45:91:
                    b1:6f:3c:73:04:e1:92:cc:a4:f0:46:23:27:4c:cd:
                    36:b6:89:05:be:3a:91:ca:58:45:72:3f:18:06:a8:
                    22:08:1e:52:dc:47:a2:77:0b:07:1f:47:f6:93:f1:
                    55:f6:27:9c:4a:28:2b:0f:e2:c6:33:6f:71:92:ed:
                    e0:ff:5b:bd:d1:81:ea:8b:bf:43:15:a5:43:f8:6e:
                    3a:96:0c:c6:24:af:5e:a8:05:c6:b9:3e:67:0b:c3:
                    7e:cf:f9:dd:7c:52:04:f8:b1:b5:b9:cd:e0:d7:8d:
                    8a:52:13:7b:b4:63:ee:49:82:40:df:e1:72:7d:4d:
                    22:96:35:6c:ee:88:8d:ca:5c:86:c5:f3:8c:ea:e0:
                    46:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:71:CF:63:52:EA:C0:D6:69:00:0A:20:CD:0B:76:0B:D2:52:7D:B0
            X509v3 Authority Key Identifier:
                keyid:CE:3E:8E:6F:88:4C:4D:12:1D:23:7C:D7:FF:88:F7:D4:8A:21:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/CE3E8E6F884C4D121D237CD7FF88F7D48A2166F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE3E8E6F884C4D121D237CD7FF88F7D48A2166F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqcxLGYFgKaNJFn11Hj25E6D6a2xpyppiWmvJR7Jxqs7/0/34352e36352e3138322e302f32332d3233203d3e20323636323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:7a:ca:f8:11:b2:cf:c4:94:6c:28:47:d2:f8:e1:02:67:7e:
         cb:e7:b5:d3:4a:20:ff:da:3f:2c:d1:88:4e:4d:cb:9b:f2:e4:
         24:e9:f0:e6:47:87:70:f6:ec:75:69:25:33:ee:2f:e8:18:c2:
         25:5b:67:80:0a:a6:f0:26:7f:4d:aa:c4:29:d4:e2:f3:17:cb:
         29:d5:02:46:40:cb:6c:7a:22:3e:28:9f:8f:6d:b8:1c:3e:6f:
         a5:de:d6:7a:ca:05:63:70:eb:33:d8:4f:5c:61:f2:2c:d4:07:
         46:2d:aa:ce:ab:e8:ce:1a:e8:0d:2a:5b:90:b9:d6:27:ab:e4:
         4f:12:ed:ad:55:46:9a:d1:57:fe:4d:0e:b0:34:76:c0:6d:ce:
         bc:14:3b:c6:8f:02:8d:8b:82:93:fc:2a:bb:73:27:d5:53:a2:
         f1:a0:1b:ce:57:ed:5e:71:94:56:11:e8:cb:b1:84:8d:73:0a:
         e0:1b:10:70:4a:a4:88:80:90:4c:7f:f0:aa:f7:73:2f:25:cf:
         cf:66:99:83:c1:0e:e5:8a:2f:50:21:13:79:9d:f3:fd:9f:13:
         bf:d3:d9:86:92:9f:42:69:41:b6:2a:e7:a1:40:1e:62:c5:b9:
         8a:98:40:64:e8:e5:61:3a:d1:d9:62:91:cd:48:47:77:ee:82:
         b2:13:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:12:27 2025 by rpki-client