Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32332d3233203d3e20323638373231.roa
File:                     34352e3137312e3135322e302f32332d3233203d3e20323638373231.roa (raw, json)
Hash identifier:          D45d0/HWGGJCV5a6m5SwLGuV240X8HUhPddIVwt2Jw0=
Subject key identifier:   41:C9:5E:37:D7:63:55:67:B3:13:D0:04:76:7D:28:9E:2F:2D:A4:AE
Certificate issuer:       /CN=AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E
Certificate serial:       0BB132D5532A85549070B83E3E5504DA697EB761
Authority key identifier: AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32332d3233203d3e20323638373231.roa
Signing time:             Fri 29 Jul 2022 21:03:08 +0000
ROA not before:           Fri 29 Jul 2022 20:58:08 +0000
ROA not after:            Fri 28 Jul 2023 21:03:08 +0000
asID:                     268721
IP address blocks:        45.171.152.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b1:32:d5:53:2a:85:54:90:70:b8:3e:3e:55:04:da:69:7e:b7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E
        Validity
            Not Before: Jul 29 20:58:08 2022 GMT
            Not After : Jul 28 21:03:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:1e:a0:c1:91:dc:cf:9b:6a:fe:68:cd:7f:
                    cf:a8:d1:47:94:b8:e8:18:ed:2e:69:5f:54:9c:53:
                    fa:80:5e:84:8a:91:ed:de:40:b3:bb:40:bc:b2:ed:
                    6d:ba:43:a7:6b:63:59:bb:fe:ca:b7:6f:74:98:cb:
                    3d:5c:8d:3f:dc:81:da:6f:c6:9e:e3:dc:35:22:21:
                    13:d3:a4:6e:6f:7f:ec:f0:75:c0:f9:6e:92:5c:93:
                    8a:4c:db:0c:14:59:49:14:da:89:55:d2:e1:cb:39:
                    fa:d0:29:eb:d1:a4:c0:a8:f0:fc:69:81:4d:af:4b:
                    91:ff:f5:a1:37:eb:fb:71:10:1a:85:2b:9c:da:76:
                    fe:40:f1:d4:30:b6:1e:5a:65:54:d6:63:43:c9:7b:
                    a9:14:51:06:ce:fa:d9:95:19:ba:8d:98:42:0f:9d:
                    dc:89:a1:bd:5e:6b:b4:84:e0:83:c0:8c:45:db:6d:
                    34:f2:9f:33:e2:91:70:3f:4e:bb:77:1d:56:a9:f0:
                    e4:23:af:4b:db:2c:8f:12:b5:ba:b5:34:8f:40:60:
                    c1:14:0b:d9:e4:20:5d:27:42:24:62:7e:df:4b:99:
                    4e:18:05:23:68:a4:69:f6:57:6c:b1:48:88:dd:8c:
                    70:5a:77:f7:c2:16:1f:77:d4:2a:2c:8a:5a:91:49:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C9:5E:37:D7:63:55:67:B3:13:D0:04:76:7D:28:9E:2F:2D:A4:AE
            X509v3 Authority Key Identifier:
                keyid:AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32332d3233203d3e20323638373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:63:3b:4b:e2:c6:fa:70:1c:75:35:81:d6:d2:bb:6a:21:0d:
         9a:41:56:52:ef:63:89:ab:40:2c:e9:c3:d7:1a:57:51:85:33:
         ad:9e:9d:97:6e:bc:0c:4d:5b:38:1b:0f:a6:53:d5:30:ba:3e:
         9b:f4:69:dc:c2:b1:9d:8a:4c:8c:d6:d2:bf:1d:29:c4:1e:a6:
         5f:ab:87:00:91:2a:50:cd:49:31:ba:fd:5b:65:d4:c5:d6:79:
         2c:a3:7c:9e:aa:be:2b:aa:4d:85:71:05:e0:5f:f9:d1:d8:19:
         44:a9:70:a3:1e:25:e5:4f:23:59:0d:86:7b:5d:12:b2:d4:2a:
         1b:bd:0a:77:80:4f:2d:f2:eb:bb:0c:2d:b3:cc:7c:a0:9e:2b:
         0e:b3:36:46:81:9d:aa:87:d0:7b:b2:0b:f0:fb:9f:75:e8:f3:
         ec:44:d7:67:42:42:66:49:aa:cf:ac:3a:c6:20:77:a5:08:da:
         25:3e:16:0b:da:83:97:34:4a:fd:e1:83:24:d4:da:e9:07:a0:
         fc:a4:e4:03:15:ac:b4:9e:3f:22:4c:39:ba:0e:03:eb:c4:81:
         ff:44:42:17:99:24:80:71:44:48:fe:fa:35:89:4e:84:60:aa:
         a8:fc:12:bc:6c:53:90:83:48:ca:dc:58:36:9a:9e:c0:8e:7b:
         2c:22:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:55:20 2025 by rpki-client