Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233362e302f32322d3232203d3e20323639313934.roa
File:                     34352e3137392e3233362e302f32322d3232203d3e20323639313934.roa (raw, json)
Hash identifier:          yxfX0gaKPhR1D1jASEg0uhIPRyNPinR3xvB/ECGogdQ=
Subject key identifier:   04:CA:47:E1:6C:4E:37:7E:57:F2:0A:98:5D:32:82:47:DB:0C:22:23
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       286300557864B8DBD8C565E85C84B9C6BFE54EEF
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233362e302f32322d3232203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:40 +0000
ROA not before:           Sat 29 Jul 2023 16:21:40 +0000
ROA not after:            Sat 27 Jul 2024 16:26:40 +0000
asID:                     269194
IP address blocks:        45.179.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:63:00:55:78:64:b8:db:d8:c5:65:e8:5c:84:b9:c6:bf:e5:4e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:40 2023 GMT
            Not After : Jul 27 16:26:40 2024 GMT
        Subject: CN=04CA47E16C4E377E57F20A985D328247DB0C2223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:d2:f1:02:65:b0:b4:fa:2f:6c:d1:22:0c:
                    0d:05:bb:a9:2e:ca:2c:c7:dc:0c:25:0b:03:5a:7e:
                    70:9c:a7:f5:f3:0d:b3:41:d5:cf:a4:77:5f:d5:a6:
                    ca:c2:88:25:eb:54:ce:94:64:b3:46:7b:91:f2:2a:
                    4b:d1:6c:ff:f1:67:3f:85:28:d3:1f:79:da:1c:f5:
                    86:06:91:86:3d:40:51:aa:33:83:c4:88:d5:85:93:
                    18:17:ce:c9:ea:06:67:b9:69:a5:92:ec:f1:f1:d5:
                    0c:79:84:4b:4a:ca:ef:e4:f4:86:c5:e0:2a:7a:3b:
                    72:9d:6c:50:c3:b9:16:4e:6f:73:1d:21:52:cf:19:
                    69:d1:54:5c:49:6b:36:4d:86:25:4b:2e:07:89:ed:
                    20:6e:f4:26:13:d5:d6:53:43:69:39:6d:7f:5d:32:
                    81:86:97:a3:5b:a6:3a:fe:09:13:41:56:6c:32:2e:
                    d0:28:00:2d:f5:f4:c6:bd:84:b1:92:02:09:45:54:
                    7a:19:f2:30:97:7d:86:a5:cd:4c:81:94:89:6b:00:
                    14:f4:26:94:58:ae:36:88:64:42:87:8d:aa:3d:a0:
                    3e:97:0d:d6:10:6c:3f:f5:60:9b:7d:7e:68:d8:71:
                    19:96:34:5b:98:f5:40:fa:b1:e8:8b:f3:89:ec:c2:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CA:47:E1:6C:4E:37:7E:57:F2:0A:98:5D:32:82:47:DB:0C:22:23
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233362e302f32322d3232203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:6d:5e:eb:2e:de:24:5d:1a:de:00:a4:72:4f:07:fc:2b:
         3b:a6:df:b2:fb:93:cb:69:6d:3f:3d:7c:53:16:23:f2:e3:ae:
         14:c2:3d:0a:9d:ee:48:4f:ec:d8:c5:cb:b4:d9:78:85:da:45:
         0b:54:fa:ae:f8:fd:69:ae:a6:c9:e1:c8:27:43:35:73:67:24:
         7a:33:a9:8b:d9:c7:43:1e:6c:12:0b:80:93:cf:36:ad:84:10:
         1c:5a:48:2b:da:80:d9:bc:18:ea:a8:4b:6b:81:d5:26:0f:f5:
         cf:9b:15:be:ba:66:88:07:73:69:cc:22:ba:0d:63:6c:d5:07:
         49:27:31:da:d7:5d:10:45:e2:13:09:c8:e5:45:e4:db:de:c9:
         6a:ad:5a:07:ba:31:72:3b:36:4d:64:30:8c:f5:f0:05:ce:fc:
         47:8f:6a:46:76:cf:3f:7d:ed:c2:18:87:87:da:b4:3c:e0:3c:
         8c:38:97:6a:71:9f:57:3f:ce:d4:69:b9:11:a3:6b:bd:1a:f6:
         86:aa:cf:13:4b:bf:10:05:e5:23:65:8c:52:32:85:ae:65:54:
         b0:c0:db:5b:a9:e9:be:eb:af:7a:30:19:77:c0:64:a5:6b:f6:
         3f:53:d1:a1:60:f3:19:5c:e1:2a:8c:5c:13:a2:1a:ab:8d:54:
         85:0c:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:57 2025 by rpki-client