Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3332203d3e20323639313934.roa
File:                     34352e3138302e3231362e302f32322d3332203d3e20323639313934.roa (raw, json)
Hash identifier:          YvK/WJ5FdjP2BBPNAdm6EMMg7L/9Bpqb7jIP7H5o+Nc=
Subject key identifier:   F5:12:74:9A:7C:B8:58:37:12:94:DA:15:94:6D:9B:A0:7A:8D:E4:9E
Certificate issuer:       /CN=93E8F1E8B26E54612C2C1B2E58182FE529B6AA21
Certificate serial:       0129351192A4C478B3A2FC0944D6AE5BF02180FB
Authority key identifier: 93:E8:F1:E8:B2:6E:54:61:2C:2C:1B:2E:58:18:2F:E5:29:B6:AA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E8F1E8B26E54612C2C1B2E58182FE529B6AA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3332203d3e20323639313934.roa
Signing time:             Wed 29 May 2024 21:24:18 +0000
ROA not before:           Wed 29 May 2024 21:19:18 +0000
ROA not after:            Wed 28 May 2025 21:24:18 +0000
asID:                     269194
IP address blocks:        45.180.216.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:29:35:11:92:a4:c4:78:b3:a2:fc:09:44:d6:ae:5b:f0:21:80:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E8F1E8B26E54612C2C1B2E58182FE529B6AA21
        Validity
            Not Before: May 29 21:19:18 2024 GMT
            Not After : May 28 21:24:18 2025 GMT
        Subject: CN=F512749A7CB858371294DA15946D9BA07A8DE49E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:f0:db:58:c5:30:56:e6:90:0c:46:e0:de:
                    29:cf:7a:88:7f:2d:d8:98:9f:ad:a9:3e:e0:8b:89:
                    06:11:f0:28:ad:c5:27:3e:4d:f2:2c:09:20:42:46:
                    97:77:64:52:cb:be:09:d0:6e:69:a8:cd:68:af:af:
                    31:80:0d:eb:98:df:62:ce:15:f1:c1:56:c5:05:ff:
                    b2:f1:e1:8d:b6:38:8d:55:9e:b0:9f:90:4a:72:55:
                    b2:62:48:36:44:f7:a8:e4:07:de:9c:7a:2e:47:3f:
                    fd:af:5b:b7:3a:a7:57:79:50:0b:11:06:45:cc:72:
                    bf:09:49:c3:3e:1a:2a:5e:94:01:a1:b2:e3:29:09:
                    c9:f7:85:59:c1:a6:c0:76:09:f6:07:17:89:44:41:
                    09:52:fb:ff:1c:ef:5d:1c:dd:b4:f6:5a:c4:aa:a3:
                    4e:98:f0:15:df:6f:64:98:d2:01:18:9e:d2:28:c3:
                    74:9e:ad:68:be:a7:34:d6:a0:47:87:35:d2:d3:9a:
                    ac:90:3c:9c:3a:7a:da:0d:38:74:09:81:ed:4c:4e:
                    6e:27:17:0d:ae:7f:58:5d:ab:23:7f:32:da:bc:67:
                    aa:c5:7d:bf:d9:6e:0b:d0:f4:21:75:b7:0a:8f:81:
                    73:04:79:9c:95:53:ef:ca:fb:b9:17:ae:3c:8d:29:
                    15:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:12:74:9A:7C:B8:58:37:12:94:DA:15:94:6D:9B:A0:7A:8D:E4:9E
            X509v3 Authority Key Identifier:
                keyid:93:E8:F1:E8:B2:6E:54:61:2C:2C:1B:2E:58:18:2F:E5:29:B6:AA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/93E8F1E8B26E54612C2C1B2E58182FE529B6AA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E8F1E8B26E54612C2C1B2E58182FE529B6AA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231362e302f32322d3332203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:6b:51:7d:a3:a5:a6:d9:71:48:19:0d:bf:e9:b2:ee:4e:94:
         72:a6:4d:5e:c8:23:36:92:90:fa:15:ed:a2:4e:32:11:05:0c:
         d2:69:75:db:03:af:7c:62:ed:aa:07:a4:a4:ba:26:b3:c1:61:
         b8:2f:6f:b6:61:2a:51:2b:9f:4b:92:4c:43:16:13:b7:78:8e:
         16:8a:45:07:a3:b7:cb:3e:16:e0:a9:2a:a2:ee:3e:22:28:d3:
         a1:b1:5b:51:9a:64:85:a7:08:5d:33:65:5b:0c:d9:9b:bc:be:
         c7:f4:2b:9a:30:c8:0e:ed:67:73:e7:f8:f1:fd:e2:1e:5e:9c:
         8e:60:29:85:2c:0f:fe:d2:b4:bf:f0:eb:e0:56:f9:0e:2a:ec:
         52:e1:07:ed:bd:bd:0f:9d:56:cb:f6:9c:fe:88:60:61:a8:8b:
         8f:2c:c4:be:9b:d4:4e:c0:0c:77:22:87:57:83:0e:64:71:ff:
         8b:cb:7d:cb:ee:b5:ee:55:d1:b6:8e:1b:60:9d:51:a5:17:5b:
         a8:db:d8:9d:a0:0a:98:1c:94:76:99:4d:ec:f2:c1:cb:2e:af:
         b2:54:af:82:da:7b:11:b5:66:34:05:64:f7:59:3f:b7:5c:78:
         b4:7a:e6:c9:5e:60:6e:27:15:c0:f1:73:4a:f4:8a:ed:59:84:
         2e:cf:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:31 2025 by rpki-client