Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35322e302f32342d3234203d3e20323639353738.roa
File:                     34352e3138392e35322e302f32342d3234203d3e20323639353738.roa (raw, json)
Hash identifier:          ab89Dl7U3KJ4H+R8J13U9KhFFgofARBWBphJ3YSA7CQ=
Subject key identifier:   6B:F1:07:22:A8:AE:7E:7D:49:88:76:04:41:92:92:52:E3:AD:0B:9A
Certificate issuer:       /CN=CC34520B595FF4E20FC1BC7F108928DB78BF1C7F
Certificate serial:       7DC6FE18E6BA9A73564070C168552C4B172BE41E
Authority key identifier: CC:34:52:0B:59:5F:F4:E2:0F:C1:BC:7F:10:89:28:DB:78:BF:1C:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35322e302f32342d3234203d3e20323639353738.roa
Signing time:             Mon 30 Oct 2023 20:56:53 +0000
ROA not before:           Mon 30 Oct 2023 20:51:53 +0000
ROA not after:            Mon 28 Oct 2024 20:56:53 +0000
asID:                     269578
IP address blocks:        45.189.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c6:fe:18:e6:ba:9a:73:56:40:70:c1:68:55:2c:4b:17:2b:e4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC34520B595FF4E20FC1BC7F108928DB78BF1C7F
        Validity
            Not Before: Oct 30 20:51:53 2023 GMT
            Not After : Oct 28 20:56:53 2024 GMT
        Subject: CN=6BF10722A8AE7E7D4988760441929252E3AD0B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:6d:86:61:0b:fe:04:43:fe:57:33:21:d2:
                    04:ac:1c:52:9d:31:fc:59:96:ca:0b:c6:80:c4:63:
                    8c:5e:00:6c:74:d1:fd:6b:5b:23:57:f5:ef:f9:b8:
                    a1:f7:e5:e9:56:ac:f7:c5:fb:09:83:9e:6b:7f:58:
                    95:20:a0:41:9c:da:e8:ec:ec:8f:7c:8b:da:70:54:
                    aa:2e:50:ac:95:cd:b3:40:68:cf:92:fe:6b:71:06:
                    da:7a:e5:d1:09:ab:ee:43:d6:79:38:fa:1e:4d:2d:
                    a3:f7:9b:5b:3e:05:c7:ee:49:e5:13:3e:47:a4:0d:
                    16:cc:38:b8:4d:c6:eb:c3:ef:b0:bf:fb:79:c8:3d:
                    d8:b9:7c:b7:56:cf:59:de:a5:8a:b6:b8:da:04:7c:
                    3c:7a:a9:de:57:5c:c7:fb:46:95:e2:43:4c:d2:75:
                    df:41:96:89:7c:58:82:82:74:b4:04:5e:85:6a:9e:
                    67:4c:ef:b2:d2:9c:0c:a0:87:f5:0f:56:dd:64:f8:
                    1c:18:27:ed:6c:1d:7c:2f:56:2c:e0:1c:41:4d:85:
                    3b:6b:32:5a:84:5d:27:ec:fd:8e:73:52:c6:b0:15:
                    b5:2a:0d:87:68:5a:ff:ce:62:3a:09:13:31:0b:0c:
                    ac:30:b3:fb:55:00:33:ba:db:cd:55:1a:b0:26:ec:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F1:07:22:A8:AE:7E:7D:49:88:76:04:41:92:92:52:E3:AD:0B:9A
            X509v3 Authority Key Identifier:
                keyid:CC:34:52:0B:59:5F:F4:E2:0F:C1:BC:7F:10:89:28:DB:78:BF:1C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35322e302f32342d3234203d3e20323639353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:9a:54:75:e1:5e:26:f9:67:72:78:57:fa:12:28:f7:8a:0d:
         7e:71:ca:82:a0:1f:67:aa:63:51:db:04:80:94:09:cb:e8:ea:
         8d:8a:a3:27:11:b9:75:02:ca:3d:96:20:14:e9:17:4a:99:f9:
         d1:79:1b:9f:61:51:fa:8a:a9:da:42:0e:0d:ea:e9:88:88:4d:
         1f:75:0d:f4:38:c1:14:43:4b:27:64:94:26:03:39:a5:d5:90:
         18:ea:48:8a:20:6c:dc:31:12:7d:a0:86:d5:24:66:db:0c:a3:
         f7:0f:66:9d:80:20:82:96:b5:88:02:e3:9a:df:27:05:6e:15:
         87:d5:ea:28:fa:b9:a5:62:31:cc:7c:24:4f:81:3a:ed:35:cd:
         5c:b7:38:f9:99:50:8a:d3:60:fc:ca:6b:7a:85:50:d8:e5:0d:
         a2:38:cf:e2:97:96:c9:79:35:d5:79:95:d0:ee:9b:18:85:45:
         a3:1d:ab:82:74:e2:26:94:d0:8d:de:76:33:0d:fb:6f:8c:7c:
         41:16:78:54:9b:1e:bb:3b:0c:6b:dd:d0:bf:d7:38:bf:a0:cc:
         42:cd:51:bc:e7:01:d9:f1:9d:cd:c7:94:3a:83:71:e1:cd:97:
         5c:a9:f7:8f:21:ed:e1:e4:0f:3e:92:db:4a:69:c8:5e:0b:d6:
         fd:ae:bc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:15:27 2025 by rpki-client