Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35332e302f32342d3234203d3e20323639353738.roa
File:                     34352e3138392e35332e302f32342d3234203d3e20323639353738.roa (raw, json)
Hash identifier:          n4cynMIGmiZcuNwz/ZQhCqSML51OO3OBjIfeoQsbGo8=
Subject key identifier:   4E:23:63:EA:81:08:7A:C6:B5:B1:60:D5:11:E7:23:C2:52:5C:35:09
Certificate issuer:       /CN=CC34520B595FF4E20FC1BC7F108928DB78BF1C7F
Certificate serial:       2E34F2DB0C73BE546C94513D036F594A650EFAE8
Authority key identifier: CC:34:52:0B:59:5F:F4:E2:0F:C1:BC:7F:10:89:28:DB:78:BF:1C:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35332e302f32342d3234203d3e20323639353738.roa
Signing time:             Mon 30 Oct 2023 20:56:55 +0000
ROA not before:           Mon 30 Oct 2023 20:51:55 +0000
ROA not after:            Mon 28 Oct 2024 20:56:55 +0000
asID:                     269578
IP address blocks:        45.189.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:34:f2:db:0c:73:be:54:6c:94:51:3d:03:6f:59:4a:65:0e:fa:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC34520B595FF4E20FC1BC7F108928DB78BF1C7F
        Validity
            Not Before: Oct 30 20:51:55 2023 GMT
            Not After : Oct 28 20:56:55 2024 GMT
        Subject: CN=4E2363EA81087AC6B5B160D511E723C2525C3509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:84:60:6b:12:cc:8d:f1:a8:e2:15:35:9b:
                    0d:92:53:84:7c:1b:91:d5:3c:d8:39:85:e8:fb:4e:
                    ce:37:0f:ad:9e:dd:90:9b:2b:9a:40:f7:7d:be:ef:
                    ea:20:09:15:90:cc:5e:55:d6:cc:d6:76:74:69:5a:
                    de:7a:7e:8e:d2:85:eb:9d:d3:88:b7:bd:11:28:f7:
                    72:31:a6:38:91:d0:6e:11:5d:c9:31:76:0a:d8:c3:
                    8b:43:24:9c:21:39:d0:84:8d:32:56:be:5c:7b:73:
                    98:2f:b1:9a:c1:a9:2f:19:26:58:1e:03:e0:4c:81:
                    42:5f:6a:1b:5a:49:4f:cc:c8:cb:fa:6c:36:52:20:
                    94:8f:92:05:19:28:a8:45:c1:6b:15:84:71:69:82:
                    0d:21:14:d8:a8:17:ef:a3:f7:43:3f:39:56:8c:0c:
                    a9:9e:6b:48:aa:33:52:de:bc:f0:55:10:f4:87:30:
                    d8:8c:bd:9a:5f:e6:c9:c0:fe:37:a5:8e:f0:44:8a:
                    d4:08:e7:b1:38:e5:fa:53:7a:26:b4:03:2f:83:29:
                    41:c2:c2:42:5a:25:18:13:74:f2:e6:b2:0c:15:c7:
                    43:45:db:75:ac:79:be:06:81:ad:cf:69:42:71:0a:
                    ab:69:67:0f:b3:8b:e1:27:20:dd:2f:1c:85:6c:d3:
                    1c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:23:63:EA:81:08:7A:C6:B5:B1:60:D5:11:E7:23:C2:52:5C:35:09
            X509v3 Authority Key Identifier:
                keyid:CC:34:52:0B:59:5F:F4:E2:0F:C1:BC:7F:10:89:28:DB:78:BF:1C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35332e302f32342d3234203d3e20323639353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:25:68:cd:51:28:8e:e0:b0:15:56:b1:2c:ec:da:14:f1:3b:
         d9:56:2d:dc:35:33:79:f8:ac:5e:15:8d:de:15:55:d9:8d:79:
         b2:79:95:e8:f7:d3:46:87:7b:19:80:27:c1:90:32:d5:05:78:
         f2:4d:4c:89:3a:79:fa:ce:c2:21:e1:08:24:47:77:b7:bb:7d:
         37:9e:d1:6a:86:1e:21:df:54:2a:ab:89:cf:57:15:7b:b0:c0:
         ee:26:28:09:66:fa:0c:9c:df:ac:c9:92:e6:ea:58:b1:b5:b6:
         5a:15:34:43:dd:17:78:83:e8:0b:27:45:eb:80:92:ea:8d:5f:
         b8:da:7a:b2:73:06:15:f9:cc:b9:b4:af:2d:44:2c:57:7b:83:
         8a:11:28:2a:92:52:93:b0:c2:e5:bc:83:6a:68:66:e1:8c:48:
         f1:5d:f6:a6:df:09:1b:c8:e4:f3:f8:74:cb:1a:1d:58:56:46:
         a6:bd:98:f8:98:35:55:80:c1:a8:60:89:71:d1:30:55:2e:0c:
         69:a6:35:a7:84:a7:9c:6e:31:21:ee:3f:6a:7f:68:19:f8:ed:
         9a:4f:e8:58:22:11:f4:e9:d9:2c:eb:2e:11:b1:b1:a0:88:ec:
         90:ae:f5:92:44:34:47:fa:5d:d2:17:de:46:79:a5:88:e2:24:
         1a:2c:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:58 2025 by rpki-client