Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTLzqKgLiPuFUtUbvJqrKkaBr8Csh9DaV75DzQejCsPk/0/34352e3233352e3138382e302f32322d3332203d3e20323638323036.roa
File:                     34352e3233352e3138382e302f32322d3332203d3e20323638323036.roa (raw, json)
Hash identifier:          ZJ/h3fIjBfpye+zy8Pg+huNxPAeRWew2LiR/nZIRIr4=
Subject key identifier:   C7:71:D3:23:60:4A:47:A9:6D:1A:72:78:BB:D8:8B:71:FF:7D:FB:C8
Certificate issuer:       /CN=81D91E4E61022E0DA5BA5224FE8B65A92ED03DB1
Certificate serial:       1CE112C53FEA97B4813E93196571E25317200898
Authority key identifier: 81:D9:1E:4E:61:02:2E:0D:A5:BA:52:24:FE:8B:65:A9:2E:D0:3D:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81D91E4E61022E0DA5BA5224FE8B65A92ED03DB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTLzqKgLiPuFUtUbvJqrKkaBr8Csh9DaV75DzQejCsPk/0/34352e3233352e3138382e302f32322d3332203d3e20323638323036.roa
Signing time:             Thu 16 Feb 2023 16:14:04 +0000
ROA not before:           Thu 16 Feb 2023 16:09:04 +0000
ROA not after:            Thu 15 Feb 2024 16:14:04 +0000
asID:                     268206
IP address blocks:        45.235.188.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e1:12:c5:3f:ea:97:b4:81:3e:93:19:65:71:e2:53:17:20:08:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D91E4E61022E0DA5BA5224FE8B65A92ED03DB1
        Validity
            Not Before: Feb 16 16:09:04 2023 GMT
            Not After : Feb 15 16:14:04 2024 GMT
        Subject: CN=C771D323604A47A96D1A7278BBD88B71FF7DFBC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:f2:85:be:ce:20:3f:64:66:32:e8:5a:43:
                    bc:68:22:49:6f:ae:ab:70:c2:ad:96:a8:fd:dc:79:
                    86:cd:d9:8c:39:e6:a5:7b:25:81:0c:f5:6a:75:3d:
                    22:51:d3:03:89:f2:b8:0c:e1:3e:33:77:aa:25:25:
                    ff:e8:f2:ce:68:e4:4c:77:da:4c:51:b6:f4:ee:13:
                    d9:84:21:81:63:9b:8c:4f:bf:f8:ab:d4:b4:f6:4a:
                    04:89:d5:19:dc:eb:03:02:42:2d:66:5e:fa:f4:29:
                    d7:25:0f:24:3d:74:b3:84:8f:22:8d:b1:8c:10:10:
                    5d:8f:8b:aa:b3:dd:85:c5:9b:69:f4:fa:1d:be:d6:
                    f0:c2:ca:ee:0b:b1:63:cd:f2:de:15:e3:ee:e5:66:
                    fd:37:57:d2:6e:19:df:fe:28:bb:29:07:aa:4e:26:
                    e6:74:66:0f:d1:25:36:63:fb:e5:c2:49:40:9f:ed:
                    c6:48:bb:cc:d4:18:d3:8e:a7:a0:6a:9f:f4:79:f4:
                    86:df:50:fd:2e:c6:cb:bb:48:b7:9e:be:c8:62:26:
                    ca:80:98:80:64:7e:20:53:3a:ef:1d:65:b6:fb:84:
                    1a:b7:e2:e9:be:c9:87:97:dc:4a:9e:af:77:9a:e9:
                    9e:e2:5e:7d:f9:4c:3b:dd:e8:e7:3b:4b:a9:8d:e4:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:71:D3:23:60:4A:47:A9:6D:1A:72:78:BB:D8:8B:71:FF:7D:FB:C8
            X509v3 Authority Key Identifier:
                keyid:81:D9:1E:4E:61:02:2E:0D:A5:BA:52:24:FE:8B:65:A9:2E:D0:3D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTLzqKgLiPuFUtUbvJqrKkaBr8Csh9DaV75DzQejCsPk/0/81D91E4E61022E0DA5BA5224FE8B65A92ED03DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81D91E4E61022E0DA5BA5224FE8B65A92ED03DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTLzqKgLiPuFUtUbvJqrKkaBr8Csh9DaV75DzQejCsPk/0/34352e3233352e3138382e302f32322d3332203d3e20323638323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:0e:db:4b:87:48:59:7a:d5:3e:61:0c:1d:85:2f:4f:59:af:
         f2:54:a7:38:fe:d2:5b:7a:33:de:ca:27:03:94:47:49:07:d9:
         e0:12:38:19:88:52:7a:36:c4:21:e1:8b:92:0e:42:00:5f:de:
         e1:cb:ee:13:61:4b:3c:dc:27:13:c6:4f:d1:cf:ae:96:8c:4f:
         23:41:7a:94:61:3a:3d:45:3c:0f:7c:bc:01:be:91:d1:d5:52:
         96:40:31:34:d6:ac:89:40:df:be:5f:78:ab:da:51:67:a2:dc:
         04:f6:e1:7b:5a:fa:25:92:1a:ec:d7:c6:6c:87:3a:49:17:df:
         df:eb:eb:36:41:99:b9:de:72:9f:54:0d:2c:7d:7c:ba:ec:4b:
         37:c2:dd:c0:fd:36:40:27:b8:57:7b:9f:a5:56:a8:6b:6d:8b:
         34:73:f3:0c:27:1b:ed:53:e1:b1:07:ed:17:6d:b6:26:e9:74:
         b3:7e:63:9e:2c:f1:5f:05:5e:48:46:b1:c6:40:ed:79:a7:c2:
         da:5a:d3:00:9a:02:81:3b:7c:9b:d6:aa:c1:bf:d6:05:30:2b:
         f6:48:23:63:06:35:51:da:23:f0:f7:71:b1:61:a0:8d:26:4c:
         b2:e0:f9:7f:d6:76:09:1b:84:3f:96:b5:c7:0e:a7:51:1e:42:
         e6:ac:45:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:51 2025 by rpki-client