Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTLzqKgLiPuFUtUbvJqrKkaBr8Csh9DaV75DzQejCsPk/0/34352e3233352e3138382e302f32342d3332203d3e20323638323036.roa
File:                     34352e3233352e3138382e302f32342d3332203d3e20323638323036.roa (raw, json)
Hash identifier:          Q8XNA2YYr4Tg9m+0bWbfzQWG/JW+SW2tXnPBEU+fbuY=
Subject key identifier:   C2:6A:47:6F:FE:86:25:5C:1D:C2:48:A3:7A:A4:23:DC:CD:2E:F2:AC
Certificate issuer:       /CN=81D91E4E61022E0DA5BA5224FE8B65A92ED03DB1
Certificate serial:       576DB0A30B2F9B8824EC4FA3D10069DC35867318
Authority key identifier: 81:D9:1E:4E:61:02:2E:0D:A5:BA:52:24:FE:8B:65:A9:2E:D0:3D:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81D91E4E61022E0DA5BA5224FE8B65A92ED03DB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTLzqKgLiPuFUtUbvJqrKkaBr8Csh9DaV75DzQejCsPk/0/34352e3233352e3138382e302f32342d3332203d3e20323638323036.roa
Signing time:             Thu 16 Feb 2023 16:12:59 +0000
ROA not before:           Thu 16 Feb 2023 16:07:59 +0000
ROA not after:            Thu 15 Feb 2024 16:12:59 +0000
asID:                     268206
IP address blocks:        45.235.188.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6d:b0:a3:0b:2f:9b:88:24:ec:4f:a3:d1:00:69:dc:35:86:73:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D91E4E61022E0DA5BA5224FE8B65A92ED03DB1
        Validity
            Not Before: Feb 16 16:07:59 2023 GMT
            Not After : Feb 15 16:12:59 2024 GMT
        Subject: CN=C26A476FFE86255C1DC248A37AA423DCCD2EF2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b1:6b:e8:18:52:6b:9a:27:ea:bf:9d:0d:d7:
                    50:2b:d0:86:aa:ed:56:d0:fb:36:09:f0:d5:53:87:
                    b1:c6:29:8e:e1:8d:6b:46:81:59:bc:b2:69:89:6a:
                    fc:43:b6:ef:98:65:dc:67:4f:5d:c8:48:5c:1d:00:
                    08:86:e7:ee:9a:19:84:0e:cf:83:16:85:c2:b8:37:
                    f1:8a:29:83:f1:ee:d0:e5:55:41:d5:19:9a:7d:e5:
                    a0:40:9e:e7:75:49:47:bd:a2:8e:55:96:ee:04:30:
                    61:66:8d:43:41:7f:ed:fe:39:05:1f:7a:3f:a7:8d:
                    ba:e9:f3:79:e9:fa:39:69:eb:e1:b2:d8:b9:66:6e:
                    84:82:1e:fa:86:9f:94:dc:4c:f1:04:12:15:19:80:
                    99:c4:4a:70:26:15:9a:1d:cd:de:13:16:da:17:c3:
                    ec:a2:af:bc:f1:af:be:8c:6b:6c:52:c6:7d:d3:7e:
                    01:fd:17:19:35:40:15:81:59:0c:1a:f7:7f:48:f3:
                    0c:c0:1b:89:9e:82:6c:5e:81:69:99:3b:fc:67:45:
                    51:d9:4f:45:b4:a7:6b:5a:27:19:45:4a:fd:19:bb:
                    88:a2:a4:7e:48:d8:f0:97:94:cc:56:31:ed:c7:1a:
                    24:25:f1:82:93:cf:62:b7:4b:6f:41:f2:33:dc:b8:
                    8e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6A:47:6F:FE:86:25:5C:1D:C2:48:A3:7A:A4:23:DC:CD:2E:F2:AC
            X509v3 Authority Key Identifier:
                keyid:81:D9:1E:4E:61:02:2E:0D:A5:BA:52:24:FE:8B:65:A9:2E:D0:3D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTLzqKgLiPuFUtUbvJqrKkaBr8Csh9DaV75DzQejCsPk/0/81D91E4E61022E0DA5BA5224FE8B65A92ED03DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81D91E4E61022E0DA5BA5224FE8B65A92ED03DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTLzqKgLiPuFUtUbvJqrKkaBr8Csh9DaV75DzQejCsPk/0/34352e3233352e3138382e302f32342d3332203d3e20323638323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:7b:d5:88:08:15:48:2e:b7:52:12:31:35:88:4c:d6:6d:cc:
         a6:af:cd:d7:cf:44:1c:49:db:fc:59:2c:78:a3:2c:3c:2c:d6:
         2b:f1:bb:b4:da:de:b8:18:a1:a6:d7:f9:b6:4e:f3:ef:89:f5:
         a5:38:06:38:4a:dc:81:8c:e1:d7:b6:0c:4f:72:4a:57:6f:53:
         af:34:c0:cd:52:aa:b4:75:32:b8:9d:c3:59:72:7e:64:c4:4b:
         35:ff:5f:77:cf:77:c9:4a:10:ae:e4:ee:9e:ff:6a:f8:4f:d3:
         10:db:54:7a:2f:1f:22:c3:2a:18:da:f4:18:86:79:d2:77:1b:
         11:6a:d6:6a:79:58:5e:ed:77:e8:e3:3f:48:07:7a:1c:94:f7:
         f8:bd:d4:c7:a6:bb:60:63:54:c8:a9:08:4b:04:41:a3:a3:77:
         35:a6:30:ac:bd:e4:a9:5d:65:9a:36:59:7b:10:ce:1f:f2:87:
         68:f3:08:aa:db:71:f2:35:73:70:b2:e3:d4:cf:33:01:13:19:
         81:c3:54:c5:e8:9d:b0:6b:fb:c4:cf:9e:75:7b:5f:85:66:da:
         a1:65:80:e0:4a:ae:1b:41:3c:ee:dc:7e:da:f8:6a:0b:c6:b7:
         27:2c:b5:75:cd:d5:a3:93:d7:d4:8d:7e:5e:8e:e4:98:b5:d6:
         06:cf:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:16 2025 by rpki-client