Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32332d3233203d3e20323636393238.roa
File:                     34352e3232352e33322e302f32332d3233203d3e20323636393238.roa (raw, json)
Hash identifier:          +Efikq2nOtmFpKOzrXUWzcdRLqYoahc9rJdNKP0CiWY=
Subject key identifier:   92:68:55:E3:E5:7B:19:4E:8E:45:F7:CD:57:4D:3C:FA:EE:07:4B:38
Certificate issuer:       /CN=E31CBE505B4171E33F780DC5B4AEEA43E21745A6
Certificate serial:       255A8BE8128799FA9CC36A584C3BD0FCA6C65ACA
Authority key identifier: E3:1C:BE:50:5B:41:71:E3:3F:78:0D:C5:B4:AE:EA:43:E2:17:45:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32332d3233203d3e20323636393238.roa
Signing time:             Mon 10 Jul 2023 19:14:28 +0000
ROA not before:           Mon 10 Jul 2023 19:09:28 +0000
ROA not after:            Mon 08 Jul 2024 19:14:28 +0000
asID:                     266928
IP address blocks:        45.225.32.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5a:8b:e8:12:87:99:fa:9c:c3:6a:58:4c:3b:d0:fc:a6:c6:5a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E31CBE505B4171E33F780DC5B4AEEA43E21745A6
        Validity
            Not Before: Jul 10 19:09:28 2023 GMT
            Not After : Jul  8 19:14:28 2024 GMT
        Subject: CN=926855E3E57B194E8E45F7CD574D3CFAEE074B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:30:a1:18:9b:6f:b6:b0:df:21:61:e5:cd:
                    55:ac:68:6f:12:fd:e5:f5:98:ec:e3:0a:36:1c:d5:
                    0b:91:13:c3:18:ed:f5:bd:92:45:cd:c4:18:fb:5f:
                    df:e4:6d:ae:61:93:03:ab:33:eb:90:7b:40:81:1b:
                    51:b8:48:c3:09:e8:1d:f3:d9:da:4e:86:f6:1c:1d:
                    4b:20:b5:0b:38:c7:5c:65:1c:8a:7e:2a:3f:f7:7a:
                    58:97:26:a3:02:b2:cb:48:21:5b:ef:6a:d6:df:c7:
                    6f:e8:e0:a5:88:15:8b:75:74:83:cb:19:b8:59:06:
                    d3:8c:64:40:c3:b6:a8:c1:d2:bc:07:e7:23:41:42:
                    6e:30:00:47:43:3e:54:7a:99:61:8d:ce:38:ce:91:
                    35:16:72:a4:56:3e:33:72:e5:36:c1:56:8a:9b:3e:
                    7d:a2:39:55:c3:89:f3:85:10:0f:fd:f4:64:c9:69:
                    17:e4:14:ae:dd:fe:bf:5c:70:11:c6:41:ae:9c:a5:
                    3a:2b:b4:36:e5:27:34:36:fe:40:74:8c:8e:dc:11:
                    23:72:f7:7e:34:a5:a5:f1:57:f3:bc:18:09:f9:a1:
                    f7:4b:1f:97:4b:6c:74:af:91:1b:1f:17:fe:a0:1c:
                    b2:b8:02:49:91:7a:8a:e3:eb:b1:8f:1d:ed:df:53:
                    ce:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:68:55:E3:E5:7B:19:4E:8E:45:F7:CD:57:4D:3C:FA:EE:07:4B:38
            X509v3 Authority Key Identifier:
                keyid:E3:1C:BE:50:5B:41:71:E3:3F:78:0D:C5:B4:AE:EA:43:E2:17:45:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E31CBE505B4171E33F780DC5B4AEEA43E21745A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33322e302f32332d3233203d3e20323636393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:31:ac:88:75:04:2a:35:bf:6d:03:83:ec:18:b3:d7:a5:b8:
         02:55:c3:fa:7b:7d:a5:ef:8a:ef:04:a7:be:f2:82:98:63:f8:
         61:7e:69:3e:3a:18:be:c1:2b:1a:95:d0:0c:44:6d:58:08:4a:
         8d:43:b9:df:6d:c6:f1:08:2e:01:c2:c3:48:9a:a4:5a:02:11:
         42:67:91:be:d1:1b:2c:71:3f:64:93:15:e7:4d:eb:51:25:58:
         cb:b9:c9:a9:3f:cc:9e:50:53:5e:5b:cc:56:76:e8:91:51:c4:
         05:b0:7f:04:c2:cb:df:79:62:f2:ac:c1:a7:cc:48:4c:6a:46:
         1d:f3:c2:35:8a:ac:c5:4d:6a:a0:c9:71:cf:b7:d6:6b:6b:f3:
         a6:95:b8:8f:cc:3c:f2:89:81:97:25:30:33:fd:da:70:20:5d:
         ac:86:53:d0:11:99:59:bd:29:8a:e1:5c:ad:f1:c2:d1:62:06:
         57:51:9a:f1:c2:03:41:e4:3a:18:27:df:4f:63:43:b8:94:eb:
         b4:3f:dd:af:f8:58:2f:41:d8:6d:aa:95:d0:e9:7a:97:bf:b6:
         b9:c4:ff:ae:7b:0e:c0:5a:6c:63:57:34:d5:ef:6e:43:eb:d7:
         e2:71:36:86:20:79:43:18:61:07:65:64:c0:47:8e:d7:a6:d7:
         00:63:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:42:22 2025 by rpki-client