Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32322d3232203d3e20323639343536.roa
File:                     34352e3138372e35322e302f32322d3232203d3e20323639343536.roa (raw, json)
Hash identifier:          43pCjB8dSyMlHHkhTWhiZcfXf4RY+S7adNpX+EjYQuY=
Subject key identifier:   AA:DE:66:F8:8B:F9:DC:C7:35:CF:B8:44:2E:9E:09:94:07:23:92:D8
Certificate issuer:       /CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
Certificate serial:       386BA17BABD6B4998305D27540D62FCD3AB56B14
Authority key identifier: 4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32322d3232203d3e20323639343536.roa
Signing time:             Tue 26 Dec 2023 15:27:17 +0000
ROA not before:           Tue 26 Dec 2023 15:22:17 +0000
ROA not after:            Tue 24 Dec 2024 15:27:17 +0000
asID:                     269456
IP address blocks:        45.187.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6b:a1:7b:ab:d6:b4:99:83:05:d2:75:40:d6:2f:cd:3a:b5:6b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
        Validity
            Not Before: Dec 26 15:22:17 2023 GMT
            Not After : Dec 24 15:27:17 2024 GMT
        Subject: CN=AADE66F88BF9DCC735CFB8442E9E0994072392D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:29:9a:fa:d8:5d:ac:71:ac:c8:db:58:7a:
                    57:3f:2e:d6:6e:64:1d:aa:c5:b1:c5:53:2e:33:12:
                    70:0f:ab:80:b4:99:38:b7:09:10:be:7a:0d:86:5c:
                    59:9f:0b:9a:4e:0a:cb:74:43:aa:5e:36:19:aa:15:
                    78:83:4e:48:45:61:77:17:7c:35:c8:be:85:17:cc:
                    a2:25:bb:aa:7c:35:c8:33:61:06:45:df:fc:95:0c:
                    4f:9d:ba:63:3c:c7:02:b7:d7:4b:62:2d:06:34:2c:
                    2d:b0:fc:0f:ed:58:99:62:44:00:ef:c0:44:e4:99:
                    1c:e9:62:79:75:3c:2d:9e:02:17:a2:d4:21:ae:44:
                    53:6b:24:c9:f7:3c:0a:59:b2:bd:5f:31:53:61:aa:
                    81:22:e9:e2:f5:9b:57:fe:29:5f:71:88:94:f6:2d:
                    88:9b:0d:4b:d1:74:ec:cd:ed:ef:cb:dc:9d:95:d8:
                    bd:22:8c:7b:68:4c:bd:f8:37:4f:fd:63:8a:28:94:
                    b6:34:13:b6:8c:dc:cc:d3:50:fa:20:31:e7:c2:df:
                    09:60:b1:f5:72:ed:1f:cc:84:8e:3b:4f:2c:78:49:
                    cf:ca:b3:5d:be:db:3b:9b:e4:5d:16:08:96:69:60:
                    8e:ee:77:3f:75:4d:2d:35:d6:8c:3c:0c:3d:77:f5:
                    21:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DE:66:F8:8B:F9:DC:C7:35:CF:B8:44:2E:9E:09:94:07:23:92:D8
            X509v3 Authority Key Identifier:
                keyid:4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32322d3232203d3e20323639343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:a4:19:b5:28:d7:43:29:32:1d:1c:9a:e9:8b:80:2d:50:38:
         23:de:0e:e3:aa:f4:45:7c:f4:1b:97:7b:9c:83:63:cb:1a:4b:
         55:fc:74:a3:00:ae:90:da:41:1e:8b:c6:5b:2f:e1:66:72:3b:
         2b:40:43:d5:65:2d:7b:2b:d6:cc:35:78:a6:c5:b7:42:87:dc:
         60:22:a8:d0:fe:12:4b:6d:75:11:51:11:7d:9a:3b:6d:cf:98:
         23:97:1a:aa:36:0d:7f:d9:22:eb:3b:80:68:59:46:ff:da:74:
         3f:c8:e6:94:9f:b9:51:f5:5e:66:e6:82:65:1d:7d:b8:5b:3f:
         8f:49:6d:be:cc:ff:65:0f:a4:f9:aa:92:4b:98:ba:1a:bc:c7:
         8a:a8:b5:48:a8:b2:f9:16:e1:ac:d7:c3:28:9b:2d:0e:ac:a1:
         e9:db:2a:8d:f7:d6:06:c5:3b:b6:9b:30:ad:d7:6d:d2:a9:72:
         09:27:6f:84:30:cc:68:b2:89:c0:e3:57:2c:0e:de:c8:04:de:
         f1:1c:a6:d4:2e:a8:c3:9f:5f:8f:e5:47:d7:b0:2d:9f:8e:38:
         c3:66:3b:6f:82:c8:a6:ff:16:ba:8c:71:ed:a5:ef:d0:e8:af:
         1a:51:6f:2e:25:54:7b:9c:04:3c:e4:cf:89:56:86:0c:e1:5d:
         99:97:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:27 2025 by rpki-client