Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa
File:                     34352e3233302e3130382e302f32342d3234203d3e203631353839.roa (raw, json)
Hash identifier:          axqPwQOm6tSegL9CRRcGD3XzMYEwYY703pmTCN/7Heo=
Subject key identifier:   4A:D5:2F:16:FA:88:EA:94:F8:DE:47:AA:F8:71:C4:B2:93:95:E3:24
Certificate issuer:       /CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Certificate serial:       55954333C74E35155F1BE102A9B5C75B8795EDF1
Authority key identifier: 64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa
Signing time:             Tue 21 Mar 2023 13:30:15 +0000
ROA not before:           Tue 21 Mar 2023 13:25:15 +0000
ROA not after:            Tue 19 Mar 2024 13:30:15 +0000
asID:                     61589
IP address blocks:        45.230.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:95:43:33:c7:4e:35:15:5f:1b:e1:02:a9:b5:c7:5b:87:95:ed:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
        Validity
            Not Before: Mar 21 13:25:15 2023 GMT
            Not After : Mar 19 13:30:15 2024 GMT
        Subject: CN=4AD52F16FA88EA94F8DE47AAF871C4B29395E324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:0d:b6:fd:8f:64:13:0e:9d:2d:0d:1d:54:
                    28:fa:c1:46:4d:0c:65:31:0f:3d:78:03:fb:05:27:
                    90:42:d7:b6:e6:5c:b6:4a:5b:20:c8:5f:e5:d0:72:
                    f8:4e:8a:e1:7f:e2:e0:6e:64:6f:7b:d7:04:51:a4:
                    6f:59:75:2d:39:40:aa:be:6c:b3:71:0d:ab:2a:b2:
                    82:2b:e0:33:50:fc:45:96:09:6a:7d:06:1e:60:4f:
                    ca:f8:a9:70:32:0c:12:37:e4:eb:b5:cd:4d:93:a6:
                    5c:f8:c2:df:e1:49:e6:74:e0:40:91:4f:55:2d:9c:
                    e3:ba:9c:b1:3d:e3:05:4b:cc:a1:79:e6:f9:9b:80:
                    93:35:75:b6:ce:73:bd:8b:8d:79:b7:b0:fa:25:05:
                    98:59:95:e0:a7:9f:42:8b:c6:79:17:d7:ff:d9:e1:
                    59:65:79:4e:bc:2d:9f:b3:6a:76:d5:5f:9e:43:e7:
                    e0:71:5f:8f:e6:82:8b:39:14:a0:58:d7:75:47:33:
                    09:89:7f:2d:f8:2f:94:b1:95:9a:4c:da:7f:4a:cb:
                    bc:43:a8:51:ff:90:8c:78:5e:9f:55:92:ec:b3:40:
                    47:64:b4:a0:8d:dd:f9:8e:ac:ab:62:d5:91:38:b1:
                    6f:8b:25:60:fc:f5:f8:fd:93:2e:3f:ee:05:99:c9:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D5:2F:16:FA:88:EA:94:F8:DE:47:AA:F8:71:C4:B2:93:95:E3:24
            X509v3 Authority Key Identifier:
                keyid:64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a7:63:fa:bd:b7:4d:33:85:78:3d:0b:ad:94:c5:cd:ad:cc:
         0b:f4:0a:e1:a5:a9:fd:46:f1:be:d3:e2:ac:7f:58:a1:1a:82:
         12:18:fc:cd:4b:51:af:3f:df:10:90:8d:d1:1f:08:3a:1d:43:
         7f:7b:f3:f9:fe:ea:6d:d7:ff:ac:fc:ad:ba:34:a5:4f:68:07:
         29:c1:95:96:88:3d:97:79:21:52:dd:d7:2f:7b:47:7d:2e:8b:
         21:67:31:51:eb:05:86:02:b0:83:68:02:6d:44:f5:ca:72:b8:
         2e:55:8c:d8:0f:c2:6c:c2:77:56:d7:54:b0:8c:de:e5:3f:7e:
         3d:57:17:ec:94:57:ae:f8:30:bf:89:4b:66:b5:87:f7:38:63:
         47:94:48:1c:fb:2a:10:eb:29:83:22:fe:c9:26:45:7e:83:8a:
         60:36:62:da:b9:e4:0d:58:3b:41:3b:f6:6a:94:6e:97:a2:6d:
         68:7e:cf:59:71:9e:70:0b:5b:4c:ad:c6:1b:87:7e:ae:5b:0e:
         ab:42:da:b3:43:ad:4e:f5:66:75:e9:54:92:49:c7:60:ef:8f:
         c4:7c:95:2e:a4:f6:e3:e3:a2:ca:8d:d4:6f:c2:c8:09:ab:48:
         9b:97:1f:f1:86:3e:3c:54:1c:f0:4f:85:3e:5e:8a:11:0f:a6:
         de:00:a3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:27:17 2025 by rpki-client