Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38332e302f32342d3234203d3e20323638363038.roa
File:                     34352e3136342e38332e302f32342d3234203d3e20323638363038.roa (raw, json)
Hash identifier:          9atZ+sQ0o11I3A8vao4HOYuf+cFIDo57AnLlgYWlW84=
Subject key identifier:   DF:07:4C:55:67:3D:4D:D2:96:F3:9C:0F:DD:F7:68:40:AA:29:77:B5
Certificate issuer:       /CN=DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249
Certificate serial:       5A0671A47523F5BA53314632FB0E7B522A73FDD4
Authority key identifier: DE:5D:38:FB:58:25:9E:39:64:BD:75:DF:E7:AF:1B:1A:B4:C2:02:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38332e302f32342d3234203d3e20323638363038.roa
Signing time:             Mon 31 Jan 2022 19:31:03 +0000
ROA not before:           Mon 31 Jan 2022 19:26:03 +0000
ROA not after:            Mon 30 Jan 2023 19:31:03 +0000
asID:                     268608
IP address blocks:        45.164.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:06:71:a4:75:23:f5:ba:53:31:46:32:fb:0e:7b:52:2a:73:fd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249
        Validity
            Not Before: Jan 31 19:26:03 2022 GMT
            Not After : Jan 30 19:31:03 2023 GMT
        Subject: CN=DF074C55673D4DD296F39C0FDDF76840AA2977B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:eb:ff:31:57:ce:00:d5:0a:d2:9e:8c:84:
                    27:3e:6f:82:99:73:f4:f3:e4:b5:a1:23:c1:0d:ad:
                    2d:18:3d:32:2b:86:c1:b8:38:38:0e:94:70:f5:42:
                    10:a5:84:d5:43:c0:61:32:69:58:6b:41:ae:51:e8:
                    60:ec:03:24:ac:6a:02:3c:5f:7d:1e:56:46:b3:5f:
                    67:7c:97:1e:3d:bb:da:3d:68:d1:2b:41:b0:fa:f3:
                    31:19:7a:f0:31:9e:bd:63:31:c5:f4:b7:46:f4:7e:
                    8b:f7:23:a5:61:9a:9f:35:22:c2:8d:4c:89:ca:56:
                    46:9e:ec:3d:81:d7:99:f2:5a:54:37:f5:f3:62:04:
                    28:ea:fe:43:54:b2:bc:ca:e4:46:32:74:89:01:f1:
                    eb:29:26:d1:6e:6f:4e:33:41:cd:ab:e9:5f:1d:51:
                    b7:ec:b6:2e:62:e9:ea:2a:bd:ed:5e:91:56:a4:3e:
                    61:52:3c:bb:02:89:50:c3:8f:34:7e:22:3e:d5:66:
                    7e:fb:25:af:de:25:d2:de:58:f6:15:14:bc:5b:fb:
                    17:5b:62:43:d2:8f:10:7e:64:85:4d:87:c9:46:15:
                    e4:4f:e9:7a:80:f6:dd:6e:46:82:8f:e9:3e:7b:c4:
                    32:72:09:29:1e:fe:36:38:e0:4a:26:24:6a:ac:20:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:07:4C:55:67:3D:4D:D2:96:F3:9C:0F:DD:F7:68:40:AA:29:77:B5
            X509v3 Authority Key Identifier:
                keyid:DE:5D:38:FB:58:25:9E:39:64:BD:75:DF:E7:AF:1B:1A:B4:C2:02:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38332e302f32342d3234203d3e20323638363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:8f:8b:7b:e2:ed:dd:46:fd:76:25:e7:1f:89:c9:06:1e:3e:
         5c:27:5e:d3:66:26:6a:69:9c:f9:c9:97:50:ee:23:65:ec:fe:
         3f:1b:e6:ca:ca:f7:62:c8:58:52:e1:80:4f:db:cd:03:de:85:
         62:59:1e:60:f2:1d:cf:94:33:f1:8f:17:84:24:4f:60:e8:19:
         e1:90:65:97:12:fb:97:26:a9:d0:0e:58:07:84:c0:aa:46:0e:
         c1:45:e6:0a:a5:64:1d:a9:d5:45:79:c4:12:63:2d:ff:fd:74:
         45:e8:bc:e4:45:d9:51:ed:d7:73:cd:cc:bc:cb:e2:c6:08:8a:
         fa:6d:d0:05:4d:cc:e4:bf:67:0a:98:03:69:7c:a2:29:b5:59:
         65:d0:56:36:a3:0f:5b:96:d4:0c:2b:fb:60:3a:56:5f:12:25:
         72:d3:84:c7:2c:c2:19:be:17:c0:66:af:9e:fb:0e:57:e3:a1:
         22:73:ee:bd:7b:28:38:61:46:ce:89:bf:d9:9e:38:0d:79:a7:
         7f:03:1e:55:b9:ea:e5:dc:28:a9:25:5a:72:03:fa:e1:52:7a:
         ed:58:d9:26:ec:f6:be:ec:9b:64:ce:2f:92:e5:06:5f:67:84:
         0a:f9:ef:88:71:e2:c1:12:38:36:44:b9:21:89:96:d4:52:43:
         25:cc:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:09:10 2025 by rpki-client