Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa
File:                     34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (raw, json)
Hash identifier:          5DFuPwLGnjMisAhe3hE8SNP9kat9LK4H/aXpMLTHeh8=
Subject key identifier:   F2:01:DB:EF:DA:32:32:27:FB:B9:4D:CA:35:6E:D1:CE:C5:98:FC:07
Certificate issuer:       /CN=6E1445AA0189887B340B440C514D8045AAAD400F
Certificate serial:       595AC68E0E0080F373134C211D2BC34FEBADC2A6
Authority key identifier: 6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1445AA0189887B340B440C514D8045AAAD400F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa
Signing time:             Wed 18 Oct 2023 19:45:46 +0000
ROA not before:           Wed 18 Oct 2023 19:40:46 +0000
ROA not after:            Wed 16 Oct 2024 19:45:46 +0000
asID:                     268137
IP address blocks:        45.169.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5a:c6:8e:0e:00:80:f3:73:13:4c:21:1d:2b:c3:4f:eb:ad:c2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1445AA0189887B340B440C514D8045AAAD400F
        Validity
            Not Before: Oct 18 19:40:46 2023 GMT
            Not After : Oct 16 19:45:46 2024 GMT
        Subject: CN=F201DBEFDA323227FBB94DCA356ED1CEC598FC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:66:da:e6:27:b1:93:0c:c6:42:10:f4:1f:
                    63:9f:d6:02:a4:a0:d4:c6:1f:b7:24:14:3d:a3:67:
                    9a:15:3a:98:7d:bc:5e:8b:16:9c:fa:cf:2a:41:00:
                    0b:11:01:65:dd:4f:ac:aa:9b:4e:74:d8:c1:58:df:
                    10:11:98:f0:44:51:61:61:c9:02:f5:a6:b6:7b:80:
                    6e:64:a4:5d:27:19:e7:2b:88:c0:20:a3:be:90:ef:
                    33:41:b0:49:80:c9:87:d4:fe:6b:5d:06:44:19:4a:
                    e5:1e:5f:48:21:0c:d1:ec:eb:d2:a4:1d:76:06:f1:
                    d3:38:c6:13:0d:07:c5:54:17:b5:67:3d:d3:71:77:
                    52:12:4a:0a:19:7e:f2:bb:dd:a0:75:11:49:94:5e:
                    42:d1:a3:35:52:47:70:17:66:50:ac:2d:26:4a:5e:
                    0a:6b:1d:cb:01:cf:4a:b0:e9:9b:0a:d0:85:ef:ae:
                    86:c7:4a:46:6e:7c:f5:90:74:07:86:cd:2f:4e:45:
                    02:16:d0:f6:a5:f0:6e:52:d8:4b:45:78:9f:32:4f:
                    ca:a4:4d:8f:21:2a:8b:96:9d:71:ff:cb:4b:c3:87:
                    ab:7e:a2:b8:1b:68:ca:73:35:48:95:46:85:39:b6:
                    a8:af:0a:f3:ae:db:8f:e3:e2:22:8a:43:e3:9c:eb:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:01:DB:EF:DA:32:32:27:FB:B9:4D:CA:35:6E:D1:CE:C5:98:FC:07
            X509v3 Authority Key Identifier:
                keyid:6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/6E1445AA0189887B340B440C514D8045AAAD400F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1445AA0189887B340B440C514D8045AAAD400F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:78:92:ee:20:27:03:b6:51:16:85:ce:0d:53:4e:aa:bf:45:
         6e:dd:b3:af:62:c6:7b:35:1e:16:08:90:f8:fa:a0:da:53:c7:
         20:1d:4c:09:f2:12:26:aa:2a:8b:03:29:cc:ae:a5:ff:cc:87:
         55:48:5c:ad:dc:a2:03:cf:3c:47:1a:23:67:5a:7e:8f:11:72:
         42:50:53:a8:63:4c:5a:19:2b:47:84:70:f7:1d:e7:34:d1:00:
         55:5f:9b:76:8e:0e:ef:5b:44:b3:96:50:53:76:d5:0c:c2:ee:
         7e:b1:af:65:ad:ca:db:b2:29:8b:69:42:bd:41:6f:8c:a6:83:
         7f:cd:bc:47:07:70:4d:13:48:6b:87:cd:0e:c2:71:a4:15:40:
         a6:85:e6:c3:e9:88:1b:c8:86:74:ed:2e:79:6e:89:8d:8d:ee:
         ce:a8:5f:43:13:f2:88:35:1f:be:87:64:70:60:cd:f9:c0:78:
         5c:ef:de:5d:4e:ab:f9:73:a9:9b:cb:be:45:bf:da:eb:7b:f6:
         46:16:89:fe:89:aa:c9:00:0e:5f:28:7d:57:73:94:43:94:d1:
         46:ac:c4:63:e4:f8:14:b2:70:c3:93:c6:84:69:15:09:3b:be:
         01:11:10:c4:55:2e:73:9d:27:60:cb:1d:b2:05:b2:f7:de:43:
         41:02:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:18 2025 by rpki-client