Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3233203d3e20323639353234.roa
File:                     34352e3138372e33322e302f32322d3233203d3e20323639353234.roa (raw, json)
Hash identifier:          +rWIPMHbvo4aDzoZ7/5pv4Se6F+Ax5CS0RCLjJ0DWqI=
Subject key identifier:   87:35:87:71:C5:2D:01:99:D9:87:81:3F:E3:EB:C4:44:79:68:68:8F
Certificate issuer:       /CN=5CFD4BD8357F505D6CB1A47E9C153D57129592B6
Certificate serial:       CA76545A34A6F16D41B00EF2A8E5BB79C2B57D
Authority key identifier: 5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3233203d3e20323639353234.roa
Signing time:             Fri 06 Jan 2023 19:53:28 +0000
ROA not before:           Fri 06 Jan 2023 19:48:28 +0000
ROA not after:            Fri 05 Jan 2024 19:53:28 +0000
asID:                     269524
IP address blocks:        45.187.32.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ca:76:54:5a:34:a6:f1:6d:41:b0:0e:f2:a8:e5:bb:79:c2:b5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFD4BD8357F505D6CB1A47E9C153D57129592B6
        Validity
            Not Before: Jan  6 19:48:28 2023 GMT
            Not After : Jan  5 19:53:28 2024 GMT
        Subject: CN=87358771C52D0199D987813FE3EBC4447968688F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:ee:fb:4d:2e:50:51:74:2f:7a:37:68:a0:
                    8c:87:1b:b3:f9:b2:eb:89:d4:f0:c6:5d:01:c0:44:
                    77:79:a9:77:cd:50:7c:42:a5:90:cc:cd:87:0c:6c:
                    bb:91:90:b3:e5:67:a5:3d:bb:75:96:a4:76:aa:65:
                    ba:7b:e5:2a:49:90:a3:98:19:b6:f7:e0:5c:6d:9c:
                    1a:38:96:d0:80:58:d3:58:87:7c:4f:84:e2:43:da:
                    5d:a5:17:39:1c:ba:65:8f:e6:8a:94:5d:28:21:0a:
                    f4:2c:5e:e6:ec:74:71:e4:ce:14:cb:c6:61:b0:dd:
                    51:da:cb:e4:39:1c:e6:b2:fb:1d:7a:0f:94:7b:a3:
                    e8:b7:a3:5c:30:56:ef:10:61:89:87:56:ef:a9:a3:
                    e4:07:08:b8:29:5f:e3:5f:44:10:16:2d:69:94:e2:
                    93:19:ad:9b:e8:a6:64:a1:98:32:a6:3f:4f:ec:80:
                    e6:4b:73:57:3a:8a:1e:6c:5a:3e:e9:7b:8e:0e:0d:
                    42:79:64:33:39:08:ca:07:1c:da:e8:02:df:b9:6e:
                    2e:cd:9e:8b:03:cf:66:15:2d:1e:8a:fa:8e:b7:5a:
                    ea:a7:80:b7:ff:c3:f9:01:e6:12:f2:4b:16:c3:4f:
                    6b:e9:1c:b3:0a:7c:a9:44:91:da:83:66:d0:87:29:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:35:87:71:C5:2D:01:99:D9:87:81:3F:E3:EB:C4:44:79:68:68:8F
            X509v3 Authority Key Identifier:
                keyid:5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3233203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:94:68:c6:3c:ea:c2:aa:cf:22:77:9b:6d:41:4c:8f:16:01:
         da:c5:23:89:e5:f6:6c:e8:6c:36:15:1c:1a:e4:15:6b:c2:50:
         f5:6a:89:6e:0b:65:83:44:2b:8a:3f:06:b0:af:f4:04:35:c4:
         69:c1:e0:0d:ec:cd:41:e5:fe:ca:1c:fe:60:e2:40:c9:d8:17:
         e5:33:2c:33:c5:60:de:b8:80:e1:f0:93:d9:18:67:bf:fd:2f:
         3c:87:c0:5a:b1:05:be:33:56:0f:2d:f7:ee:52:7c:d0:1e:ca:
         4c:22:38:04:12:3a:44:05:fa:85:9b:eb:d6:32:61:6d:c6:13:
         f0:ad:0a:c1:40:3e:e3:b0:ff:4b:57:b6:d4:21:b1:ab:2d:5a:
         6c:e4:0d:b0:7b:42:a6:00:a0:e2:2f:6f:0f:0d:78:ef:a5:7d:
         eb:68:05:fc:12:33:a9:f1:c9:18:cd:22:2e:cd:9f:73:b7:fe:
         6a:f4:55:26:a7:ca:49:59:9d:80:f4:d7:20:98:10:e2:b6:6c:
         8f:79:b2:c6:63:31:03:77:62:31:df:79:57:05:f9:9f:f4:bb:
         55:5b:e5:ca:50:17:ee:63:bd:45:ec:1b:92:d9:ca:38:b6:08:
         0c:28:26:9a:7e:f7:1c:4a:3b:af:d1:8e:cb:c4:ca:ce:3f:9a:
         be:54:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:49 2025 by rpki-client