Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa
File:                     34352e3138372e33322e302f32322d3234203d3e20323639353234.roa (raw, json)
Hash identifier:          ZUJSA0BBC6dXpRLH3IjKXrrAxaxnxKPXlqm0BNgB9kw=
Subject key identifier:   CF:53:6A:A7:33:B1:2A:49:FD:04:D2:CD:77:97:A5:41:2B:40:DA:6E
Certificate issuer:       /CN=E17F5363541897DEABD020106BBE90669B62ACA3
Certificate serial:       4C93920E27A7993F6F5A51E42B21DE5BAFD5B892
Authority key identifier: E1:7F:53:63:54:18:97:DE:AB:D0:20:10:6B:BE:90:66:9B:62:AC:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E17F5363541897DEABD020106BBE90669B62ACA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa
Signing time:             Fri 26 Apr 2024 17:13:05 +0000
ROA not before:           Fri 26 Apr 2024 17:08:05 +0000
ROA not after:            Fri 25 Apr 2025 17:13:05 +0000
asID:                     269524
IP address blocks:        45.187.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:93:92:0e:27:a7:99:3f:6f:5a:51:e4:2b:21:de:5b:af:d5:b8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17F5363541897DEABD020106BBE90669B62ACA3
        Validity
            Not Before: Apr 26 17:08:05 2024 GMT
            Not After : Apr 25 17:13:05 2025 GMT
        Subject: CN=CF536AA733B12A49FD04D2CD7797A5412B40DA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:e5:9f:56:6b:0a:9d:09:19:fb:5a:fe:98:
                    b0:c6:d9:74:ac:e4:0d:67:b2:90:9d:fd:95:cd:9b:
                    7d:90:3f:3e:00:45:60:d3:fb:f2:7b:2d:6f:91:c9:
                    40:f6:cb:d3:2a:ed:11:6c:e0:62:bb:1e:e5:c5:e1:
                    a9:d1:21:ad:b2:48:f6:15:4a:3f:ff:0b:d0:fa:01:
                    f3:35:64:86:60:c1:02:a9:a4:17:5f:57:ec:3a:fb:
                    29:86:5e:51:e3:04:b2:b6:dd:02:e8:56:c8:b2:eb:
                    cc:2e:5e:6a:12:49:0f:be:c1:ac:4b:ad:86:aa:40:
                    3e:48:fb:22:d9:62:a6:e0:da:05:2f:f8:a5:eb:de:
                    0f:48:76:b0:5d:ec:a8:68:4a:e8:97:39:af:eb:b5:
                    c5:73:b7:25:6c:e8:2f:6c:e1:b7:c6:d2:75:6f:36:
                    c2:6a:f9:1f:12:7c:48:c0:29:7f:8f:91:a0:67:2b:
                    8f:ad:09:b2:51:ea:70:ff:eb:77:5d:c9:2c:de:e2:
                    13:4a:4f:84:c5:3f:0b:91:a7:2a:78:c3:7b:94:d7:
                    a4:11:ed:f5:28:fb:1c:59:90:a1:71:fc:0a:58:f0:
                    c8:5c:ca:43:c4:f9:d7:a7:d0:f7:da:17:ed:d5:21:
                    5e:77:7a:fe:e4:bf:e8:9b:da:6c:31:1c:8b:5b:64:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:53:6A:A7:33:B1:2A:49:FD:04:D2:CD:77:97:A5:41:2B:40:DA:6E
            X509v3 Authority Key Identifier:
                keyid:E1:7F:53:63:54:18:97:DE:AB:D0:20:10:6B:BE:90:66:9B:62:AC:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/E17F5363541897DEABD020106BBE90669B62ACA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E17F5363541897DEABD020106BBE90669B62ACA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/1/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:a0:74:9a:70:1e:0d:a7:b6:9e:90:20:c3:cf:de:d5:60:24:
         57:16:f4:6d:4f:73:82:a4:21:2f:85:03:6e:a2:6e:db:6e:8e:
         b8:3d:29:73:8b:d6:1e:71:56:0e:ae:f1:5f:87:d9:89:3d:b5:
         bb:43:29:69:39:04:eb:1c:0f:af:e7:be:29:70:e4:26:16:f9:
         8a:2d:02:05:d0:82:de:35:3d:80:68:25:2d:33:26:bf:8d:2d:
         d7:b4:26:33:1e:d9:a1:0d:cb:e9:12:61:59:3a:29:bf:45:2e:
         06:67:24:8e:89:77:2e:6c:df:77:34:b9:03:71:8e:13:76:59:
         44:f3:1d:d1:a4:57:e5:cd:2e:a7:b1:85:14:6c:a5:5f:7a:b3:
         af:a6:51:50:32:2e:a8:24:35:f4:a3:b1:3e:26:9c:45:25:52:
         ba:0f:9b:6c:8f:89:ea:5e:31:3b:c1:f2:fd:24:00:42:61:c3:
         f6:9e:96:c0:62:90:cd:b6:d7:75:07:fa:f2:d4:89:97:c6:d1:
         4d:9d:83:1f:7b:93:c9:c4:18:0a:f7:f6:6f:27:4d:f1:d7:52:
         36:f3:ec:fd:3f:fc:1d:d7:51:2f:68:e6:04:23:98:7d:1d:d3:
         86:65:4d:7b:7b:7b:55:92:de:9e:28:4e:ae:fc:6f:66:5a:9b:
         42:b7:21:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:24:47 2025 by rpki-client