Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/34352e3136342e342e302f32322d3234203d3e20323638363133.roa
File:                     34352e3136342e342e302f32322d3234203d3e20323638363133.roa (raw, json)
Hash identifier:          PTFy9zEAO1J7BNq0ka5V8Ydm4qxi8rrgnZcQonCE0HY=
Subject key identifier:   55:58:F4:03:EE:B8:4F:67:AF:BD:F6:AD:3F:AA:CD:2A:C6:DC:46:6D
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       670B4D108306C85EEEBB6C823874F47DAC3550F7
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/34352e3136342e342e302f32322d3234203d3e20323638363133.roa
Signing time:             Fri 03 May 2024 21:56:07 +0000
ROA not before:           Fri 03 May 2024 21:51:07 +0000
ROA not after:            Fri 02 May 2025 21:56:07 +0000
asID:                     268613
IP address blocks:        45.164.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0b:4d:10:83:06:c8:5e:ee:bb:6c:82:38:74:f4:7d:ac:35:50:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:51:07 2024 GMT
            Not After : May  2 21:56:07 2025 GMT
        Subject: CN=5558F403EEB84F67AFBDF6AD3FAACD2AC6DC466D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:c9:89:94:33:75:f8:95:3e:a3:14:99:6d:
                    7f:ae:0b:39:63:71:90:46:0d:12:15:a5:7a:c5:58:
                    df:e7:9f:e2:65:a6:26:f8:6e:1a:33:67:15:6f:d2:
                    69:a5:23:fb:64:99:db:b2:52:ec:06:19:34:8f:ac:
                    40:2e:e3:fc:8d:77:4f:b7:6e:9a:0c:10:ff:ff:d3:
                    76:3a:4f:75:69:07:41:e2:e9:4c:d9:d7:6f:17:5a:
                    4a:eb:64:78:5e:77:da:b1:79:a3:d1:9c:23:15:74:
                    d9:a5:8c:29:ea:bc:cb:6c:bb:64:59:a1:d6:53:b6:
                    8f:21:66:c2:48:41:96:74:22:ab:9e:29:51:a3:6a:
                    15:3f:36:6b:6f:28:a4:c2:46:35:c9:c1:8e:5e:ce:
                    16:88:94:fb:b3:0e:b1:51:6c:d9:33:48:c1:d3:d4:
                    19:91:22:e1:49:1b:b2:4f:18:c3:4d:5d:b3:37:0d:
                    0b:d7:2f:44:c7:08:9e:1e:4a:fe:db:dc:b0:20:5e:
                    e8:19:a3:7f:50:83:da:5d:2a:37:35:48:41:03:3a:
                    9a:ee:e5:a0:00:01:15:01:a8:4d:07:c6:a9:05:f2:
                    86:75:84:a6:52:7a:13:d1:40:8e:a5:97:27:24:88:
                    4a:9b:04:1b:5a:c7:df:e6:56:25:af:eb:d6:07:d6:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:58:F4:03:EE:B8:4F:67:AF:BD:F6:AD:3F:AA:CD:2A:C6:DC:46:6D
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/34352e3136342e342e302f32322d3234203d3e20323638363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:0b:39:f0:60:cf:bf:0a:a5:88:c8:a7:45:76:64:88:58:9e:
         05:81:94:09:1f:f0:50:7e:41:f8:48:c2:7d:5d:8b:fc:dd:03:
         a9:17:22:da:b3:a0:6b:3a:27:84:4a:9e:73:40:dd:97:a6:49:
         5f:ee:67:44:c4:66:5e:0b:7a:f3:a5:3f:6c:e5:cd:71:b7:74:
         21:2c:3c:64:1b:7b:3f:bf:c4:f8:f8:02:50:cc:c0:26:57:39:
         77:03:b4:a5:76:b9:63:26:a0:ef:77:4c:bd:10:3b:f3:b2:f2:
         74:9a:46:60:c7:be:ee:8d:e7:b1:b4:4f:ce:61:f0:d5:7e:ab:
         e8:68:40:80:1d:7c:50:14:df:e6:37:a0:57:0a:ec:ac:78:2f:
         3c:f0:4d:57:36:8a:6f:81:1d:e9:90:88:75:bb:74:7d:2b:7a:
         b0:58:19:1d:cf:b9:f2:36:3f:c4:14:07:7e:04:f0:7b:75:eb:
         ec:5a:59:23:4f:05:b1:94:75:ca:ee:43:ec:76:d2:ca:19:73:
         1e:f0:10:c6:cc:31:90:b4:b3:54:b5:6d:c8:d7:61:a9:3d:ab:
         cc:a1:c7:ba:ec:68:f0:ae:45:dd:1e:6a:6b:f5:ed:25:c7:ae:
         78:96:ed:a3:61:31:fb:f9:93:3b:1f:db:e7:97:ac:b6:59:8e:
         69:36:ce:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:19:20 2025 by rpki-client