Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3232203d3e20323637323730.roa
File:                     34352e3233322e3135362e302f32322d3232203d3e20323637323730.roa (raw, json)
Hash identifier:          iYRGtTncGR8ij1Bn/RY3xuGQpnFyvel6CuRY7aZC064=
Subject key identifier:   58:DF:5C:E1:A0:96:95:BE:97:D5:CC:A5:0A:73:75:59:89:FC:E0:86
Certificate issuer:       /CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
Certificate serial:       654D6578673031B0FC5DCA566A6BE017EF00C372
Authority key identifier: 81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3232203d3e20323637323730.roa
Signing time:             Wed 16 Aug 2023 18:44:39 +0000
ROA not before:           Wed 16 Aug 2023 18:39:39 +0000
ROA not after:            Wed 14 Aug 2024 18:44:39 +0000
asID:                     267270
IP address blocks:        45.232.156.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4d:65:78:67:30:31:b0:fc:5d:ca:56:6a:6b:e0:17:ef:00:c3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
        Validity
            Not Before: Aug 16 18:39:39 2023 GMT
            Not After : Aug 14 18:44:39 2024 GMT
        Subject: CN=58DF5CE1A09695BE97D5CCA50A73755989FCE086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:bd:f2:53:5f:ba:2d:95:d9:e6:8b:ba:93:
                    02:d3:ae:d2:84:75:a0:14:98:ff:d4:bc:df:b8:47:
                    80:05:42:ba:49:fb:9a:00:fd:32:49:c5:07:78:42:
                    e6:d5:5b:18:da:9e:2a:4e:8d:be:51:ab:ae:fd:2c:
                    b7:f8:44:4c:a6:51:5e:5d:9d:3b:56:69:28:72:ef:
                    50:cc:bf:42:55:19:b5:a9:b8:81:f2:5e:16:d1:66:
                    28:21:13:ba:37:88:3f:b6:e4:c3:7f:f2:30:af:91:
                    cb:a0:40:64:94:ae:5d:2c:50:00:22:01:c6:43:07:
                    81:df:1d:77:0c:d5:91:63:52:21:1d:11:80:5a:a2:
                    be:82:5e:5d:60:fb:26:99:3a:bb:f1:7e:72:ae:2a:
                    16:27:04:4a:7b:1e:47:55:19:77:b0:78:45:a8:b5:
                    8a:da:24:24:67:a5:c4:63:b0:35:9b:a7:4f:3c:04:
                    7f:94:33:43:59:e5:0f:f2:69:7d:42:2d:61:3d:c4:
                    30:16:7d:b5:96:4a:dc:d4:01:63:59:56:28:e1:5e:
                    e9:18:f9:97:ce:ef:ed:fd:fe:2c:d3:c8:7f:91:81:
                    22:ea:5d:56:d2:fe:50:43:12:40:dc:e8:56:a0:03:
                    48:8f:1c:a7:da:84:a6:af:c0:4e:18:96:bd:83:75:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DF:5C:E1:A0:96:95:BE:97:D5:CC:A5:0A:73:75:59:89:FC:E0:86
            X509v3 Authority Key Identifier:
                keyid:81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3232203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:d3:fb:e9:d5:17:28:95:69:4d:e9:95:1d:77:f7:58:af:ef:
         60:1e:82:fa:ee:25:44:51:14:1a:cb:05:99:4f:1c:8b:ff:cb:
         4e:6f:b6:d1:8c:dc:d9:a4:dc:66:99:ea:bc:82:d0:df:d1:6d:
         1d:1d:b9:38:d8:81:8a:a4:4a:3e:49:13:78:d5:31:89:4f:18:
         48:80:9b:ee:32:f2:9f:30:fa:b6:ae:9d:ee:f4:ca:32:e7:85:
         ab:27:00:a0:e9:ea:21:49:0e:5d:f9:89:69:86:4f:c8:df:d3:
         af:f0:38:b3:22:49:45:f4:8c:13:b4:f7:ac:e7:10:1f:0a:3d:
         54:94:fa:3b:e6:6e:bc:c3:f6:e6:24:29:0f:5a:ae:c7:78:ad:
         ce:27:6c:61:a3:dd:d9:82:08:e1:71:bc:cc:c4:66:fa:a2:37:
         37:04:a0:81:14:c5:7d:b8:c1:a1:6c:7c:06:64:c9:a7:95:46:
         11:70:97:5d:54:f5:44:aa:17:f2:20:e6:50:a9:03:4e:e5:d6:
         de:78:98:af:1a:e4:22:71:b3:06:0e:70:c1:31:7c:6f:a9:0d:
         5b:b5:99:fd:03:80:63:a6:c9:f8:01:a1:89:17:3c:d8:af:16:
         34:a7:43:fd:40:7b:9d:37:c6:e7:92:88:5e:35:c4:85:7f:d3:
         91:48:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:08:47 2025 by rpki-client