Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/34352e3139302e3131362e302f32322d3232203d3e20323639363239.roa
File:                     34352e3139302e3131362e302f32322d3232203d3e20323639363239.roa (raw, json)
Hash identifier:          /DkeDEjwE+KnDp0H4KgOTJ4IqIxjNbgGIFMRcso1Gxw=
Subject key identifier:   95:4B:AF:89:18:22:4B:3E:41:77:F5:D0:FD:D0:AA:77:71:56:9A:00
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       03788468ECB2A62C7DE8914CCDD7EBB0B650C771
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/34352e3139302e3131362e302f32322d3232203d3e20323639363239.roa
Signing time:             Thu 16 Mar 2023 19:10:58 +0000
ROA not before:           Thu 16 Mar 2023 19:05:58 +0000
ROA not after:            Thu 14 Mar 2024 19:10:58 +0000
asID:                     269629
IP address blocks:        45.190.116.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:78:84:68:ec:b2:a6:2c:7d:e8:91:4c:cd:d7:eb:b0:b6:50:c7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 16 19:05:58 2023 GMT
            Not After : Mar 14 19:10:58 2024 GMT
        Subject: CN=954BAF8918224B3E4177F5D0FDD0AA7771569A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:16:1c:e6:72:94:d4:36:6d:e2:97:61:31:
                    4f:6f:e2:96:90:6c:b1:47:22:de:8e:2d:09:f3:fd:
                    51:89:11:2c:f0:53:b6:b0:46:21:3f:59:ab:a1:d9:
                    6d:d9:5c:86:f4:49:c9:8a:55:d0:f9:fe:ea:be:8d:
                    eb:05:ec:b7:43:c2:c5:0c:99:53:37:77:54:3b:35:
                    42:6b:fb:ec:a2:ec:92:13:34:99:a7:9c:5b:0b:d2:
                    ba:90:1a:1c:f4:c8:70:9a:27:44:51:4e:a3:49:18:
                    42:54:9d:8a:86:ea:83:ef:d5:f8:e5:7a:e9:1c:13:
                    94:c0:4d:84:1e:d3:a1:a1:09:90:39:86:44:f1:8b:
                    03:2c:e0:43:88:ce:8d:78:64:f4:cf:00:eb:ae:36:
                    86:9e:f4:08:50:34:85:f1:24:50:c7:f4:57:f7:c4:
                    eb:dd:34:de:cd:90:d6:41:97:43:97:b7:f3:8c:88:
                    3e:73:d1:e3:13:63:8c:46:66:c8:f8:e6:c1:f7:a6:
                    59:2b:20:44:43:b7:a0:30:fe:cd:38:4c:fc:df:57:
                    c0:7c:38:97:8c:e9:56:c1:ff:8a:ba:75:9f:ae:a8:
                    73:f3:97:55:0b:5d:47:09:c7:f4:a4:17:1a:79:de:
                    4f:ed:12:af:db:5a:a3:11:cc:c0:d1:d9:70:66:4c:
                    3c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4B:AF:89:18:22:4B:3E:41:77:F5:D0:FD:D0:AA:77:71:56:9A:00
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/34352e3139302e3131362e302f32322d3232203d3e20323639363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:6d:a0:78:01:36:2d:5f:17:b7:22:7c:39:2e:30:44:59:cd:
         15:3c:b5:cc:4c:c2:f6:29:6d:1e:ca:a3:ac:c2:1b:a7:38:63:
         ce:b1:5f:70:7e:90:ab:05:58:b8:91:6c:6c:01:61:0d:17:c2:
         94:4c:31:e4:c0:33:63:d4:af:c4:e6:08:3d:1f:73:71:d3:17:
         ee:7c:83:10:de:de:3a:c0:55:df:1e:45:d2:a2:17:cd:b7:10:
         e5:e6:99:03:a9:04:81:c8:56:7e:ee:4a:65:10:5e:2e:72:a2:
         1f:9f:f7:75:b9:2e:35:b0:82:88:dd:c4:3b:e9:ff:6f:28:f5:
         b2:8c:9e:09:b4:88:21:c1:1b:03:85:1e:ac:8c:99:bf:d3:e3:
         a8:76:06:68:ea:70:b7:fe:40:bc:09:c1:e0:13:c9:ab:1a:b8:
         3f:bf:2d:d6:b2:63:7c:4e:a6:50:8c:a9:eb:f2:20:b6:8b:41:
         bc:9a:23:79:17:84:a1:6d:3c:2f:7d:6f:66:a7:c4:3e:0a:99:
         80:81:2a:bb:74:45:0a:94:f9:29:9d:83:83:1e:7d:c3:b0:f9:
         a1:72:a7:7e:fa:b2:3c:2f:84:f6:72:7c:0c:94:d0:db:e9:e6:
         82:50:99:8d:90:e9:2e:dc:9e:bf:b6:5b:42:0c:14:bd:ed:5c:
         dc:15:92:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:59:33 2025 by rpki-client