Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e33302e302f32342d3234203d3e20323638323633.roa
File:                     34352e3233372e33302e302f32342d3234203d3e20323638323633.roa (raw, json)
Hash identifier:          +Me9HY8dYmeZMWHwvLOKjWX6oTL1UxLBp7bPTQPWl5c=
Subject key identifier:   E0:A5:51:E9:87:CC:5F:08:4E:68:CB:22:2F:A1:D1:CC:84:99:BE:06
Certificate issuer:       /CN=E22818D8F42D1506482150955FA216049875C2A8
Certificate serial:       1E7FEC7A6F99F00FE31072AFF64AAC17119FF1E8
Authority key identifier: E2:28:18:D8:F4:2D:15:06:48:21:50:95:5F:A2:16:04:98:75:C2:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E22818D8F42D1506482150955FA216049875C2A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e33302e302f32342d3234203d3e20323638323633.roa
Signing time:             Mon 06 Mar 2023 18:47:26 +0000
ROA not before:           Mon 06 Mar 2023 18:42:26 +0000
ROA not after:            Mon 04 Mar 2024 18:47:26 +0000
asID:                     268263
IP address blocks:        45.237.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7f:ec:7a:6f:99:f0:0f:e3:10:72:af:f6:4a:ac:17:11:9f:f1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E22818D8F42D1506482150955FA216049875C2A8
        Validity
            Not Before: Mar  6 18:42:26 2023 GMT
            Not After : Mar  4 18:47:26 2024 GMT
        Subject: CN=E0A551E987CC5F084E68CB222FA1D1CC8499BE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:7b:bc:13:65:2d:b6:c9:4a:a2:12:8b:a2:
                    eb:f1:8c:2e:d4:88:dd:43:ba:4d:1c:a8:8a:01:57:
                    76:db:8e:24:46:c8:23:21:41:05:7a:6e:f1:e7:53:
                    63:9f:7e:ac:16:85:cd:18:68:9c:ab:f0:7b:ec:e5:
                    e0:97:4f:07:e4:23:18:3f:27:05:49:c9:a4:44:03:
                    0f:16:a6:fe:8f:53:35:60:25:89:b6:37:e2:67:cc:
                    3e:66:7b:81:1d:2a:b2:88:fc:97:3f:6f:3d:7b:11:
                    90:8a:dc:4b:72:ef:1e:cd:1b:04:85:fc:a1:e8:44:
                    20:a6:ef:2b:59:eb:50:46:f1:df:2c:cd:3b:37:d5:
                    49:e9:1f:e8:ba:1d:de:d4:8c:d0:19:58:21:a9:1b:
                    f2:ad:01:48:b2:6f:2f:5e:95:3b:e9:e1:58:24:d9:
                    ab:2b:0c:ff:a4:66:18:1a:12:4b:42:b2:b3:d4:1b:
                    9b:2c:cb:45:6f:33:e1:e4:3b:24:88:78:5b:1b:91:
                    72:3c:37:81:d4:ec:15:21:55:b6:c5:7e:e2:3f:a4:
                    86:e4:23:a4:b8:1b:42:b5:ef:6c:69:d8:59:a1:16:
                    63:ab:dd:89:1d:c0:4c:e8:ec:2f:2d:42:93:28:9f:
                    71:2c:6e:7c:82:05:28:1d:15:e2:43:84:dc:1d:3b:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A5:51:E9:87:CC:5F:08:4E:68:CB:22:2F:A1:D1:CC:84:99:BE:06
            X509v3 Authority Key Identifier:
                keyid:E2:28:18:D8:F4:2D:15:06:48:21:50:95:5F:A2:16:04:98:75:C2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/E22818D8F42D1506482150955FA216049875C2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E22818D8F42D1506482150955FA216049875C2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e33302e302f32342d3234203d3e20323638323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2b:da:b2:5d:c4:3d:41:cd:1b:2b:b3:87:38:13:1f:74:a3:
         a3:12:dc:91:02:6b:1b:39:41:a7:9f:a5:cc:97:8f:7a:36:26:
         d9:12:fb:20:5f:5a:7a:37:ee:52:39:1b:8a:35:e8:71:a9:97:
         05:b7:e0:54:34:93:95:21:d0:89:ac:16:0f:b9:4a:d2:34:a5:
         53:d2:82:d3:fb:b8:48:4b:b9:e8:87:97:30:86:70:ca:b9:99:
         75:a1:49:1d:bc:d9:d8:d2:b5:69:bc:29:62:9d:3f:a3:08:65:
         54:eb:73:af:1a:9d:66:ef:3e:96:68:e2:b6:a8:28:19:0f:ea:
         05:3a:32:9e:1a:a3:08:82:7c:3f:61:1d:79:47:52:1b:64:b6:
         6a:db:8e:b0:fb:b2:24:23:54:4c:30:b4:f5:44:cf:46:ac:5a:
         80:65:27:fe:93:11:1f:fb:84:81:13:88:71:bb:89:b2:30:fc:
         ff:a3:4c:9a:35:18:34:b6:97:0f:9b:b2:b3:f9:5f:a8:24:29:
         02:7b:3d:ea:07:1c:db:9c:71:20:3a:b0:11:66:c5:02:0d:bd:
         72:25:42:90:ca:0f:6a:8e:76:4a:a8:52:b3:3d:ac:c9:f4:9c:
         3a:4b:b9:7d:a7:5a:cb:0d:05:8b:09:4f:52:1a:b1:9f:56:67:
         d1:b8:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:40:18 2025 by rpki-client