Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/34352e3138332e39362e302f32342d3234203d3e20323639323739.roa
File:                     34352e3138332e39362e302f32342d3234203d3e20323639323739.roa (raw, json)
Hash identifier:          KiLGfQue9J/seVaPOtqNB7VwTQkY3bHEI3DETYic5Qw=
Subject key identifier:   58:82:18:15:67:9A:EC:03:70:0D:A9:8B:35:D9:98:3D:21:2C:7A:23
Certificate issuer:       /CN=B8BF467E2A3B24283A1C2269E70AECA54DFA205B
Certificate serial:       5F45B26EAE7AACEFB89FFE818720E6B6EA6B1B
Authority key identifier: B8:BF:46:7E:2A:3B:24:28:3A:1C:22:69:E7:0A:EC:A5:4D:FA:20:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BF467E2A3B24283A1C2269E70AECA54DFA205B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/34352e3138332e39362e302f32342d3234203d3e20323639323739.roa
Signing time:             Fri 22 Sep 2023 19:37:04 +0000
ROA not before:           Fri 22 Sep 2023 19:32:04 +0000
ROA not after:            Fri 20 Sep 2024 19:37:04 +0000
asID:                     269279
IP address blocks:        45.183.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:45:b2:6e:ae:7a:ac:ef:b8:9f:fe:81:87:20:e6:b6:ea:6b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF467E2A3B24283A1C2269E70AECA54DFA205B
        Validity
            Not Before: Sep 22 19:32:04 2023 GMT
            Not After : Sep 20 19:37:04 2024 GMT
        Subject: CN=58821815679AEC03700DA98B35D9983D212C7A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ac:90:79:2d:31:ad:07:6c:a1:dc:ec:04:21:
                    7d:12:6e:93:13:c3:4a:ab:51:12:b6:39:07:0a:68:
                    6f:be:a8:f0:f2:4d:de:5e:db:9f:71:c5:eb:ff:a4:
                    6e:2d:ed:f5:11:ed:2e:9a:07:74:ff:24:e0:ce:ce:
                    45:2c:d1:ff:88:71:07:70:03:aa:f9:11:0d:08:21:
                    95:de:74:3f:3f:d5:6b:f5:20:5e:d4:9a:58:27:21:
                    9c:28:a8:35:d0:de:ed:0f:42:08:12:5b:84:6b:b0:
                    e7:5d:66:16:46:a5:16:41:c9:96:a4:7d:d4:41:00:
                    34:83:bf:7b:0b:a1:0a:4d:08:b5:2e:8c:c9:4d:01:
                    5b:20:ff:8f:3c:61:ba:d7:d5:89:9f:cd:db:f4:06:
                    34:fe:0a:a4:0e:a1:be:da:14:4d:ad:81:ee:94:69:
                    83:5f:c3:ef:db:d9:09:41:42:0b:fc:00:69:cf:99:
                    b9:f7:d8:1d:56:ad:88:c5:b2:72:1b:a5:e6:bb:e4:
                    de:7b:a1:b4:6b:05:35:66:ad:e7:c4:2c:41:90:b2:
                    d5:71:4c:5c:cb:76:30:de:c2:04:ea:dc:fb:86:9f:
                    9e:6b:b9:f1:e7:99:50:48:d5:86:d3:77:85:74:6a:
                    15:f2:0f:3d:6f:c8:f8:e0:58:7b:d0:ab:e5:a9:70:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:82:18:15:67:9A:EC:03:70:0D:A9:8B:35:D9:98:3D:21:2C:7A:23
            X509v3 Authority Key Identifier:
                keyid:B8:BF:46:7E:2A:3B:24:28:3A:1C:22:69:E7:0A:EC:A5:4D:FA:20:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/B8BF467E2A3B24283A1C2269E70AECA54DFA205B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BF467E2A3B24283A1C2269E70AECA54DFA205B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/34352e3138332e39362e302f32342d3234203d3e20323639323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:bc:16:18:e9:1e:1d:03:6b:4d:4f:5f:21:5f:0b:3f:11:c2:
         29:87:f0:21:55:85:47:23:f1:1f:72:91:7f:c4:2e:ab:a2:f2:
         0e:68:6d:1e:c9:c8:6e:f1:42:4a:3f:14:a4:08:c3:6d:d8:40:
         94:aa:b7:75:db:2a:e8:23:65:66:2a:d3:c2:30:73:8e:4e:8d:
         85:c5:dc:08:e9:01:6a:57:36:f7:a3:33:63:fc:08:65:27:06:
         6b:6f:e7:c4:c7:d7:9e:23:db:63:81:28:56:18:ab:4d:06:f4:
         84:64:69:88:ea:b8:2a:71:6a:d6:c8:86:f3:98:eb:90:c3:95:
         ce:0b:89:19:7a:e6:ef:3e:fd:d8:50:d6:86:19:ee:06:ae:2e:
         be:9d:d3:c9:c2:69:fb:ac:4e:8f:71:48:70:44:30:8d:72:8f:
         9f:9f:55:fb:54:86:b6:5a:39:45:36:8c:4d:fe:75:5b:d3:2d:
         6f:1e:95:7c:c9:f0:f7:3b:fb:70:b1:5e:8d:c4:83:a7:75:0b:
         1b:a1:2d:f3:42:b6:e3:13:09:5d:6a:7b:f8:05:07:28:45:5c:
         ae:1d:39:22:bf:44:ff:ec:d2:88:0e:2e:42:2b:1e:d0:87:0a:
         65:ae:a6:95:50:b7:97:e0:d6:11:5c:67:5c:0e:94:89:3a:19:
         b1:d7:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:24:46 2025 by rpki-client