Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/34352e3136382e342e302f32332d3332203d3e20323638303437.roa
File:                     34352e3136382e342e302f32332d3332203d3e20323638303437.roa (raw, json)
Hash identifier:          aCM3EjaRGyxI8LXhUuq1bSMPSPaaUzqcxg0JQDL2zzU=
Subject key identifier:   99:91:3B:AA:C6:94:44:4B:AA:06:9F:93:7A:AB:F4:3F:DB:23:FB:85
Certificate issuer:       /CN=F823386AC48637BE842A386FA21174E8A1497D56
Certificate serial:       6B6ABDAF18B367B847CCA74A0F9C4ED73905F49E
Authority key identifier: F8:23:38:6A:C4:86:37:BE:84:2A:38:6F:A2:11:74:E8:A1:49:7D:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F823386AC48637BE842A386FA21174E8A1497D56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/34352e3136382e342e302f32332d3332203d3e20323638303437.roa
Signing time:             Mon 13 Nov 2023 20:43:19 +0000
ROA not before:           Mon 13 Nov 2023 20:38:19 +0000
ROA not after:            Mon 11 Nov 2024 20:43:19 +0000
asID:                     268047
IP address blocks:        45.168.4.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6a:bd:af:18:b3:67:b8:47:cc:a7:4a:0f:9c:4e:d7:39:05:f4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F823386AC48637BE842A386FA21174E8A1497D56
        Validity
            Not Before: Nov 13 20:38:19 2023 GMT
            Not After : Nov 11 20:43:19 2024 GMT
        Subject: CN=99913BAAC694444BAA069F937AABF43FDB23FB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:37:f6:dd:9b:3f:2e:eb:06:f6:f7:e7:29:60:
                    5a:35:7a:9b:ab:16:80:16:a7:1c:d6:f7:86:f9:01:
                    19:32:7c:b5:42:85:ee:ba:e3:f5:75:52:a1:f3:ac:
                    a4:b8:56:33:0a:9f:86:46:5b:a9:88:c5:d6:93:e7:
                    6b:69:53:fe:ee:63:44:83:9c:f0:69:de:73:b9:5b:
                    5e:bc:3b:43:e6:37:c8:8c:0c:b4:a3:ec:81:81:bb:
                    c8:d6:f6:16:ec:59:2e:79:67:9f:9a:0e:3a:8e:22:
                    ed:7f:28:88:8c:e8:d7:1b:13:76:d1:39:c9:91:55:
                    5a:aa:81:35:7c:15:f4:de:e6:c7:a2:04:0a:d8:a1:
                    77:d3:99:af:88:50:54:ed:84:6f:cc:7a:4d:ee:e4:
                    91:6d:8d:d4:9c:77:aa:79:fd:22:7b:3c:72:89:ab:
                    51:87:2c:09:e2:83:46:65:74:6b:57:58:1f:16:f2:
                    98:fe:fe:ea:db:26:5d:17:0c:1d:5b:6d:27:48:c1:
                    e5:61:61:7e:3d:5b:c6:27:34:6b:8b:7a:75:32:0a:
                    65:81:67:52:f5:94:31:d1:bd:7a:ba:93:f8:a3:8f:
                    77:1a:b7:2e:83:fd:d1:fa:ba:c2:c3:39:ae:c8:7a:
                    28:2d:1f:91:6b:40:d0:29:7a:d6:b8:ba:7c:0a:82:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:91:3B:AA:C6:94:44:4B:AA:06:9F:93:7A:AB:F4:3F:DB:23:FB:85
            X509v3 Authority Key Identifier:
                keyid:F8:23:38:6A:C4:86:37:BE:84:2A:38:6F:A2:11:74:E8:A1:49:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/F823386AC48637BE842A386FA21174E8A1497D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F823386AC48637BE842A386FA21174E8A1497D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/34352e3136382e342e302f32332d3332203d3e20323638303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:5d:ba:55:fb:4a:8c:0a:17:66:36:09:ff:80:a2:e6:0c:f1:
         ae:67:f3:fc:cf:dc:8b:73:8b:f6:93:89:51:d2:47:30:b5:01:
         2b:2e:ce:4f:d5:f6:0c:9a:4d:76:e5:51:27:1f:8e:5b:fc:61:
         2b:91:ec:98:4d:f5:41:8d:c9:dd:41:b2:7f:07:0c:08:59:bf:
         7e:1e:19:f6:98:c7:61:4a:e3:70:a2:93:d5:23:4c:60:73:8a:
         93:bd:e0:d6:06:d0:9d:3d:0b:61:aa:9d:8e:ae:82:25:13:75:
         0d:a0:fd:ab:ed:b4:d7:5b:c6:cc:4d:f9:fe:a5:f9:1c:ac:76:
         64:46:3a:25:9d:80:48:96:96:1b:52:27:8b:4c:b9:79:69:97:
         2f:6c:39:7f:a3:22:f8:25:14:99:f6:55:2b:c7:26:26:6e:58:
         d3:94:b2:1f:ec:de:a6:4a:8b:76:ca:7e:0c:b8:5d:0a:6e:d5:
         a7:aa:df:82:e2:2f:b0:07:0c:a2:22:88:34:47:1d:ac:9d:bc:
         f3:89:53:c5:95:b0:b6:99:d3:40:93:58:f0:b6:d8:67:06:d9:
         4b:7d:ce:2d:71:d2:99:0a:2f:19:03:bf:df:1f:48:79:88:5f:
         68:71:12:26:12:63:ea:4a:57:fc:71:d5:ad:d2:7d:35:95:08:
         00:22:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:46:37 2025 by rpki-client