Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32332d3233203d3e20323636353434.roa
File:                     34352e36352e3230342e302f32332d3233203d3e20323636353434.roa (raw, json)
Hash identifier:          cge5n88S1kB36e2BImIVf6W2z2D+z2f7AwDIcnFArck=
Subject key identifier:   E9:6A:94:25:E1:85:E9:C4:9A:92:F4:F3:CD:A5:21:DE:47:BF:61:25
Certificate issuer:       /CN=5B576F953ECC3D33A93B2E18D6DB2673DA95B987
Certificate serial:       16A6D923AC73A9D7E47E7D70FDD077093CE85B3F
Authority key identifier: 5B:57:6F:95:3E:CC:3D:33:A9:3B:2E:18:D6:DB:26:73:DA:95:B9:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32332d3233203d3e20323636353434.roa
Signing time:             Tue 17 Dec 2024 17:57:35 +0000
ROA not before:           Tue 17 Dec 2024 17:52:35 +0000
ROA not after:            Tue 16 Dec 2025 17:57:35 +0000
asID:                     266544
IP address blocks:        45.65.204.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a6:d9:23:ac:73:a9:d7:e4:7e:7d:70:fd:d0:77:09:3c:e8:5b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B576F953ECC3D33A93B2E18D6DB2673DA95B987
        Validity
            Not Before: Dec 17 17:52:35 2024 GMT
            Not After : Dec 16 17:57:35 2025 GMT
        Subject: CN=E96A9425E185E9C49A92F4F3CDA521DE47BF6125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f6:b0:1c:df:64:62:ed:6a:b0:ac:51:84:ee:
                    72:17:04:3b:e3:9f:b3:2a:88:94:b1:7c:07:3a:cd:
                    c0:e3:6f:6f:55:ee:99:f2:81:c8:93:6c:55:6b:12:
                    26:3b:8c:a0:03:36:12:d2:4d:2d:76:74:98:08:24:
                    0d:56:1e:2a:a3:e3:bc:0e:31:ca:de:1e:1c:81:f4:
                    1c:91:db:df:77:74:10:1c:d2:b0:c0:74:a8:b8:be:
                    5b:98:1c:26:dd:ab:91:99:d7:59:c2:59:da:a6:e8:
                    27:93:ff:4c:9a:c4:5a:ea:2a:92:49:56:ce:a9:f6:
                    7e:48:43:95:13:50:c6:dd:15:ff:bf:6e:ed:20:2e:
                    9c:d6:96:65:e9:8e:85:ca:b7:05:38:bc:bb:c8:b8:
                    ff:99:33:e0:57:0c:43:8e:5d:9c:e9:4f:ce:9d:ec:
                    aa:12:b9:30:d6:cd:14:f3:6b:74:25:b5:d2:2a:96:
                    f2:c4:44:f9:b5:73:ac:26:04:15:e1:c2:fc:5f:1b:
                    c9:7f:d4:79:71:4d:4c:ce:06:b9:fb:b1:9c:29:99:
                    e4:a2:39:e5:95:a8:4b:f1:b2:ff:22:d9:7b:77:89:
                    c0:78:8b:d4:d3:c6:ff:35:37:3b:36:1b:d3:37:9b:
                    fa:27:29:9f:b8:4d:56:5e:72:bc:c2:cf:57:9f:98:
                    67:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6A:94:25:E1:85:E9:C4:9A:92:F4:F3:CD:A5:21:DE:47:BF:61:25
            X509v3 Authority Key Identifier:
                keyid:5B:57:6F:95:3E:CC:3D:33:A9:3B:2E:18:D6:DB:26:73:DA:95:B9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230342e302f32332d3233203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:f9:2d:2e:82:bd:22:6e:74:9c:54:0a:89:a0:26:aa:12:67:
         c6:a4:69:c1:3e:90:01:61:8d:38:a8:10:eb:0f:82:7e:84:2a:
         98:02:06:e4:4c:c8:13:29:48:b6:8f:b7:2f:8a:61:0b:72:2a:
         38:1a:e0:f6:aa:03:25:46:1c:08:07:72:f2:2f:f6:18:b6:b9:
         91:77:fe:b0:3f:fd:72:a8:e2:75:32:32:8a:91:cc:d2:8a:7e:
         d4:e2:31:92:c2:f9:08:e1:58:60:36:d1:9c:4a:68:c1:9a:3c:
         a8:c0:27:6f:1c:1b:2d:87:94:4d:71:ef:d1:ad:e3:41:ae:84:
         0a:70:bc:ea:b1:37:cc:15:08:2a:34:4a:6b:1d:8a:7c:53:4a:
         81:23:91:d1:24:9b:d1:76:87:12:72:6d:f1:f8:18:e3:f2:b2:
         a7:b8:20:7b:b7:bb:03:11:dd:34:2a:90:3a:a0:56:a5:50:10:
         e8:de:d1:65:7a:34:ac:e7:e3:4a:19:21:56:af:87:3b:1c:39:
         78:c4:6c:22:8b:7f:d4:92:7e:9a:ab:45:6a:77:da:03:cf:f7:
         28:d9:c6:9c:c3:ba:7d:46:ec:b9:ee:49:8c:c4:f3:38:8a:75:
         a3:ed:18:04:5a:21:1b:85:6e:5c:bb:cf:21:ee:81:60:57:03:
         db:da:16:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:49:25 2025 by rpki-client