Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32332d3233203d3e20323636353434.roa
File:                     34352e36352e3230362e302f32332d3233203d3e20323636353434.roa (raw, json)
Hash identifier:          NNM8U2X5GY6E0xD6GdlGgOcAAftNcA7nmVLyiDCjCYc=
Subject key identifier:   90:14:63:42:62:6A:81:F4:BB:0A:A0:B2:41:5C:E4:AE:DC:2D:DE:B1
Certificate issuer:       /CN=5B576F953ECC3D33A93B2E18D6DB2673DA95B987
Certificate serial:       7CE44146F121407AC0BBC2C16FFED5AD121B6FAC
Authority key identifier: 5B:57:6F:95:3E:CC:3D:33:A9:3B:2E:18:D6:DB:26:73:DA:95:B9:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32332d3233203d3e20323636353434.roa
Signing time:             Tue 17 Dec 2024 17:55:23 +0000
ROA not before:           Tue 17 Dec 2024 17:50:23 +0000
ROA not after:            Tue 16 Dec 2025 17:55:23 +0000
asID:                     266544
IP address blocks:        45.65.206.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e4:41:46:f1:21:40:7a:c0:bb:c2:c1:6f:fe:d5:ad:12:1b:6f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B576F953ECC3D33A93B2E18D6DB2673DA95B987
        Validity
            Not Before: Dec 17 17:50:23 2024 GMT
            Not After : Dec 16 17:55:23 2025 GMT
        Subject: CN=90146342626A81F4BB0AA0B2415CE4AEDC2DDEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:a5:4c:cc:eb:0c:17:46:97:2a:c8:2e:09:
                    48:e2:7e:98:8b:f6:f7:ad:81:53:5a:5e:db:b0:09:
                    8d:1d:29:02:50:67:a4:b8:8e:dd:ab:19:2e:86:4c:
                    cd:8e:e6:6d:46:d2:c4:c8:c3:15:e2:f8:90:94:30:
                    89:3c:e3:be:8f:7d:2f:fe:41:c5:5f:2d:92:55:31:
                    c3:37:de:bb:7a:d9:c6:05:5c:3d:66:79:c5:26:6c:
                    95:d6:4b:d9:b4:4a:96:e7:13:cc:07:6c:ae:b8:dc:
                    5f:02:52:dc:a8:70:b7:bf:36:2e:a8:ad:86:bc:df:
                    c5:76:b5:bd:f1:ac:ed:a8:b0:88:80:58:22:e2:12:
                    16:d8:0c:42:f5:29:90:0a:50:d5:e0:66:72:b5:f2:
                    fd:f1:bb:65:1b:02:38:3c:cd:0c:7b:9f:b8:32:39:
                    63:a3:e5:8b:d4:38:85:d9:12:28:68:22:80:66:71:
                    b3:57:76:f0:10:91:7a:84:54:f4:dd:07:6f:4b:c9:
                    ea:61:fd:80:a8:9c:89:58:6f:a7:b0:e7:0e:e3:5e:
                    44:9f:c1:47:77:1b:15:24:f3:49:5a:34:92:e1:c5:
                    63:b8:d9:16:0d:8e:fd:22:66:bb:db:f5:3a:5d:6f:
                    c9:3a:a6:11:2a:76:4a:78:b3:94:1a:db:89:35:b4:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:14:63:42:62:6A:81:F4:BB:0A:A0:B2:41:5C:E4:AE:DC:2D:DE:B1
            X509v3 Authority Key Identifier:
                keyid:5B:57:6F:95:3E:CC:3D:33:A9:3B:2E:18:D6:DB:26:73:DA:95:B9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230362e302f32332d3233203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         db:95:a8:b2:21:34:3c:fb:14:2e:c0:40:1d:a8:49:91:9d:cd:
         77:35:b6:cb:0a:99:dd:46:d5:bc:7b:d6:46:ef:a2:d7:78:c4:
         00:93:9a:c5:57:e3:64:48:b5:96:ff:6b:68:6f:36:5e:06:06:
         81:fe:38:b6:75:21:9b:2e:47:0b:ab:1b:94:e2:0f:bc:86:08:
         60:8d:fc:8c:6f:cb:a4:c2:e9:2d:fa:3e:14:08:8e:c9:4b:b7:
         4e:76:43:6e:8a:99:ad:d1:cb:db:12:f4:45:32:19:5c:f5:61:
         ed:63:07:5d:92:a7:07:cc:6f:7d:e5:85:24:ca:b7:9b:a6:5a:
         7b:89:3e:e4:0a:8f:07:4d:ce:84:11:02:2f:ed:1b:85:c3:c0:
         17:21:dc:47:6d:ed:84:51:db:c1:97:cf:43:21:8d:2f:d4:46:
         e5:df:49:e7:91:78:72:e3:94:61:cc:42:bd:bc:c5:1e:03:9a:
         60:5d:68:8d:96:b3:3a:82:38:d7:b4:2d:37:ef:78:a3:5b:db:
         90:bc:34:d2:02:ed:d3:34:ef:fb:86:c5:50:b0:9d:e1:e5:d7:
         72:bb:27:7d:42:2d:db:ad:5b:17:11:58:be:7b:84:cd:90:7f:
         d8:70:c1:33:ea:c1:d6:56:32:e9:69:74:42:10:0e:5c:bf:5e:
         94:64:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:51 2025 by rpki-client