Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230372e302f32342d3234203d3e20323636353434.roa
File:                     34352e36352e3230372e302f32342d3234203d3e20323636353434.roa (raw, json)
Hash identifier:          ajeiGB29EY1icULYrTwiBeFtmfQcgFJO/qpDsEf+TI0=
Subject key identifier:   1E:D4:A1:2B:28:B1:B9:51:21:02:8B:28:8F:24:2A:0F:32:F0:5C:BF
Certificate issuer:       /CN=5B576F953ECC3D33A93B2E18D6DB2673DA95B987
Certificate serial:       423BB79B6EDA679EE7796D988FEC72EB96644F00
Authority key identifier: 5B:57:6F:95:3E:CC:3D:33:A9:3B:2E:18:D6:DB:26:73:DA:95:B9:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230372e302f32342d3234203d3e20323636353434.roa
Signing time:             Tue 17 Dec 2024 17:55:23 +0000
ROA not before:           Tue 17 Dec 2024 17:50:23 +0000
ROA not after:            Tue 16 Dec 2025 17:55:23 +0000
asID:                     266544
IP address blocks:        45.65.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3b:b7:9b:6e:da:67:9e:e7:79:6d:98:8f:ec:72:eb:96:64:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B576F953ECC3D33A93B2E18D6DB2673DA95B987
        Validity
            Not Before: Dec 17 17:50:23 2024 GMT
            Not After : Dec 16 17:55:23 2025 GMT
        Subject: CN=1ED4A12B28B1B95121028B288F242A0F32F05CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:55:25:73:95:d5:dc:ab:18:a9:6f:09:13:
                    79:77:ce:11:a2:92:39:95:94:0c:59:6c:98:33:1a:
                    1f:6f:d1:cc:8b:16:e7:13:d7:56:7d:32:4a:f9:f0:
                    b9:6b:48:f8:f8:28:0a:70:c7:06:34:17:2c:42:b6:
                    60:97:0f:45:a4:0d:bd:92:b6:47:25:be:9d:9f:12:
                    b9:cb:8e:fb:f6:07:e7:d0:6f:a0:4b:0f:4b:d6:8c:
                    90:e3:5d:55:27:cf:c8:f3:1c:8c:3e:58:cd:4a:f2:
                    ea:5d:71:ec:f8:b3:44:02:ae:f7:80:75:39:d3:70:
                    f6:84:e2:c2:45:78:ca:1d:1c:8a:ea:64:61:eb:79:
                    6f:e8:64:fd:7f:56:4c:73:b0:4f:1f:a8:0a:c5:b0:
                    fb:68:a8:60:d1:78:66:e2:6e:89:c3:dc:aa:4d:3a:
                    62:cc:66:d0:b5:e4:41:fa:b3:63:14:70:97:47:e9:
                    a0:30:5a:d7:25:75:84:4d:37:22:4e:71:45:ae:64:
                    db:08:7f:b5:da:8b:f4:b4:39:17:fd:f3:de:80:1e:
                    fa:be:eb:e2:67:f8:68:26:a6:ba:ef:cc:2e:f7:86:
                    5e:3b:1e:bb:96:58:67:03:e8:e0:b1:e2:41:45:2a:
                    dd:4d:fb:b6:31:40:55:48:87:56:d7:22:67:7c:0c:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D4:A1:2B:28:B1:B9:51:21:02:8B:28:8F:24:2A:0F:32:F0:5C:BF
            X509v3 Authority Key Identifier:
                keyid:5B:57:6F:95:3E:CC:3D:33:A9:3B:2E:18:D6:DB:26:73:DA:95:B9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B576F953ECC3D33A93B2E18D6DB2673DA95B987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/34352e36352e3230372e302f32342d3234203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:7b:79:c1:1f:83:82:7e:e1:21:f3:4c:35:3d:98:ce:c6:b0:
         22:2f:1f:72:45:82:dc:e7:1b:5c:4d:4d:4c:05:19:f9:65:8d:
         8d:66:85:44:40:92:ca:75:a2:dc:9c:91:94:dd:d1:6f:bf:f0:
         99:f8:52:78:6c:7e:2a:de:08:40:28:1f:7d:25:8c:5e:50:87:
         7c:21:92:df:c5:0f:06:7e:34:db:b4:f7:79:ad:b3:a6:aa:84:
         0a:a4:e5:7d:d3:d3:a0:1b:bb:b8:d9:7b:d6:80:43:a5:ec:9f:
         0b:60:f4:25:a3:de:8b:2d:dd:d5:5a:1c:8c:37:8a:8f:cc:26:
         08:a1:43:51:fc:f1:98:74:64:74:1d:a0:04:cc:75:18:dc:bf:
         c9:d5:77:44:81:59:90:f5:de:9d:df:16:8e:31:87:b7:72:e0:
         a1:f7:52:58:99:b6:87:93:78:44:00:cb:aa:e1:83:35:89:89:
         eb:db:6c:e6:11:09:21:99:64:03:13:1f:f5:a1:82:7b:b4:67:
         76:e6:0d:2e:7a:5b:bc:46:b2:89:e4:fb:bb:45:b1:65:9a:df:
         59:60:c5:3a:58:8c:a1:30:cf:aa:80:fc:1e:8c:fd:b8:74:77:
         d7:5c:12:a9:57:c3:74:92:57:43:57:1c:4c:b1:05:b5:2c:6b:
         87:25:be:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:15 2025 by rpki-client