Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3232203d3e20323638303237.roa
File:                     34352e3136382e33362e302f32322d3232203d3e20323638303237.roa (raw, json)
Hash identifier:          r+eVhk+VBajVjP6UabUtLh9Hyn1zXA1ok3VRL0Jy2ME=
Subject key identifier:   25:14:BD:94:99:37:C2:AE:29:5E:CD:8C:97:32:E5:7C:B1:DA:05:24
Certificate issuer:       /CN=CC78BDF85E39DECFD60C09178EE311CCEBFE77C7
Certificate serial:       31B0E105F7A40EE2FC6BA9A75732F60843771085
Authority key identifier: CC:78:BD:F8:5E:39:DE:CF:D6:0C:09:17:8E:E3:11:CC:EB:FE:77:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3232203d3e20323638303237.roa
Signing time:             Mon 14 Nov 2022 20:33:43 +0000
ROA not before:           Mon 14 Nov 2022 20:28:43 +0000
ROA not after:            Mon 13 Nov 2023 20:33:43 +0000
asID:                     268027
IP address blocks:        45.168.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b0:e1:05:f7:a4:0e:e2:fc:6b:a9:a7:57:32:f6:08:43:77:10:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC78BDF85E39DECFD60C09178EE311CCEBFE77C7
        Validity
            Not Before: Nov 14 20:28:43 2022 GMT
            Not After : Nov 13 20:33:43 2023 GMT
        Subject: CN=2514BD949937C2AE295ECD8C9732E57CB1DA0524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:cd:82:a5:28:a5:5e:cd:25:ca:5e:89:65:
                    5a:6e:75:8f:c3:b0:22:65:80:57:1e:40:ad:91:1e:
                    43:1d:75:cf:af:05:61:54:77:8e:ae:f3:13:e8:81:
                    d6:32:c6:54:10:00:8d:8a:93:b9:1d:ee:a9:87:ab:
                    60:41:ca:b5:27:08:a4:cb:cc:4d:ee:88:f0:a6:19:
                    0c:2c:ed:ec:1c:e5:30:54:14:05:6f:0c:24:5b:ed:
                    dc:f2:07:ff:ff:94:b0:18:dd:42:46:49:7d:f0:00:
                    7e:b2:f7:a0:b7:9a:19:73:79:7b:fe:02:db:26:1f:
                    9e:f6:0d:42:e8:e0:39:9f:4c:d4:cf:70:07:88:bb:
                    2a:d2:4c:4e:04:82:cd:76:17:a9:1b:ba:52:e9:34:
                    ea:22:13:26:c4:ed:78:73:ab:7c:b2:de:df:5c:38:
                    b6:bb:e4:0d:57:a9:68:05:36:d9:64:c9:41:b6:c8:
                    9b:60:03:0b:cf:5d:04:89:f8:de:14:a1:1a:26:04:
                    cd:e8:5e:cb:fd:a9:a6:7f:b8:ba:95:4d:0e:b2:74:
                    aa:3a:0e:f4:d7:5f:b3:3a:f2:a0:4e:10:30:0b:d3:
                    c1:cc:2e:c5:c4:aa:be:25:e0:74:28:d2:69:f8:aa:
                    b6:a5:2b:33:e6:fd:18:11:bf:77:f5:81:39:a1:91:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:14:BD:94:99:37:C2:AE:29:5E:CD:8C:97:32:E5:7C:B1:DA:05:24
            X509v3 Authority Key Identifier:
                keyid:CC:78:BD:F8:5E:39:DE:CF:D6:0C:09:17:8E:E3:11:CC:EB:FE:77:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3232203d3e20323638303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:59:3f:07:5e:41:af:41:65:68:d3:4e:48:f2:5f:34:94:6e:
         35:1e:10:44:43:a1:d1:9d:98:1f:c4:35:43:d6:80:4d:90:8e:
         1c:6b:0c:4b:d5:34:e7:41:b6:1c:52:a8:e6:7b:fa:64:99:13:
         26:4d:31:eb:07:52:98:c1:2a:28:bf:70:04:44:34:61:57:3f:
         64:0a:97:3b:42:b4:32:5f:1a:35:8c:f6:17:f1:a7:42:3a:ab:
         8e:1c:99:00:d4:f3:39:d9:9f:6f:c3:d1:df:79:11:25:23:d3:
         51:51:e6:92:05:20:72:13:53:a7:c1:8c:98:2c:d7:83:42:87:
         6a:59:bd:27:21:bb:e9:2c:b6:30:d6:ce:40:25:42:41:2c:24:
         ae:cf:4d:87:e3:0d:5e:48:08:6b:3b:de:91:6c:55:13:dd:28:
         79:eb:f4:1d:67:a5:41:e5:aa:63:54:53:fc:8c:48:23:51:a5:
         04:3e:98:6c:e5:de:22:7c:b6:c9:e3:d7:9f:f9:79:6f:56:6b:
         66:4d:b2:b7:d7:82:67:72:92:0a:e8:27:d5:18:2b:be:d1:ef:
         4b:9c:1c:e5:2c:05:93:c3:65:29:c7:3c:20:7a:f2:2b:c3:21:
         42:84:75:d9:d8:78:f6:dd:ff:8f:c7:ab:d9:74:30:c6:03:2f:
         4c:be:a8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:31:12 2025 by rpki-client