Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232322e302f32332d3233203d3e20323638323438.roa
File:                     34352e3233362e3232322e302f32332d3233203d3e20323638323438.roa (raw, json)
Hash identifier:          un3cXxcOcn8Y28Ns4BBEn/L41HUesW0JYTaC3/JAfsw=
Subject key identifier:   0D:E6:04:0D:D0:DE:42:70:78:35:24:32:B6:B1:DF:E8:60:53:81:1B
Certificate issuer:       /CN=303D3960E9C6FCF6DFD255601560BC60351F347F
Certificate serial:       249DA92AF87B914A1F8DF47BC45BAA2D9F6B8EFF
Authority key identifier: 30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232322e302f32332d3233203d3e20323638323438.roa
Signing time:             Wed 11 Mar 2026 19:29:41 +0000
ROA not before:           Wed 11 Mar 2026 19:24:41 +0000
ROA not after:            Wed 10 Mar 2027 19:29:41 +0000
asID:                     268248
IP address blocks:        45.236.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9d:a9:2a:f8:7b:91:4a:1f:8d:f4:7b:c4:5b:aa:2d:9f:6b:8e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303D3960E9C6FCF6DFD255601560BC60351F347F
        Validity
            Not Before: Mar 11 19:24:41 2026 GMT
            Not After : Mar 10 19:29:41 2027 GMT
        Subject: CN=0DE6040DD0DE427078352432B6B1DFE86053811B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:f8:ae:90:b5:b8:a9:cc:84:90:53:38:90:
                    5b:b0:80:c0:b3:c6:5c:82:9e:1f:e1:f0:88:5b:12:
                    ea:6a:5a:36:f5:3c:20:d2:8c:58:dd:8c:e0:9d:98:
                    e0:68:5b:eb:7d:5b:16:c1:78:2e:9f:bf:d8:2b:69:
                    85:5d:ab:54:0a:95:bc:0c:b7:48:6c:c2:64:51:f2:
                    f2:36:2a:1d:93:b8:2d:dd:dc:70:02:5f:e2:ae:b3:
                    ec:cd:d7:23:51:16:a7:aa:a5:d7:86:f4:81:55:aa:
                    44:5d:7e:9b:ee:82:3a:db:1a:f7:4e:c1:33:ef:02:
                    72:2c:73:44:34:51:b6:a3:14:2b:ba:ae:e6:e5:65:
                    80:6b:9e:11:31:3e:75:0a:15:d3:57:35:4c:44:66:
                    27:56:36:c7:62:1f:86:8d:43:9a:24:fc:1a:09:75:
                    31:0d:93:80:56:89:a6:0f:5f:5a:a9:33:0c:f9:77:
                    4c:44:d2:19:3e:25:4e:4d:7f:e3:42:d0:d7:31:c7:
                    ec:2d:24:7c:dc:4d:25:20:ca:56:dc:80:47:f1:4e:
                    91:cb:0a:6d:1b:4b:de:23:54:35:89:83:98:e8:cd:
                    65:bd:7f:fe:0b:07:5a:1b:0a:57:dd:6a:05:fe:65:
                    61:fa:25:6d:0b:09:7b:a3:20:7e:57:0e:11:55:db:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E6:04:0D:D0:DE:42:70:78:35:24:32:B6:B1:DF:E8:60:53:81:1B
            X509v3 Authority Key Identifier:
                keyid:30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/303D3960E9C6FCF6DFD255601560BC60351F347F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232322e302f32332d3233203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:ed:fe:d1:11:e2:de:34:3f:59:ab:32:73:bc:79:7c:f2:1e:
         98:17:3d:df:b4:31:78:4d:62:82:e4:4f:ad:ed:7a:a5:a1:ba:
         7d:4a:5a:e0:3b:08:f2:a7:d6:d2:cf:d9:17:88:d2:b2:8f:d3:
         8f:06:8e:ae:cc:41:62:b2:ea:9b:ba:8b:0a:39:fb:fd:90:eb:
         0d:ee:f3:eb:f0:f9:b1:fd:c4:01:7b:06:f7:3c:ff:89:70:6b:
         6c:11:7d:8e:41:09:c9:76:25:96:49:fb:0d:f1:9c:7c:57:92:
         f1:1f:23:b2:5e:a9:5a:80:a9:b1:3f:4e:a1:5e:32:82:8a:33:
         da:a1:8d:6d:21:01:c7:e1:0e:d8:46:05:86:ca:35:19:e6:38:
         2d:af:bd:6f:37:66:c8:04:0f:99:9d:1a:f7:6e:b2:aa:9d:92:
         26:c2:2f:64:d0:9a:7e:0e:7c:81:06:5c:22:b7:b1:a5:5d:fa:
         97:d1:52:74:a9:e0:10:64:a7:bd:a8:e5:fc:62:5a:4c:06:9a:
         c4:0c:87:ea:73:31:c4:21:3a:00:e8:06:c2:c0:e6:5e:3f:4d:
         82:59:c0:a7:ea:62:8b:0d:9c:0c:9b:d7:a5:ec:0e:84:96:6e:
         b5:2d:9d:ca:fe:ff:4f:c3:31:39:70:96:4d:51:b0:45:54:98:
         53:ee:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:02:57 2026 by rpki-client