Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          7zA/m2tLa/yJBz81vSQNcaWW5cVV0mTV8ssxbTOoWTs=
Subject key identifier:   31:8E:63:55:CD:E0:CC:C8:4D:61:47:FA:27:1C:51:10:E1:B7:E0:30
Certificate issuer:       /CN=303D3960E9C6FCF6DFD255601560BC60351F347F
Certificate serial:       2431E2BE2AD788395E9182B4576F34D08FB2814F
Authority key identifier: 30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa
Signing time:             Wed 11 Mar 2026 19:29:46 +0000
ROA not before:           Wed 11 Mar 2026 19:24:46 +0000
ROA not after:            Wed 10 Mar 2027 19:29:46 +0000
asID:                     268248
IP address blocks:        45.236.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:31:e2:be:2a:d7:88:39:5e:91:82:b4:57:6f:34:d0:8f:b2:81:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303D3960E9C6FCF6DFD255601560BC60351F347F
        Validity
            Not Before: Mar 11 19:24:46 2026 GMT
            Not After : Mar 10 19:29:46 2027 GMT
        Subject: CN=318E6355CDE0CCC84D6147FA271C5110E1B7E030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:89:62:7a:dd:be:8b:43:d6:13:5b:9b:69:
                    31:30:74:9e:25:36:f7:1b:ae:33:e6:ad:dd:67:24:
                    c9:a3:30:7f:34:85:8b:f4:d6:6a:96:d2:25:20:16:
                    a1:a2:ce:c1:95:24:2f:8b:48:6f:42:bd:6c:f9:fb:
                    af:f7:bd:b7:44:3f:03:07:64:d8:05:ef:55:7a:6c:
                    80:08:b4:45:f2:db:86:44:f8:cb:da:a0:7a:0f:88:
                    9c:da:7b:69:3e:74:64:9c:07:09:9d:f1:98:34:1d:
                    dc:a7:43:5e:04:54:af:b3:24:c5:c8:b0:bc:88:1b:
                    5a:4b:ff:75:42:c5:d1:26:f4:18:e6:64:26:16:fb:
                    98:dd:15:20:49:e3:bb:ad:af:21:f0:83:21:10:ff:
                    df:35:ce:43:1b:31:f9:93:7a:66:93:ed:b0:bf:a5:
                    6c:90:92:4b:99:f9:1a:48:d1:df:e1:60:1c:13:b4:
                    3e:56:b3:48:06:21:15:67:3d:85:56:91:62:14:2d:
                    a2:2f:d7:c4:51:33:0d:fd:fb:45:9a:27:43:16:b1:
                    24:ff:35:c4:d0:30:de:bf:1e:a8:b3:23:a7:7b:6c:
                    52:a2:21:b5:a0:88:a0:d5:c4:e8:6d:9f:88:82:8f:
                    4a:64:d8:5d:05:9e:2d:d8:b4:2b:c7:98:3c:96:51:
                    9b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8E:63:55:CD:E0:CC:C8:4D:61:47:FA:27:1C:51:10:E1:B7:E0:30
            X509v3 Authority Key Identifier:
                keyid:30:3D:39:60:E9:C6:FC:F6:DF:D2:55:60:15:60:BC:60:35:1F:34:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/303D3960E9C6FCF6DFD255601560BC60351F347F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/303D3960E9C6FCF6DFD255601560BC60351F347F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232332e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:dd:07:1c:6d:9c:6d:61:02:71:2a:b4:b6:02:a5:51:d0:2c:
         69:da:53:b5:84:1c:73:83:07:da:c6:1d:95:96:e9:7b:4a:02:
         51:3b:bb:41:f2:1c:93:9d:33:7a:76:72:40:8a:a2:c8:85:17:
         d6:4f:bf:81:f4:a3:ad:33:9c:fb:ca:f5:c8:b8:ef:2a:e4:d7:
         fd:ba:f4:3d:f6:e5:67:c7:58:83:94:86:3d:e9:00:af:73:72:
         52:22:ac:f8:df:ec:7c:fe:26:ea:6e:a6:fc:57:57:92:4d:65:
         41:16:c6:aa:9e:f9:cf:5c:b0:77:1d:31:f5:8c:11:1c:3d:20:
         e6:57:52:7a:8a:63:e2:55:14:d6:cb:84:24:c7:b6:88:e5:b6:
         03:4f:f8:80:85:cb:22:56:9c:be:9b:e7:e2:d8:65:26:cc:cd:
         08:ee:49:ec:1b:af:cd:ed:77:e8:29:a0:89:42:f7:a5:b7:98:
         00:5e:5c:3f:d5:6c:32:33:e2:76:a5:6b:68:b8:b2:ff:95:9d:
         ad:df:67:75:31:6e:5d:6c:32:64:ce:30:e0:01:3d:ae:10:95:
         a1:5e:aa:5a:71:5d:de:8b:26:75:ca:d7:e0:b2:d6:86:7b:63:
         0f:56:9d:49:b6:2f:54:16:a4:18:a6:1a:d5:50:cd:ae:41:4d:
         45:da:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:36:46 2026 by rpki-client