Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131342e302f32342d3234203d3e20323638323334.roa
File:                     34352e3233362e3131342e302f32342d3234203d3e20323638323334.roa (raw, json)
Hash identifier:          KVdc5QAdmww8nAqNuqMzAtAWwnucrMIrNNxajnO50Vc=
Subject key identifier:   D9:86:86:95:41:6C:A1:BA:BA:D6:B1:30:63:D9:20:30:86:28:C1:66
Certificate issuer:       /CN=8E2C587E03D77A09E0236848BE4C5CBC4D782D33
Certificate serial:       12789660D1B1A0548EADAB7CF98844DFCC19B296
Authority key identifier: 8E:2C:58:7E:03:D7:7A:09:E0:23:68:48:BE:4C:5C:BC:4D:78:2D:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131342e302f32342d3234203d3e20323638323334.roa
Signing time:             Wed 13 Jul 2022 01:52:56 +0000
ROA not before:           Wed 13 Jul 2022 01:47:56 +0000
ROA not after:            Wed 12 Jul 2023 01:52:56 +0000
asID:                     268234
IP address blocks:        45.236.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:78:96:60:d1:b1:a0:54:8e:ad:ab:7c:f9:88:44:df:cc:19:b2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E2C587E03D77A09E0236848BE4C5CBC4D782D33
        Validity
            Not Before: Jul 13 01:47:56 2022 GMT
            Not After : Jul 12 01:52:56 2023 GMT
        Subject: CN=D9868695416CA1BABAD6B13063D920308628C166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:78:27:40:45:e2:e2:f7:9b:90:de:a8:99:06:
                    f0:e4:82:ba:25:ca:0f:55:f4:aa:be:e2:c2:09:71:
                    e1:a1:92:47:9d:2f:76:00:ac:21:fd:e3:87:7f:51:
                    55:b9:f8:b8:09:90:d2:37:2f:8f:7c:90:26:c3:f8:
                    c9:dc:d1:35:37:ad:39:4c:99:4e:66:c3:91:f5:44:
                    3d:f2:23:3b:a2:23:21:49:75:13:50:80:d1:69:a0:
                    ef:0f:10:8c:2d:89:a1:73:6f:b6:ab:78:f8:d6:96:
                    bc:28:17:15:32:a5:ad:7a:a7:4e:6b:db:8e:aa:c7:
                    ff:c0:96:d7:9e:1a:7a:37:f1:7c:7e:4c:e5:41:eb:
                    64:a9:bc:9d:e2:93:d5:cd:fb:3a:61:9f:ed:7b:c0:
                    bf:b1:53:cc:21:45:81:99:c2:81:52:e4:de:ea:70:
                    4c:7e:da:87:00:de:19:f5:6d:d0:63:73:51:a7:56:
                    55:ed:4a:f3:c9:fd:5f:fa:2a:94:90:f6:26:9f:79:
                    2c:60:2d:cb:6e:d3:dd:64:27:7f:ca:e4:bf:1f:4c:
                    3c:f6:27:43:21:93:56:e8:ca:a6:11:01:89:57:f4:
                    23:9c:c2:0e:9e:ce:5f:b7:f9:b2:9b:51:e1:16:1f:
                    fb:3f:d0:72:ba:cb:a1:39:fd:41:35:53:f1:ed:eb:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:86:86:95:41:6C:A1:BA:BA:D6:B1:30:63:D9:20:30:86:28:C1:66
            X509v3 Authority Key Identifier:
                keyid:8E:2C:58:7E:03:D7:7A:09:E0:23:68:48:BE:4C:5C:BC:4D:78:2D:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34352e3233362e3131342e302f32342d3234203d3e20323638323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:19:cc:ff:5c:d9:a4:8b:c1:42:aa:cc:0d:8e:c3:86:dc:e5:
         b5:d5:aa:9e:d0:4d:f6:cd:d3:b4:19:0b:6a:5d:d4:f4:65:ad:
         89:0b:d6:0b:f2:ae:f5:d1:b6:2f:c5:36:6d:53:37:d4:7c:b6:
         d2:8b:0f:66:a2:f3:a0:5a:76:a7:37:57:17:a5:75:30:3a:1e:
         94:fa:4f:94:b6:f4:f2:e2:36:ea:bf:4b:62:e6:e4:51:d8:ac:
         26:e8:86:65:1a:e1:b5:53:f6:bd:35:66:5b:1c:ad:d5:15:a1:
         97:d6:98:4e:c1:60:98:c0:84:ad:b0:ba:31:d7:a1:96:dc:92:
         8d:76:54:cd:52:d7:0d:ac:5e:b8:cb:63:e9:e1:b3:1c:19:d6:
         3b:60:18:ce:29:bb:73:cd:0c:6d:3f:8d:2b:b4:98:6d:d2:0d:
         8a:ff:d3:ba:43:8c:4a:a5:3a:cf:6b:b1:93:cb:79:91:67:86:
         1a:99:d4:ae:03:ef:13:2e:b2:05:15:c1:22:5c:09:07:fc:28:
         1a:bc:94:67:a1:1f:fc:99:3e:22:32:c5:b7:53:cb:fb:52:f8:
         38:4d:06:2f:39:d4:61:6b:6d:14:ca:1d:8b:13:4c:d3:a7:f7:
         1c:99:9b:26:54:32:be:ce:56:cf:06:67:05:2c:5d:00:a1:54:
         e2:4e:88:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:58:16 2025 by rpki-client