Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33382e302f32342d3234203d3e20323638303237.roa
File:                     34352e3136382e33382e302f32342d3234203d3e20323638303237.roa (raw, json)
Hash identifier:          sbz7y/BIOk4KpeHioKxvo3lYpu7SpMVQ4LeB7/R0q50=
Subject key identifier:   08:5B:37:01:8B:F8:3C:D6:CC:BE:33:53:74:12:FB:30:B1:00:53:12
Certificate issuer:       /CN=CC78BDF85E39DECFD60C09178EE311CCEBFE77C7
Certificate serial:       764FE7338E8D17D93BA6A355244B097FECFFE260
Authority key identifier: CC:78:BD:F8:5E:39:DE:CF:D6:0C:09:17:8E:E3:11:CC:EB:FE:77:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33382e302f32342d3234203d3e20323638303237.roa
Signing time:             Wed 28 Dec 2022 15:42:15 +0000
ROA not before:           Wed 28 Dec 2022 15:37:15 +0000
ROA not after:            Wed 27 Dec 2023 15:42:15 +0000
asID:                     268027
IP address blocks:        45.168.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4f:e7:33:8e:8d:17:d9:3b:a6:a3:55:24:4b:09:7f:ec:ff:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC78BDF85E39DECFD60C09178EE311CCEBFE77C7
        Validity
            Not Before: Dec 28 15:37:15 2022 GMT
            Not After : Dec 27 15:42:15 2023 GMT
        Subject: CN=085B37018BF83CD6CCBE33537412FB30B1005312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:f5:c8:9e:d7:7b:c6:d9:86:a5:64:25:13:
                    22:d4:6c:dd:46:52:7b:ae:bb:99:39:15:7d:38:5c:
                    d4:d9:86:5d:9a:6a:fe:5b:92:06:f3:12:6f:0c:b4:
                    a7:be:f9:fd:32:42:10:e3:42:d9:a3:31:f1:ad:d2:
                    5e:48:be:e7:aa:75:73:8d:b6:cb:52:57:1d:c8:32:
                    a9:f5:c5:0d:83:ce:21:52:d5:f4:80:0f:55:36:db:
                    c7:16:bc:be:22:31:ce:93:44:84:b2:cb:a3:91:bb:
                    14:99:cf:13:80:80:1c:d3:21:75:75:d7:d5:5a:0f:
                    4a:0c:c1:57:f7:f5:29:f8:78:c1:f4:32:21:13:90:
                    23:45:b1:62:9c:7c:9c:e7:41:90:d6:c0:fa:72:a8:
                    5f:e5:0f:f0:47:2f:2e:fc:3e:4f:22:cb:96:7b:a6:
                    74:63:b9:b3:24:d9:83:6e:31:be:1b:87:f5:43:50:
                    d6:d4:1d:22:eb:94:c4:55:99:a3:97:37:3a:e2:2e:
                    0a:d9:12:2f:57:86:ca:b7:e8:97:1d:de:29:63:87:
                    79:9d:fd:23:52:38:c9:bc:21:d2:65:d4:95:73:5a:
                    75:31:42:a6:ca:4d:c4:67:67:10:a9:50:40:b3:65:
                    c9:ba:66:4b:80:cf:cd:00:f4:70:60:54:b3:e1:8c:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5B:37:01:8B:F8:3C:D6:CC:BE:33:53:74:12:FB:30:B1:00:53:12
            X509v3 Authority Key Identifier:
                keyid:CC:78:BD:F8:5E:39:DE:CF:D6:0C:09:17:8E:E3:11:CC:EB:FE:77:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33382e302f32342d3234203d3e20323638303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:23:fc:0a:f6:9e:ad:88:b2:96:49:53:05:ec:3a:ca:d6:82:
         bd:fe:96:dd:46:48:46:a1:40:c3:67:06:db:76:d7:d2:85:4a:
         6d:7f:71:6b:ac:90:b2:ac:7b:71:dd:24:62:c1:bd:2e:64:d4:
         47:47:d3:0e:42:7b:e3:3f:06:ba:10:59:81:82:0b:5b:3e:eb:
         7d:ef:de:aa:9d:50:cc:46:0a:98:ac:fa:c8:2f:94:64:71:1b:
         72:e7:b5:13:24:c8:88:5a:b6:17:3a:64:38:78:87:6f:64:b3:
         bf:0b:6b:99:96:bc:c9:a0:34:ae:da:b5:b0:44:78:41:fc:8f:
         45:e5:e9:8c:31:c5:a6:7f:89:c1:9e:d1:80:46:1b:41:75:06:
         f4:b8:1e:a4:0b:6c:8a:bb:f7:b8:59:5f:2b:d2:f7:c6:19:db:
         a9:12:72:5d:a2:43:9b:ca:a2:ad:dc:cb:83:aa:b7:0b:39:a3:
         62:cf:dd:5a:86:66:78:bb:25:5d:a9:13:0e:55:a4:b0:ba:0a:
         95:e1:f2:f1:bc:0b:31:35:8d:2a:b6:8a:af:f1:00:41:7f:43:
         1e:35:18:48:00:40:8a:00:d2:cb:4a:1a:74:8a:c1:6c:42:52:
         fb:6d:6f:64:59:f9:a1:10:0e:b6:1b:b3:18:ec:6a:3f:28:9d:
         dc:c4:24:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:48:16 2025 by rpki-client