Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32322d3234203d3e20323637323736.roa
File:                     34352e3233322e3231322e302f32322d3234203d3e20323637323736.roa (raw, json)
Hash identifier:          wR/8ijja+HRqSyl2jmp60qb2cyqVFsGL8rYpBum1p6U=
Subject key identifier:   C6:7F:15:6F:6F:52:E8:71:01:3E:EA:79:2A:BF:A7:DF:10:9A:2A:83
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       7E48C3BE7917D72D78F25AC99194DADE36C39746
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32322d3234203d3e20323637323736.roa
Signing time:             Wed 05 Oct 2022 21:00:00 +0000
ROA not before:           Wed 05 Oct 2022 20:55:00 +0000
ROA not after:            Wed 04 Oct 2023 21:00:00 +0000
asID:                     267276
IP address blocks:        45.232.212.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:48:c3:be:79:17:d7:2d:78:f2:5a:c9:91:94:da:de:36:c3:97:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Oct  5 20:55:00 2022 GMT
            Not After : Oct  4 21:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:58:37:c2:33:32:bf:3c:23:e4:8c:50:38:
                    fc:63:81:be:40:ac:d6:c0:87:e1:c4:7b:35:21:3d:
                    05:ff:66:09:a4:40:5f:cc:db:02:61:7b:9c:03:1b:
                    c0:52:df:34:ef:fe:2a:8c:c8:6a:a6:da:ef:2b:73:
                    6f:f8:e5:d8:27:57:e5:45:99:10:d2:08:6f:49:6f:
                    06:22:a6:da:9f:7e:cb:54:80:07:41:40:5c:04:3a:
                    f7:23:fe:45:ca:b2:8f:86:9b:45:4c:fe:76:fc:c8:
                    72:5a:27:6d:10:c2:4d:51:07:dc:b1:6a:82:0a:77:
                    a5:7a:a9:aa:29:4b:fd:64:45:43:77:6b:8c:ba:6f:
                    19:7a:70:6c:79:45:5d:1a:ad:c7:07:9a:16:42:79:
                    a5:35:2c:af:c9:46:43:58:08:94:52:13:02:b7:76:
                    97:dc:a5:d5:ed:93:50:2f:03:62:50:5b:6d:da:c2:
                    a9:0c:72:a7:0d:46:79:b7:64:a6:38:40:69:c2:aa:
                    3c:f4:94:9a:dd:ff:5b:8b:e1:d5:ce:d0:f8:53:b6:
                    c0:ce:79:50:c6:8e:39:5a:da:f6:d9:91:20:73:28:
                    18:81:63:c8:92:84:12:6b:d8:33:69:2e:67:3d:86:
                    28:63:94:66:34:bc:91:6d:0f:5f:fc:52:08:49:92:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:15:6F:6F:52:E8:71:01:3E:EA:79:2A:BF:A7:DF:10:9A:2A:83
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32322d3234203d3e20323637323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:55:0d:ad:95:6a:34:4b:2a:50:37:e4:2b:d0:2d:38:cd:1d:
         c6:9b:24:6f:d3:79:84:1f:53:0e:a1:7e:67:aa:98:4b:aa:17:
         66:26:63:ec:9b:17:3f:27:01:8a:4d:9e:0a:2f:d8:a8:83:bc:
         95:40:66:0f:94:4e:99:e3:d1:3c:5a:30:9a:f8:36:51:d9:64:
         f4:bc:ac:4f:db:d2:80:1f:ba:a2:a5:7b:ea:71:36:42:12:b0:
         e4:95:60:b0:e8:e6:7b:91:e0:c8:52:2f:e3:2d:95:13:62:42:
         89:e8:77:09:2a:b5:86:e1:9a:5a:33:0a:b9:83:5f:04:b7:54:
         16:85:5e:f2:2d:78:2d:53:5c:31:14:9d:5e:32:4b:ea:b8:27:
         7a:04:4a:8a:a2:86:f3:89:60:35:9e:14:9a:86:0a:b5:ac:40:
         db:f8:bf:60:c3:b4:71:3d:6b:95:0e:fc:2a:9b:e7:e9:29:1c:
         12:5f:37:b0:b6:26:00:b4:cf:43:cf:df:64:f4:cd:f8:4f:9f:
         54:6c:90:a9:dd:7e:b7:c1:7b:1d:f1:e6:fd:f1:49:14:dc:59:
         fd:32:34:4a:90:ec:80:44:0b:6b:00:bb:f8:71:f3:e3:69:f3:
         e6:ae:0c:80:88:86:c2:ed:d8:4f:c8:bb:ec:bb:97:58:fa:3b:
         af:af:ba:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:35 2025 by rpki-client