Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/34352e3138372e3231322e302f32322d3232203d3e20323639353534.roa
File:                     34352e3138372e3231322e302f32322d3232203d3e20323639353534.roa (raw, json)
Hash identifier:          fsZGAZ2P90vg+9QLYEUUCpZgL9r4oMRWsvXwoDlCn+g=
Subject key identifier:   EB:D1:A5:3F:AB:90:67:25:0D:2B:29:88:D9:3C:A3:DA:27:55:81:9B
Certificate issuer:       /CN=3E908FAB2E56EE7EEC8826A506E5A833502F566C
Certificate serial:       04CDB7CECBFBFFDC6711A374BF2A968945F1FFD4
Authority key identifier: 3E:90:8F:AB:2E:56:EE:7E:EC:88:26:A5:06:E5:A8:33:50:2F:56:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E908FAB2E56EE7EEC8826A506E5A833502F566C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/34352e3138372e3231322e302f32322d3232203d3e20323639353534.roa
Signing time:             Thu 29 Sep 2022 22:07:50 +0000
ROA not before:           Thu 29 Sep 2022 22:02:50 +0000
ROA not after:            Thu 28 Sep 2023 22:07:50 +0000
asID:                     269554
IP address blocks:        45.187.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cd:b7:ce:cb:fb:ff:dc:67:11:a3:74:bf:2a:96:89:45:f1:ff:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E908FAB2E56EE7EEC8826A506E5A833502F566C
        Validity
            Not Before: Sep 29 22:02:50 2022 GMT
            Not After : Sep 28 22:07:50 2023 GMT
        Subject: CN=EBD1A53FAB9067250D2B2988D93CA3DA2755819B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9b:15:7c:92:90:5f:66:21:ba:d5:05:12:e7:
                    15:bd:4c:a3:1b:8e:0a:4a:13:48:9c:5b:d5:04:1f:
                    31:3a:0e:39:71:03:b2:07:13:39:a3:c9:0f:2e:0c:
                    31:d5:b9:a2:12:27:25:1e:9f:fa:43:13:e3:e1:96:
                    3a:77:a8:12:bf:cc:b7:58:6e:4e:ee:bc:7b:a8:08:
                    d8:60:cf:0f:41:72:e3:f6:08:8e:35:b2:0e:0f:7e:
                    a1:32:0d:de:35:96:e2:81:92:ce:43:95:68:01:6d:
                    6e:50:11:ce:79:2d:55:a2:38:55:21:4f:40:a3:6f:
                    0b:f8:0f:c7:91:b0:c6:aa:d0:79:05:1d:60:00:aa:
                    5c:3e:ac:e8:64:ef:d7:73:e2:1d:49:dd:5f:91:c0:
                    69:36:1e:b2:06:20:a8:78:1c:00:f6:45:48:7a:55:
                    9d:61:67:14:e8:cc:2b:35:c4:45:fd:96:1b:bf:2f:
                    7a:55:89:19:25:f9:05:e8:75:00:ae:8a:c8:c6:e8:
                    95:e8:61:75:96:66:1f:31:fb:dc:f8:53:f9:fa:25:
                    0c:84:78:41:c6:01:5a:a2:03:e0:85:4b:c5:6f:a0:
                    e8:06:be:31:b7:b2:9a:8b:29:26:e8:aa:60:19:96:
                    c9:83:de:c0:06:50:4a:22:41:8e:a3:c2:c2:a6:9b:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D1:A5:3F:AB:90:67:25:0D:2B:29:88:D9:3C:A3:DA:27:55:81:9B
            X509v3 Authority Key Identifier:
                keyid:3E:90:8F:AB:2E:56:EE:7E:EC:88:26:A5:06:E5:A8:33:50:2F:56:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/3E908FAB2E56EE7EEC8826A506E5A833502F566C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E908FAB2E56EE7EEC8826A506E5A833502F566C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/34352e3138372e3231322e302f32322d3232203d3e20323639353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:59:ba:b3:b6:7c:f3:c1:49:7d:f5:c4:3a:0c:2a:ee:95:a2:
         0c:94:6a:d5:9c:75:a2:99:b5:15:f0:78:1a:6e:c1:bb:08:a7:
         83:74:ea:61:3e:bf:7c:f7:24:94:e8:88:be:08:f6:9b:0e:a5:
         eb:39:ba:c1:a7:cc:6e:4d:c7:8c:70:9c:c8:52:e3:a7:3f:d6:
         fc:ec:09:8e:2c:2c:56:e4:cf:dc:a6:cb:58:20:d7:c5:46:ea:
         32:92:10:79:66:67:28:99:67:79:fd:6b:06:e2:ea:53:f6:41:
         e4:80:bf:16:29:3b:84:9c:64:44:0b:e9:10:95:b2:3e:dc:8b:
         ce:08:21:e4:9d:0b:86:13:f7:97:16:14:3f:25:2a:f6:0e:84:
         f2:55:d8:8f:b9:fe:03:6f:c3:9b:65:51:06:cc:d2:80:69:03:
         2a:e3:d7:b7:24:66:56:38:3d:e6:c2:d7:36:8a:91:10:03:a0:
         56:18:47:4f:6e:54:f6:9a:0f:0b:7e:a7:63:e7:bc:b3:21:0e:
         e2:71:50:9e:57:34:53:d9:70:30:28:15:fd:41:c6:e1:35:a4:
         d0:7b:1b:64:73:17:6f:e3:3b:61:d4:a2:c6:6f:df:7e:cb:64:
         1f:87:50:e0:6f:76:07:cd:8a:fc:0e:b1:6d:bf:3f:38:b8:a6:
         e9:94:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:37 2025 by rpki-client