Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e3232352f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e3232352f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          y2+TwLOxPPru+WIBbS9N/j22YQiEEvn5rw88r5CbR6o=
Subject key identifier:   D6:7F:D7:7C:7B:2B:A3:E4:05:EA:FF:00:D0:C4:2A:77:3A:78:FE:FA
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       0C37048A646ECA42BBC0C37582555BAA6AE1FC11
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e3232352f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:22:31 +0000
ROA not before:           Sun 11 Sep 2022 23:17:31 +0000
ROA not after:            Sun 10 Sep 2023 23:22:31 +0000
asID:                     267256
IP address blocks:        45.232.50.225/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:37:04:8a:64:6e:ca:42:bb:c0:c3:75:82:55:5b:aa:6a:e1:fc:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:17:31 2022 GMT
            Not After : Sep 10 23:22:31 2023 GMT
        Subject: CN=D67FD77C7B2BA3E405EAFF00D0C42A773A78FEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:11:09:9f:ae:00:ab:bb:dc:31:d6:51:62:
                    bf:68:ec:32:04:72:ce:3d:bf:de:c8:ec:37:c7:21:
                    7f:63:ec:c7:06:70:b7:ae:6d:ed:34:56:20:72:87:
                    fd:76:ed:f2:e4:7b:05:c3:f6:7e:90:42:1c:e1:df:
                    16:ed:40:e5:6a:b7:fc:b5:32:7b:40:db:d9:a3:c8:
                    72:f6:cf:36:15:72:f5:ec:16:c1:b6:65:87:d7:7b:
                    d1:f6:fe:8c:18:bb:67:68:65:49:9b:fc:e2:47:68:
                    71:7e:68:fd:ae:5f:e9:2f:1f:28:dd:4c:d4:74:31:
                    d1:c5:62:e1:d2:9d:82:f4:08:33:50:82:1f:3c:60:
                    8f:43:95:7a:a8:74:8d:bc:f5:f7:b8:48:4f:56:d0:
                    cc:26:5d:07:82:e6:46:bb:19:3a:65:65:51:f3:03:
                    8b:6e:d5:ba:0c:8c:17:0f:b8:48:27:f8:0a:ce:84:
                    ab:21:5d:35:df:b8:a9:56:fe:3f:cb:1a:2d:d2:77:
                    33:70:f6:e8:df:ea:c0:d6:5b:c9:10:8a:46:14:e1:
                    00:44:74:a6:b0:55:33:66:08:c1:a7:34:c6:55:50:
                    6c:df:0f:c0:d9:d3:85:c9:cd:92:c4:45:0f:2e:12:
                    9b:40:76:df:bc:ec:36:a4:e6:f8:53:cf:3c:f6:f7:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7F:D7:7C:7B:2B:A3:E4:05:EA:FF:00:D0:C4:2A:77:3A:78:FE:FA
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e3232352f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.225/32

    Signature Algorithm: sha256WithRSAEncryption
         47:86:1e:37:e7:65:4e:ea:ca:05:58:54:91:7a:0f:80:b3:f8:
         18:9a:7d:68:88:fb:a2:a3:20:58:a8:18:16:12:26:0e:d1:17:
         67:29:87:ce:28:b9:8f:04:50:cd:9a:2c:3d:e0:24:17:5f:ff:
         5e:6e:e7:90:0d:8f:af:cd:32:cb:56:b2:69:8b:5f:de:70:b6:
         cd:68:1e:c0:eb:8f:cc:86:d6:4d:e6:24:62:65:3d:6d:db:ae:
         da:c7:27:ec:e1:4e:e0:28:9e:82:9f:a3:99:da:a6:4b:e4:80:
         85:2a:f4:7d:da:e9:dc:f2:aa:14:96:d3:81:9c:89:81:11:3f:
         9f:78:b8:ef:73:aa:6f:66:f3:d0:2b:3b:cb:b1:5c:0b:cf:5f:
         34:b5:43:65:92:ca:6b:49:2d:71:d9:bf:b2:11:5d:38:40:60:
         a7:9e:06:31:1d:e5:83:7b:8b:32:66:2f:89:ac:1f:da:de:16:
         d7:3d:ce:be:36:9c:c7:4d:20:26:2e:f9:54:79:a8:45:bd:79:
         60:2b:59:1b:49:2b:be:95:f0:7c:07:e6:6c:02:ad:78:e0:e7:
         33:70:82:97:e0:20:13:00:68:ad:84:dc:66:1d:a2:ae:b6:7c:
         c1:9a:dd:35:d3:52:c3:f8:1b:cb:db:a9:d0:75:e1:e1:ee:6d:
         6b:ca:13:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:46 2025 by rpki-client