Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e392f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e392f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          bY5j05xgtIhviDRUKB+jUJr8XcgbX3PGFw5h1Bx5c/4=
Subject key identifier:   3A:9A:2A:C9:D0:0C:4E:33:4E:B6:C4:56:C7:9B:1A:A7:18:B3:05:8C
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       2786DFC97CB045227B48CF8921CB8A501C92ECBE
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e392f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:10:32 +0000
ROA not before:           Sun 11 Sep 2022 23:05:32 +0000
ROA not after:            Sun 10 Sep 2023 23:10:32 +0000
asID:                     267256
IP address blocks:        45.232.50.9/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:86:df:c9:7c:b0:45:22:7b:48:cf:89:21:cb:8a:50:1c:92:ec:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:05:32 2022 GMT
            Not After : Sep 10 23:10:32 2023 GMT
        Subject: CN=3A9A2AC9D00C4E334EB6C456C79B1AA718B3058C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:1b:c6:61:b9:ab:bc:45:65:0e:be:9d:a2:
                    c4:dd:c0:9e:d1:75:5e:1f:c7:6d:ca:22:2e:65:c9:
                    3f:35:48:0a:83:f0:a2:3e:e1:4e:76:25:17:cc:83:
                    92:cc:cc:75:7a:0b:97:e4:3d:15:ef:02:99:d3:b9:
                    9a:f5:5a:48:30:59:83:99:ff:e5:ab:85:e3:0e:8a:
                    5b:dd:27:3e:b0:1d:2b:1a:5f:68:29:b7:df:d0:46:
                    cd:12:0d:e5:86:21:a3:4b:4c:cb:c5:d5:04:5d:2a:
                    e6:17:84:e2:00:4c:a6:ef:e1:e0:51:2e:dc:b5:c1:
                    7f:a5:08:d0:f3:0b:33:f7:78:78:c7:48:73:e3:db:
                    cd:f8:1b:d6:7f:82:ff:51:e2:7a:f0:b7:b5:fa:b0:
                    ed:91:7b:7f:f7:d3:59:49:eb:03:56:20:ae:18:e1:
                    68:a7:bb:5a:4e:05:b0:73:e3:05:a2:d3:12:28:b9:
                    e6:96:aa:ca:8d:8d:1e:39:36:a7:b0:1b:f9:b5:7a:
                    e4:cd:0e:b1:1a:01:ae:1f:24:53:da:6c:e0:3f:a8:
                    56:b2:18:24:e0:67:fe:0b:bc:91:41:0d:8a:a4:39:
                    f4:ff:66:25:78:00:72:81:7c:49:ea:42:4e:6e:76:
                    94:60:5d:48:a0:01:0c:29:0e:bd:08:9d:6e:f9:07:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9A:2A:C9:D0:0C:4E:33:4E:B6:C4:56:C7:9B:1A:A7:18:B3:05:8C
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e392f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.9/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:ea:80:40:73:18:9a:7e:ab:19:c0:00:21:ff:a4:89:9f:
         80:12:be:f5:c9:15:ae:33:f3:ec:3a:29:80:02:b1:be:2d:98:
         8d:d4:75:7c:d6:33:a3:40:3b:5a:7d:e7:12:ea:8b:ef:f4:7c:
         15:55:b6:98:ed:e2:e1:ad:6f:d1:06:a2:9a:41:eb:9c:4f:64:
         1d:93:cb:88:e9:34:f9:38:52:77:bb:ba:d8:93:d2:3d:ec:6f:
         3f:7c:1e:75:e5:e8:28:1f:e6:b1:46:89:dc:d7:66:a8:c4:99:
         c1:91:ef:91:30:e8:87:18:90:96:cb:6d:68:5e:12:7e:59:0b:
         73:01:43:fc:72:62:bb:b2:79:a4:04:bb:35:f9:af:3d:f1:9b:
         98:46:11:5f:67:b1:6e:ed:d3:44:45:2b:68:16:dd:10:73:3d:
         20:fa:06:2f:da:54:14:9f:6f:2b:cc:78:0b:c0:3f:eb:75:cc:
         72:ee:a0:8d:7e:79:66:54:4e:14:9e:d8:3a:38:ab:e8:15:d2:
         08:ec:aa:f5:54:55:9f:cf:61:0c:40:2e:eb:3a:27:7c:6d:6c:
         fc:93:28:2c:f2:7d:64:1a:d8:ab:81:d6:b1:73:d0:c4:20:c0:
         83:19:91:59:e7:82:34:5b:68:cd:40:6f:b7:02:5b:a4:ae:e0:
         47:28:a4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:38 2025 by rpki-client