Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/34352e3137352e37322e302f32322d3234203d3e20323638383838.roa
File:                     34352e3137352e37322e302f32322d3234203d3e20323638383838.roa (raw, json)
Hash identifier:          wRksazlAgMJkt1sG2I0EBCDk7PDDBzHu84Qn9fkCOSM=
Subject key identifier:   3F:14:38:DB:1D:F2:13:AF:76:CD:E9:1D:AA:89:C1:9C:4A:D4:13:4B
Certificate issuer:       /CN=4B3FAAE01655630B846E5A9F1FAFC437948428B5
Certificate serial:       1A315A1D0F1B4C7B60323DC8817D0817D50634D8
Authority key identifier: 4B:3F:AA:E0:16:55:63:0B:84:6E:5A:9F:1F:AF:C4:37:94:84:28:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FAAE01655630B846E5A9F1FAFC437948428B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/34352e3137352e37322e302f32322d3234203d3e20323638383838.roa
Signing time:             Fri 31 Jan 2025 15:55:25 +0000
ROA not before:           Fri 31 Jan 2025 15:50:25 +0000
ROA not after:            Fri 30 Jan 2026 15:55:25 +0000
asID:                     268888
IP address blocks:        45.175.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:31:5a:1d:0f:1b:4c:7b:60:32:3d:c8:81:7d:08:17:d5:06:34:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3FAAE01655630B846E5A9F1FAFC437948428B5
        Validity
            Not Before: Jan 31 15:50:25 2025 GMT
            Not After : Jan 30 15:55:25 2026 GMT
        Subject: CN=3F1438DB1DF213AF76CDE91DAA89C19C4AD4134B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:a3:13:02:52:82:40:4f:95:19:b8:4d:9c:
                    3e:03:b3:fa:73:38:17:c8:d2:c9:18:83:ad:c3:c8:
                    1c:59:3e:d6:b9:f2:21:f9:00:ec:2d:0c:04:80:33:
                    9d:d2:ef:bb:09:2c:c2:82:a4:53:a3:09:ff:f3:a6:
                    bb:cd:82:62:87:0e:60:e6:d8:1b:91:58:61:a6:42:
                    9e:a2:1e:e6:c2:c9:b1:8b:14:67:c3:16:01:dd:87:
                    47:8e:c6:47:33:50:6f:ac:af:93:d5:f0:58:86:cc:
                    2b:38:7d:e4:8b:96:2a:9b:0d:90:69:dd:6e:e0:bb:
                    8a:4a:b2:8b:18:ac:65:0c:20:d1:d7:f5:e1:c7:7f:
                    51:d0:0c:24:7f:9c:fb:5c:40:73:05:46:37:7d:07:
                    98:47:b7:af:0a:bd:98:39:f0:7e:03:ca:47:60:78:
                    6a:8c:c4:38:3a:8f:2e:0f:e9:e0:7c:58:ba:90:89:
                    fa:de:e3:70:0e:31:31:66:a3:10:8f:86:41:20:e6:
                    f8:87:18:e9:cd:d7:80:72:95:41:72:6b:a2:36:54:
                    d0:c6:11:e2:57:df:3d:7e:52:72:80:6e:c4:ee:47:
                    c2:39:7d:e8:7d:2a:da:fe:5e:05:cc:ea:71:02:24:
                    f9:f0:5b:93:d6:16:65:fd:65:6b:c4:c1:a0:0f:1e:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:14:38:DB:1D:F2:13:AF:76:CD:E9:1D:AA:89:C1:9C:4A:D4:13:4B
            X509v3 Authority Key Identifier:
                keyid:4B:3F:AA:E0:16:55:63:0B:84:6E:5A:9F:1F:AF:C4:37:94:84:28:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/4B3FAAE01655630B846E5A9F1FAFC437948428B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FAAE01655630B846E5A9F1FAFC437948428B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/34352e3137352e37322e302f32322d3234203d3e20323638383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:f2:d7:8d:a1:05:f4:32:37:fe:dd:c7:ac:d6:7c:e2:73:ed:
         ce:c8:cd:f1:bc:ba:3f:2e:9b:74:bb:3f:35:04:91:1b:9d:20:
         9a:6e:49:16:b3:ca:2e:1f:7c:2f:b0:43:84:da:18:76:2c:d8:
         29:30:5e:7d:f7:35:7f:59:1f:54:ba:7a:a7:ca:54:cc:a6:81:
         fe:19:f4:a3:ce:d2:12:fc:58:57:9a:f7:f4:b7:72:e0:17:9d:
         0c:ca:34:75:e2:1d:59:76:df:02:e0:de:ec:75:bd:d3:b4:42:
         b7:00:6c:9c:37:6b:f2:c8:c6:dd:d7:bb:65:9f:f3:1b:34:57:
         8f:11:ae:d5:bc:5e:1d:d8:0e:60:ec:76:30:e7:ac:ad:ba:51:
         2c:fb:95:d8:ab:41:d3:49:4f:bb:18:bc:53:b2:87:5f:b4:5b:
         c3:cb:64:ae:73:e8:45:19:33:11:a7:ae:cf:00:5c:a1:61:e4:
         a9:de:53:e6:cf:de:55:51:db:f4:5f:8c:ab:99:98:b6:6e:c2:
         95:de:0c:01:dd:87:81:53:77:57:53:0d:17:d1:dd:17:67:60:
         b6:de:93:43:fa:14:75:ff:d0:97:9f:2f:26:f5:9f:33:96:92:
         a2:63:7b:f7:f2:d1:cc:a0:a6:59:ad:0e:a6:11:90:22:da:af:
         fe:aa:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:14 2025 by rpki-client