Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa
File:                     34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa (raw, json)
Hash identifier:          ceBdACPV/UlHfR86NVw9cRs2pSTIvAxGuCBFFVYsI30=
Subject key identifier:   38:6E:80:6B:30:06:CF:FB:62:FA:12:F3:F6:E0:B8:55:2D:4D:EA:BF
Certificate issuer:       /CN=0E6404A90D19500EB80586A86D8324CB631FF854
Certificate serial:       630958467178FEDD2DBFD41507EC7D639F0CB33B
Authority key identifier: 0E:64:04:A9:0D:19:50:0E:B8:05:86:A8:6D:83:24:CB:63:1F:F8:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E6404A90D19500EB80586A86D8324CB631FF854.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa
Signing time:             Fri 09 Dec 2022 13:15:32 +0000
ROA not before:           Fri 09 Dec 2022 13:10:32 +0000
ROA not after:            Fri 08 Dec 2023 13:15:32 +0000
asID:                     267264
IP address blocks:        45.232.124.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:09:58:46:71:78:fe:dd:2d:bf:d4:15:07:ec:7d:63:9f:0c:b3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E6404A90D19500EB80586A86D8324CB631FF854
        Validity
            Not Before: Dec  9 13:10:32 2022 GMT
            Not After : Dec  8 13:15:32 2023 GMT
        Subject: CN=386E806B3006CFFB62FA12F3F6E0B8552D4DEABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:69:67:d1:47:ac:e4:3b:d0:2c:b2:bd:98:
                    76:9f:c9:ec:f6:83:ae:f9:df:b3:52:d0:f3:1c:b2:
                    2e:97:86:5b:86:85:65:b9:e8:37:d8:10:03:cd:5d:
                    da:af:e0:56:06:db:51:6a:a2:df:22:a8:43:0d:40:
                    6f:51:a1:d5:13:ad:ec:e1:70:3c:cb:f5:f4:8a:f8:
                    ef:6a:2e:5b:87:e7:6d:4c:6e:f3:15:01:cf:f6:5f:
                    1f:82:37:df:c4:70:2d:e0:cd:30:7e:8f:e5:56:a1:
                    c0:a4:56:36:6d:0c:50:85:1b:29:9f:6f:22:b6:8a:
                    48:2a:f1:0a:9a:6a:0b:49:9d:9c:b6:4f:2a:e1:08:
                    ab:65:26:ed:87:3f:3c:c0:06:29:40:96:1e:46:e0:
                    6b:3c:a8:0a:20:0a:ef:de:06:ba:52:70:6a:ac:34:
                    27:23:e8:01:97:c6:15:25:89:10:87:51:72:be:8d:
                    7f:90:0e:fc:9b:37:a1:99:8f:69:a7:80:a2:0b:41:
                    a1:cb:e4:e5:12:ae:c2:20:09:14:1e:a1:73:50:79:
                    6f:26:4b:62:d6:4c:b2:87:7b:ad:77:34:b5:2e:a1:
                    9f:33:a1:c4:34:d1:a7:b0:bb:20:53:7d:09:ea:29:
                    46:38:71:ee:b5:f8:06:6e:47:75:3b:96:1c:b3:36:
                    4a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6E:80:6B:30:06:CF:FB:62:FA:12:F3:F6:E0:B8:55:2D:4D:EA:BF
            X509v3 Authority Key Identifier:
                keyid:0E:64:04:A9:0D:19:50:0E:B8:05:86:A8:6D:83:24:CB:63:1F:F8:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/0E6404A90D19500EB80586A86D8324CB631FF854.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E6404A90D19500EB80586A86D8324CB631FF854.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:64:1a:9d:27:6d:13:82:c8:f6:dd:24:53:61:77:69:ac:
         4c:8a:2b:46:d5:00:db:76:87:a2:ef:fd:49:2f:93:8e:a2:75:
         89:82:c6:e6:90:49:ad:4c:59:79:72:74:69:c6:a4:38:15:66:
         b2:79:51:6b:35:8b:c8:a8:c8:55:2d:fb:78:d5:fc:0f:85:8c:
         c7:99:8e:33:7d:09:f0:ee:be:b5:cf:98:a4:c2:8b:1a:f4:83:
         51:7c:32:66:6a:c6:cc:06:6a:0f:71:f3:e7:f4:d8:82:a6:8c:
         d5:34:12:7d:b5:07:e1:25:21:ad:11:7f:03:26:7e:3d:74:5d:
         85:4b:27:c9:94:41:e9:aa:a7:c8:9a:e2:f5:e5:41:fb:11:ff:
         80:83:36:84:ba:5a:8b:ea:05:04:38:7c:6c:30:3d:14:08:28:
         3a:3f:67:50:f3:19:f2:4e:25:cc:28:59:99:f3:31:28:26:a2:
         86:31:04:64:04:02:8e:36:fa:d9:7c:88:4a:8f:b4:f6:32:bb:
         18:8a:81:03:0f:3d:78:df:36:d4:8a:e8:2f:d5:eb:01:97:7e:
         1d:7c:6c:e1:b9:f3:09:66:0b:3e:68:f7:52:7f:2d:67:0e:fa:
         c5:7d:94:79:e9:6c:09:db:4e:05:35:dd:fe:30:f7:a1:a3:38:
         a0:d4:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:31:00 2025 by rpki-client