Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
File:                     34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa (raw, json)
Hash identifier:          /fjUNX3CqAoB0TKmXYynwq/jo3xzlOJo4aVoZdh8HdM=
Subject key identifier:   83:38:5F:53:1E:E1:A1:D7:EE:F0:E2:FE:BD:17:82:35:9C:C1:48:25
Certificate issuer:       /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial:       10338936345EEF3FB60DF978EF3D7DD63CE76E19
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     268092
IP address blocks:        45.168.220.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:33:89:36:34:5e:ef:3f:b6:0d:f9:78:ef:3d:7d:d6:3c:e7:6e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=83385F531EE1A1D7EEF0E2FEBD1782359CC14825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:b5:16:52:aa:91:4c:38:a9:a2:b0:5b:4e:
                    d1:39:a8:b6:1b:f0:c0:7b:4c:62:8f:86:a1:b1:dd:
                    4c:f8:21:db:27:0d:7e:60:98:82:ad:9b:75:46:ec:
                    64:86:cd:62:b7:7a:81:71:d3:47:51:ce:88:a7:7b:
                    ad:13:8e:da:6b:ef:39:b6:0c:6c:cf:f5:37:28:49:
                    03:4a:1f:85:0c:37:51:9f:54:f5:a6:08:af:66:16:
                    90:28:87:47:fe:36:28:ec:8a:99:a2:80:8b:82:8d:
                    4b:1b:24:eb:3f:41:38:c6:5c:12:5c:ff:20:98:20:
                    d3:18:7e:b9:5a:1c:41:a7:8c:5c:96:bc:c5:7d:6f:
                    fd:7d:da:a5:55:a3:ee:41:ff:e8:83:ea:f8:b4:b6:
                    2f:fa:6b:63:9f:20:91:32:c3:45:10:a1:33:4f:92:
                    ad:89:c1:7f:71:12:e8:98:3a:21:2e:b9:63:4c:34:
                    26:07:ea:ff:c3:1b:56:ba:98:11:63:6b:80:eb:e2:
                    74:8c:0e:bb:88:19:dc:ec:f7:42:eb:a4:82:d1:9f:
                    f8:5a:39:f4:d0:8a:dd:87:ac:e6:bd:fc:bb:0c:88:
                    79:29:45:e4:64:7c:a9:3c:1c:66:33:a6:39:51:46:
                    76:6b:86:78:ad:32:e8:48:db:85:be:38:00:c1:4d:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:38:5F:53:1E:E1:A1:D7:EE:F0:E2:FE:BD:17:82:35:9C:C1:48:25
            X509v3 Authority Key Identifier:
                keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:96:69:33:2a:cc:c6:6e:49:9f:0a:ee:f4:48:36:f0:d0:
         7b:63:cf:62:f3:d3:d7:6b:7e:78:90:d7:11:c1:1e:2f:fe:d3:
         88:75:4a:cd:36:a3:8a:d3:f6:be:3f:30:93:37:34:3d:a4:fe:
         1b:b5:b6:45:28:83:0d:29:8d:a8:d1:41:d8:87:a7:b7:e5:0e:
         db:37:98:5b:99:11:16:fe:eb:51:29:0e:0e:c5:e2:ca:09:84:
         31:48:3a:34:4d:10:0d:e7:a6:f7:dd:6e:41:2b:de:09:2f:de:
         a7:94:f3:bc:2a:dc:65:92:79:4f:6b:1b:b4:2f:06:33:0d:3e:
         f3:c2:90:33:7a:f4:97:5b:cc:ef:88:2c:da:b1:81:1a:1e:d1:
         04:d5:2b:22:90:df:da:70:db:da:1f:2b:a1:3b:c2:4e:8a:9e:
         04:60:d0:94:6e:74:9f:f1:3a:5a:b3:16:a8:da:89:33:e3:1d:
         a0:b9:71:32:41:06:76:48:7e:3a:c1:66:b8:e1:57:18:b2:88:
         7e:6f:06:c0:de:44:30:b6:69:62:93:5b:14:cb:74:04:6c:cd:
         b8:b6:20:c1:10:29:36:7a:c9:d8:6c:a8:d8:e5:e3:d9:26:29:
         8b:18:fb:cb:84:2a:a8:c7:d9:12:d5:04:21:cf:64:81:92:2d:
         3a:00:78:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:50:15 2025 by rpki-client