Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa
File:                     34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa (raw, json)
Hash identifier:          73R1Nj9KtUPYaWh9UjoJXS/XGTmROSWbTJnlK1HmL4M=
Subject key identifier:   FA:B0:F0:76:6E:61:C3:3D:03:B3:61:26:D4:17:07:32:E1:6D:65:1A
Certificate issuer:       /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial:       0D39393A310DC1A27712ADA2A8C19AC1D7F53C34
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     268092
IP address blocks:        45.168.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:39:39:3a:31:0d:c1:a2:77:12:ad:a2:a8:c1:9a:c1:d7:f5:3c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=FAB0F0766E61C33D03B36126D4170732E16D651A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:71:68:2c:b0:ba:b4:ee:56:2e:f1:b3:22:
                    36:78:d5:f9:42:47:ac:78:fd:cb:4b:28:ce:f3:0c:
                    83:69:55:1e:ce:53:77:77:cf:79:35:24:d1:34:12:
                    65:cd:10:d4:ef:d1:17:9d:12:f1:8b:0a:a6:eb:1a:
                    23:56:ff:49:da:92:7b:2d:6b:2a:a4:d3:60:54:d3:
                    f2:62:b7:be:0d:cd:b1:5e:72:d4:66:5d:84:fb:82:
                    62:0f:30:de:1c:44:5d:ff:57:01:91:ab:5b:35:a0:
                    c5:ef:46:e4:a6:da:b5:9c:fc:d1:19:78:31:ee:44:
                    02:de:dc:9b:ba:70:d2:ad:c0:10:26:c8:18:42:93:
                    58:de:39:c3:51:79:0e:2c:bb:e7:1a:10:83:dd:d0:
                    05:70:08:b2:01:20:dc:eb:f8:ef:fa:0e:35:91:8a:
                    10:cb:06:f3:a5:7c:e1:a2:33:e0:9b:ce:aa:fc:0c:
                    ca:45:64:a2:7a:11:ba:00:03:e3:5b:40:ff:47:a2:
                    be:a3:cc:bb:d3:af:be:15:d7:7f:89:08:07:50:23:
                    85:4c:ad:2c:c4:e3:ed:83:fd:33:3a:1a:6c:8c:55:
                    47:7b:41:49:a9:d5:e1:56:8e:b0:1c:67:80:4f:21:
                    07:f5:29:14:6b:93:40:39:d0:42:e1:e0:43:16:57:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B0:F0:76:6E:61:C3:3D:03:B3:61:26:D4:17:07:32:E1:6D:65:1A
            X509v3 Authority Key Identifier:
                keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ed:99:e3:79:09:0f:08:4c:49:c4:54:98:a3:1b:15:7a:89:
         35:a7:64:6f:ec:92:e9:11:ac:e9:bd:a4:3b:5d:c5:ca:e4:67:
         4f:a9:69:47:1f:a2:a7:8e:b1:73:1e:72:04:e8:4d:ad:00:df:
         de:41:9a:9c:63:91:1b:12:b2:c8:47:c9:8c:ee:67:e0:c6:c9:
         6e:21:55:1e:e1:9f:7a:d3:2d:91:f7:94:5f:90:6b:5c:db:2f:
         c1:7e:b1:2b:e6:e3:d4:1f:08:35:db:2f:0e:a2:32:13:f7:aa:
         7e:3d:1b:20:cd:25:b7:6c:a8:ad:2e:99:85:35:57:1b:ce:c5:
         a2:bd:35:5e:56:06:68:a0:cb:43:f9:92:6c:1f:79:0a:05:75:
         b4:a3:16:4b:30:bd:b6:2e:11:1a:4e:14:a1:fa:e0:e0:f0:c8:
         ef:4f:56:12:16:0d:6a:6d:11:71:13:cb:1a:84:47:78:b0:13:
         d8:4c:4f:4b:2b:e6:24:18:23:38:c4:dd:79:fb:fe:3a:76:95:
         4c:82:1c:b7:af:2e:28:92:8d:f2:1b:11:3c:dd:bf:99:26:4f:
         f3:8f:69:3c:ae:89:f5:fe:e9:91:cf:5b:98:a8:c5:62:2a:4f:
         c0:fc:ef:25:db:b0:3d:75:71:53:e8:59:e4:3c:f6:f5:d5:88:
         4d:f6:c3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:45:05 2025 by rpki-client