Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36342e302f32322d3232203d3e20323639343732.roa
File:                     34352e3136322e36342e302f32322d3232203d3e20323639343732.roa (raw, json)
Hash identifier:          sgtZF7WxqPu2seZBW4J+oIOGGeYAPhE3r5qQh8CMG68=
Subject key identifier:   48:27:A4:C9:9C:13:AE:37:54:E6:4E:07:2B:65:9D:DA:32:30:27:9F
Certificate issuer:       /CN=B3A5736ACE6C497662EBAA10658C96B12B253181
Certificate serial:       7150EA083CD2B650D83FF53AE14A6BEA18A9CBD3
Authority key identifier: B3:A5:73:6A:CE:6C:49:76:62:EB:AA:10:65:8C:96:B1:2B:25:31:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3A5736ACE6C497662EBAA10658C96B12B253181.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36342e302f32322d3232203d3e20323639343732.roa
Signing time:             Mon 04 Apr 2022 22:43:47 +0000
ROA not before:           Mon 04 Apr 2022 22:38:47 +0000
ROA not after:            Mon 03 Apr 2023 22:43:47 +0000
asID:                     269472
IP address blocks:        45.162.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:50:ea:08:3c:d2:b6:50:d8:3f:f5:3a:e1:4a:6b:ea:18:a9:cb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A5736ACE6C497662EBAA10658C96B12B253181
        Validity
            Not Before: Apr  4 22:38:47 2022 GMT
            Not After : Apr  3 22:43:47 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:5d:50:9d:82:b5:5f:6f:0f:ce:87:9c:b5:
                    ed:23:4a:a6:81:af:6e:e6:32:ea:cd:ec:28:f6:53:
                    22:e9:9a:cd:f0:07:b6:f0:9e:26:f3:46:fa:3d:9d:
                    61:fb:96:bc:d5:93:70:4f:9c:9e:7a:86:7a:88:61:
                    49:6e:af:a4:25:4b:ed:9a:95:64:9c:4e:fd:b5:05:
                    b5:c3:4a:77:9c:3a:f3:5d:7b:cf:d7:e1:69:4a:5b:
                    91:15:95:0c:2b:19:72:6b:36:26:43:0f:d0:11:64:
                    e6:9c:4a:63:7c:a5:55:93:d2:a8:0c:e1:5a:0b:f9:
                    69:98:da:6a:03:a9:f4:6a:bd:ce:b0:7d:6c:2a:9b:
                    f9:2a:bf:61:e1:ad:60:32:cb:0e:46:7c:9d:8a:4a:
                    58:f2:e9:96:66:15:da:94:d9:dd:7f:75:07:e1:d9:
                    86:57:ed:23:5e:ad:f5:7f:9c:8d:59:10:b0:ba:ae:
                    a1:51:12:44:60:9a:9e:0c:2d:bb:73:ce:e2:b9:6a:
                    c0:75:b6:2f:c9:9a:42:19:02:6e:c1:76:c7:46:fe:
                    3f:2e:c3:45:6c:20:d2:26:9b:86:04:a2:4e:5d:4d:
                    7a:8d:34:60:6e:d7:c9:a7:c9:99:c5:4d:13:ad:69:
                    3c:73:5c:91:e4:42:7a:54:f1:4f:bc:13:ab:f7:bc:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:27:A4:C9:9C:13:AE:37:54:E6:4E:07:2B:65:9D:DA:32:30:27:9F
            X509v3 Authority Key Identifier:
                keyid:B3:A5:73:6A:CE:6C:49:76:62:EB:AA:10:65:8C:96:B1:2B:25:31:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/B3A5736ACE6C497662EBAA10658C96B12B253181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3A5736ACE6C497662EBAA10658C96B12B253181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/34352e3136322e36342e302f32322d3232203d3e20323639343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:27:a1:49:6b:c7:56:03:2a:1e:ea:af:a1:82:4d:ae:fb:f0:
         03:70:fa:3b:94:63:d9:e0:61:df:c3:d7:63:95:ac:d7:1d:a0:
         0d:85:ae:02:24:c5:0b:66:72:06:44:6c:87:8b:9c:d2:19:31:
         32:f0:28:fc:3d:3f:5d:14:ee:cb:59:f7:c6:ab:51:d4:6e:ba:
         10:b4:13:66:56:39:c3:22:9d:9d:4e:06:3a:1c:90:b5:89:d4:
         12:18:27:c8:75:25:f9:13:45:a7:00:03:a5:67:cc:df:81:98:
         bb:66:75:ae:8f:d3:43:26:68:ed:ad:f9:09:65:34:b9:af:c7:
         86:f3:3e:0a:48:5d:1b:cd:66:ef:40:b2:82:18:6a:be:b5:2c:
         da:b8:2e:9a:dd:a8:c0:2d:c0:f4:2f:f5:b8:82:7a:d7:a9:b6:
         ec:50:74:06:f2:43:ee:65:7e:02:8f:57:3c:8a:d4:bf:d8:3e:
         54:09:50:e3:86:c4:30:31:95:01:18:58:49:17:a0:e0:44:f0:
         40:d5:bd:bb:8a:6e:a3:99:51:dd:34:f0:3c:d3:5e:95:07:6b:
         4e:cd:ce:d9:7e:6d:1f:b3:0b:ae:87:27:43:07:7c:48:51:33:
         fc:78:6f:ea:b0:67:af:a6:0d:82:11:c8:55:96:7f:29:81:f5:
         61:e2:09:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:21:08 2025 by rpki-client