Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3myiCfuxR9JMa88ZXBoym4EfdDnwmCGuBmmPyRmrCdSi/0/34352e3137392e3232342e302f32332d3233203d3e20323639313034.roa
File:                     34352e3137392e3232342e302f32332d3233203d3e20323639313034.roa (raw, json)
Hash identifier:          9eJdo9S4YG03K7lSPvfrumnUPl++zSg+3aYLJRyOIxo=
Subject key identifier:   91:2F:D4:B5:93:84:27:3E:93:1D:17:BB:C7:F5:B6:DB:52:78:98:C4
Certificate issuer:       /CN=4404B5049A534CBCD9074A3AFB26A26276CF848B
Certificate serial:       0CB5F208399D544E67804A0E84329F09E7A7C890
Authority key identifier: 44:04:B5:04:9A:53:4C:BC:D9:07:4A:3A:FB:26:A2:62:76:CF:84:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4404B5049A534CBCD9074A3AFB26A26276CF848B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3myiCfuxR9JMa88ZXBoym4EfdDnwmCGuBmmPyRmrCdSi/0/34352e3137392e3232342e302f32332d3233203d3e20323639313034.roa
Signing time:             Thu 03 Nov 2022 17:26:26 +0000
ROA not before:           Thu 03 Nov 2022 17:21:26 +0000
ROA not after:            Thu 02 Nov 2023 17:26:26 +0000
asID:                     269104
IP address blocks:        45.179.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b5:f2:08:39:9d:54:4e:67:80:4a:0e:84:32:9f:09:e7:a7:c8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4404B5049A534CBCD9074A3AFB26A26276CF848B
        Validity
            Not Before: Nov  3 17:21:26 2022 GMT
            Not After : Nov  2 17:26:26 2023 GMT
        Subject: CN=912FD4B59384273E931D17BBC7F5B6DB527898C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:16:7e:eb:8d:ed:22:ec:ba:0a:25:20:cb:
                    87:5c:9b:50:b5:62:94:e0:96:02:7f:8c:39:16:25:
                    eb:05:d8:0b:49:58:1b:7e:e0:7d:64:d9:2b:58:2a:
                    85:55:ab:9f:74:8d:02:0a:fd:2b:3a:00:01:d2:31:
                    a1:0e:cc:17:99:d3:5d:59:7e:29:5a:79:60:3c:f8:
                    af:3a:e6:27:62:2b:78:9f:21:4e:d0:61:6a:34:cd:
                    02:af:7c:20:df:7e:ac:2a:6a:c7:84:0a:f9:c8:20:
                    c1:14:d1:d1:8c:a3:7d:4a:9a:ae:d3:62:36:7c:ca:
                    23:a9:db:23:a6:78:80:16:d7:78:9f:e9:81:ae:50:
                    80:24:79:0f:1d:88:6e:41:5e:72:71:d6:35:ce:9f:
                    bb:72:99:70:aa:39:4e:c0:21:19:52:f1:3b:b7:34:
                    5a:8c:43:66:d6:d1:e0:ab:d7:dd:e3:02:ed:3b:2d:
                    ec:d1:7e:e0:75:18:ab:e4:7c:6a:45:60:88:6a:d3:
                    8a:f5:a1:14:9d:7d:bb:8e:3a:31:23:fb:46:80:55:
                    90:28:be:82:5d:cb:e4:df:92:8a:d7:fc:95:a1:ce:
                    fc:0c:61:53:f7:2a:28:5a:15:25:0c:2b:4f:0b:e2:
                    ff:46:d2:ef:3b:80:c2:28:a5:46:e0:2d:a4:a0:61:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2F:D4:B5:93:84:27:3E:93:1D:17:BB:C7:F5:B6:DB:52:78:98:C4
            X509v3 Authority Key Identifier:
                keyid:44:04:B5:04:9A:53:4C:BC:D9:07:4A:3A:FB:26:A2:62:76:CF:84:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3myiCfuxR9JMa88ZXBoym4EfdDnwmCGuBmmPyRmrCdSi/0/4404B5049A534CBCD9074A3AFB26A26276CF848B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4404B5049A534CBCD9074A3AFB26A26276CF848B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3myiCfuxR9JMa88ZXBoym4EfdDnwmCGuBmmPyRmrCdSi/0/34352e3137392e3232342e302f32332d3233203d3e20323639313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:06:15:c0:63:2e:7a:72:13:3b:16:86:70:60:05:ac:28:ff:
         22:27:b9:83:4b:8d:b0:0d:f5:07:d3:ba:b9:32:44:c3:ba:f0:
         2b:09:c6:3a:89:b2:88:53:dd:f5:92:4b:52:67:91:19:32:09:
         81:f8:7c:14:28:55:6c:a3:5d:a3:b2:c6:0f:f0:84:ed:3f:40:
         c4:91:ec:b5:e3:b9:14:7e:49:63:a9:75:9f:27:44:fc:a7:c7:
         e3:b6:5e:d1:55:86:a6:72:68:18:b5:55:0c:d9:c3:69:3e:fc:
         7c:2f:e4:38:c6:4c:ff:b3:dd:30:e7:35:4d:bf:09:cf:ec:fd:
         c6:a8:1d:16:03:53:81:df:4a:e6:81:0e:2b:cc:4d:02:a6:2d:
         94:84:4b:a4:7c:51:47:3c:43:2d:5d:7a:62:9a:9e:28:5c:d3:
         06:18:a9:65:18:48:0c:98:ef:aa:6b:48:e2:7e:74:d0:38:4e:
         20:08:5b:30:f8:69:29:df:8f:c0:2d:b0:d8:7a:f5:c5:2c:7e:
         50:bd:74:6b:e2:a1:ed:e2:2b:5c:38:a5:85:b2:18:ef:ce:bf:
         c7:55:6b:d4:c6:e8:cf:0a:49:67:49:bd:47:e2:71:5c:10:7a:
         85:46:ff:42:c3:36:e5:59:9d:c9:e9:eb:a1:c5:db:f5:e4:69:
         eb:eb:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:14 2025 by rpki-client