Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/34352e3233382e38322e302f32342d3234203d3e20323638333136.roa
File:                     34352e3233382e38322e302f32342d3234203d3e20323638333136.roa (raw, json)
Hash identifier:          Yz7gtN/zlWJlfRVpLhjkdFMgVEadveyCPDNI9zTIu/4=
Subject key identifier:   F0:5A:C2:64:26:25:C9:2A:44:AB:F4:53:A1:F4:7D:DB:5E:B1:81:4B
Certificate issuer:       /CN=6394333A258FBDBBD544DE363E2767998C64BB78
Certificate serial:       1D3C5725ABC053819081BCB2702FCDBE780717FB
Authority key identifier: 63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/34352e3233382e38322e302f32342d3234203d3e20323638333136.roa
Signing time:             Wed 29 May 2024 13:34:27 +0000
ROA not before:           Wed 29 May 2024 13:29:27 +0000
ROA not after:            Wed 28 May 2025 13:34:27 +0000
asID:                     268316
IP address blocks:        45.238.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3c:57:25:ab:c0:53:81:90:81:bc:b2:70:2f:cd:be:78:07:17:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6394333A258FBDBBD544DE363E2767998C64BB78
        Validity
            Not Before: May 29 13:29:27 2024 GMT
            Not After : May 28 13:34:27 2025 GMT
        Subject: CN=F05AC2642625C92A44ABF453A1F47DDB5EB1814B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:e8:d0:e4:59:59:5a:44:d0:b9:3e:a6:7f:
                    42:a9:44:1c:8a:4c:80:26:05:45:92:e0:00:47:d8:
                    71:76:20:2e:bb:30:9f:dd:c6:5d:0b:e0:c4:5b:85:
                    97:99:2f:ca:21:cc:ba:43:59:4b:00:ab:bd:36:9b:
                    c7:d8:0d:ca:8e:b5:a5:bc:c7:49:3e:7a:bb:3f:f7:
                    cf:e6:ae:a5:25:4e:04:bd:2f:72:44:d8:f4:de:0f:
                    68:a0:00:3a:27:3c:ca:36:f6:90:10:eb:20:10:d7:
                    f2:43:f5:2d:f7:54:57:06:a8:91:5d:24:8b:ab:b1:
                    ff:8b:73:37:ee:5e:6d:c3:92:8d:de:48:f7:cf:08:
                    de:47:a0:5c:03:ed:8b:43:3f:12:b1:a7:fe:67:d3:
                    22:74:b2:c2:c7:c7:3c:2e:e1:d7:c5:b3:39:02:36:
                    63:e9:52:59:93:8b:16:37:46:4f:16:fa:e0:c8:25:
                    80:1b:5c:f5:33:14:5b:33:aa:1f:13:b0:21:07:81:
                    d9:4c:d8:92:17:b5:ab:fc:12:bc:87:00:9d:88:4c:
                    28:96:d1:c4:29:f7:58:0e:13:5e:c1:fd:39:79:1b:
                    e3:08:6e:1e:b9:a5:66:84:19:2e:d6:fa:87:81:2f:
                    a3:c5:ad:9c:70:a1:31:60:dc:40:bf:e1:bf:43:50:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5A:C2:64:26:25:C9:2A:44:AB:F4:53:A1:F4:7D:DB:5E:B1:81:4B
            X509v3 Authority Key Identifier:
                keyid:63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/6394333A258FBDBBD544DE363E2767998C64BB78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/34352e3233382e38322e302f32342d3234203d3e20323638333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:95:50:fc:74:12:3f:1e:a2:51:7c:6b:5f:b4:55:0b:25:8b:
         0f:2d:8f:13:87:07:20:fc:1f:4b:9b:53:08:ce:62:65:53:49:
         24:70:b1:17:ae:3e:78:be:5b:20:8b:16:eb:e9:80:05:5d:75:
         d8:75:20:c1:e4:46:fe:f4:15:9e:20:f7:f6:96:a3:0b:bd:09:
         04:ad:9c:29:01:29:15:5b:c7:91:87:3a:51:b9:95:c3:75:37:
         6f:4c:4b:c2:f9:4d:57:fe:6e:18:cd:7c:83:db:16:92:fa:ca:
         63:ba:92:9d:56:50:41:69:15:f3:e5:a2:17:2d:23:cd:0b:cc:
         6b:aa:7d:4f:9a:09:17:09:1b:b3:5a:bb:fa:74:ff:65:08:59:
         10:66:7e:1f:26:ed:28:f7:51:2a:8b:2c:1b:7b:c6:4c:5f:5c:
         4c:6e:5c:70:4f:e8:54:19:50:4e:99:ec:d4:f4:97:af:62:fa:
         02:51:ac:cb:96:b8:0c:db:64:a4:25:fc:7d:95:be:78:4a:e4:
         18:63:c1:8a:60:c6:ac:76:ca:7f:8f:72:78:2f:6b:fe:5a:f7:
         3e:9a:0e:99:9f:31:0d:59:18:3c:54:81:44:59:c1:30:64:9e:
         2b:c7:a1:86:b2:39:ec:e2:f4:ed:89:34:e8:92:68:e3:b9:2a:
         a3:06:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:13:31 2025 by rpki-client