Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xyAf3Q8t6bMbDSE7DE8DT7ZhMatqajJzR9ZtLTw3ivk/0/34352e3232382e3234382e302f32322d3234203d3e20323637313236.roa
File:                     34352e3232382e3234382e302f32322d3234203d3e20323637313236.roa (raw, json)
Hash identifier:          0tqR9b+ZlO+T+7uwWf4B14xN+ZFR5e4r5kpnc1ywpEA=
Subject key identifier:   96:F2:1C:8C:50:A9:5E:34:AA:58:4D:5F:61:83:7E:1B:2C:C1:09:48
Certificate issuer:       /CN=CCF35307850A3B058CB4A267F929B8ECBB33CBE3
Certificate serial:       3D92E723F3C03BD6479967849656DD39770DE28F
Authority key identifier: CC:F3:53:07:85:0A:3B:05:8C:B4:A2:67:F9:29:B8:EC:BB:33:CB:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CCF35307850A3B058CB4A267F929B8ECBB33CBE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xyAf3Q8t6bMbDSE7DE8DT7ZhMatqajJzR9ZtLTw3ivk/0/34352e3232382e3234382e302f32322d3234203d3e20323637313236.roa
Signing time:             Fri 05 May 2023 18:20:11 +0000
ROA not before:           Fri 05 May 2023 18:15:11 +0000
ROA not after:            Fri 03 May 2024 18:20:11 +0000
asID:                     267126
IP address blocks:        45.228.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:92:e7:23:f3:c0:3b:d6:47:99:67:84:96:56:dd:39:77:0d:e2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF35307850A3B058CB4A267F929B8ECBB33CBE3
        Validity
            Not Before: May  5 18:15:11 2023 GMT
            Not After : May  3 18:20:11 2024 GMT
        Subject: CN=96F21C8C50A95E34AA584D5F61837E1B2CC10948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:42:90:1d:02:17:84:55:69:81:84:d6:9d:
                    4e:54:4a:31:fa:42:d3:da:98:a8:3a:8b:89:f1:0f:
                    c2:f7:45:03:06:71:1f:d8:98:e4:41:74:39:86:70:
                    2e:4d:07:bd:09:ae:a3:c2:d1:90:c8:40:0c:96:24:
                    7d:8f:1e:7a:2b:7c:06:c1:27:bb:bf:f2:48:31:ba:
                    2a:ab:db:c0:c4:c2:06:08:20:e2:8f:12:3f:e1:42:
                    d6:a1:65:67:f4:eb:af:d6:68:af:37:4d:f6:c8:19:
                    ec:3a:ea:10:2b:26:d9:e9:0f:f9:27:42:c6:39:98:
                    5e:87:be:c4:3b:b1:a2:5f:5c:8e:f1:60:82:f9:c3:
                    b6:c8:11:8b:37:36:20:3c:d8:ca:10:f4:93:2c:db:
                    62:76:13:ec:4a:2b:f1:a1:11:39:ae:37:ad:e8:05:
                    2b:16:c9:dc:ae:6e:f3:4a:7d:67:87:9f:72:ef:07:
                    47:39:19:fb:3a:36:2a:f9:e5:eb:24:9f:9c:c2:55:
                    2c:2b:e3:e7:cd:1d:30:b4:0c:ff:5a:8d:11:b1:3f:
                    20:66:99:df:11:64:d5:6f:4f:68:e3:e4:36:42:33:
                    f1:2c:c7:a0:33:5d:a0:75:e5:d0:80:ef:0f:d5:e7:
                    dd:74:c1:15:5e:ea:30:65:87:d3:d6:6f:84:fe:02:
                    c3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F2:1C:8C:50:A9:5E:34:AA:58:4D:5F:61:83:7E:1B:2C:C1:09:48
            X509v3 Authority Key Identifier:
                keyid:CC:F3:53:07:85:0A:3B:05:8C:B4:A2:67:F9:29:B8:EC:BB:33:CB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xyAf3Q8t6bMbDSE7DE8DT7ZhMatqajJzR9ZtLTw3ivk/0/CCF35307850A3B058CB4A267F929B8ECBB33CBE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CCF35307850A3B058CB4A267F929B8ECBB33CBE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xyAf3Q8t6bMbDSE7DE8DT7ZhMatqajJzR9ZtLTw3ivk/0/34352e3232382e3234382e302f32322d3234203d3e20323637313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:e8:80:f0:18:6f:a5:81:f8:13:a9:a2:ac:05:5a:34:ad:
         57:f6:56:c9:b5:68:5e:b2:b5:55:5b:32:23:b2:4c:c1:d3:f5:
         6f:0c:c4:79:d1:62:bf:97:d2:e9:a0:95:cb:cc:fe:97:94:85:
         3e:73:0d:52:c6:0e:78:a6:11:9e:4e:37:17:7d:6e:34:59:b1:
         b1:ee:74:e9:49:20:96:ab:28:59:7f:a4:c1:52:ed:50:78:a9:
         c8:ca:7a:ae:50:d6:58:26:da:b4:58:c5:cd:82:de:4a:56:2c:
         f9:91:4b:18:dd:bc:08:cf:ce:47:74:11:bb:35:5f:10:53:09:
         21:a4:4f:51:95:47:7b:21:a9:81:49:61:84:77:7b:e4:93:7e:
         ee:55:00:d9:89:4e:73:60:87:b5:f0:70:c0:82:a5:60:a4:73:
         a6:f4:cd:9d:ea:46:13:d2:f8:f7:47:38:5f:9f:2d:36:9a:b0:
         cc:19:9d:28:31:6a:b3:de:d0:91:20:c2:6f:b5:42:e6:43:ae:
         cd:a5:4e:69:92:32:9c:4d:63:d4:0d:98:57:ae:2d:bb:35:59:
         2e:df:cf:18:dc:43:d7:4b:45:7f:1c:65:d5:56:e5:70:02:42:
         c2:7b:95:c1:3e:29:29:d9:78:d7:51:6e:76:46:3e:3b:db:60:
         7d:da:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:32 2025 by rpki-client