Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31322e302f32322d3232203d3e20323638383734.roa
File:                     34352e3137352e31322e302f32322d3232203d3e20323638383734.roa (raw, json)
Hash identifier:          Zupo1WxUS1BQGJhdTrqCMSbVBYw+wpbPw4ReTtq1bpA=
Subject key identifier:   59:C2:C5:C1:26:08:26:BD:57:35:80:F4:51:66:41:71:7F:6B:E8:47
Certificate issuer:       /CN=8AF8BCFB5020364BB44D6951343DC3B09C3E72A6
Certificate serial:       30AFA522DE8910F4D0979182C75905D869DA6979
Authority key identifier: 8A:F8:BC:FB:50:20:36:4B:B4:4D:69:51:34:3D:C3:B0:9C:3E:72:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AF8BCFB5020364BB44D6951343DC3B09C3E72A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31322e302f32322d3232203d3e20323638383734.roa
Signing time:             Thu 19 May 2022 15:29:26 +0000
ROA not before:           Thu 19 May 2022 15:24:26 +0000
ROA not after:            Thu 18 May 2023 15:29:26 +0000
asID:                     268874
IP address blocks:        45.175.12.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:af:a5:22:de:89:10:f4:d0:97:91:82:c7:59:05:d8:69:da:69:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AF8BCFB5020364BB44D6951343DC3B09C3E72A6
        Validity
            Not Before: May 19 15:24:26 2022 GMT
            Not After : May 18 15:29:26 2023 GMT
        Subject: CN=59C2C5C1260826BD573580F4516641717F6BE847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:f8:3a:4a:3f:68:83:2f:0a:b5:df:07:2d:
                    00:a1:2d:27:e6:ed:3b:3c:ba:4c:4e:55:24:d5:14:
                    ab:f4:bb:d3:40:f2:8c:4c:df:e2:bf:55:12:32:46:
                    af:80:0f:82:72:3c:63:37:d0:15:78:6d:4b:89:47:
                    a6:a8:4b:01:6d:00:82:a2:cd:1c:a8:44:67:ad:cb:
                    82:39:74:bc:77:a9:ce:1e:6f:7b:e8:cd:1e:4e:25:
                    01:f6:4f:6a:77:2f:12:d1:f1:31:8d:e5:4b:38:ac:
                    09:52:83:bd:13:48:a2:11:ed:46:81:f4:6f:ef:85:
                    8a:8c:65:6f:9d:61:ee:07:cd:e9:69:64:03:29:56:
                    54:cd:6a:0a:a4:34:2c:07:3a:3e:1d:86:ac:d3:65:
                    65:55:cc:03:ee:b9:aa:ab:6e:12:f1:e1:12:59:db:
                    3d:f0:a4:d2:ba:78:c7:d4:48:d7:60:06:01:1a:1a:
                    d8:bc:a5:42:68:5a:de:3c:4a:49:b2:51:2a:9d:a8:
                    59:b3:cd:0c:a5:6d:46:d1:43:15:43:5f:73:a5:0d:
                    8b:cd:b7:bb:8c:ca:6f:f4:6f:38:8d:58:50:e5:cd:
                    f3:cd:e0:39:e0:c7:9f:de:3c:06:d2:34:77:3b:d0:
                    1b:81:a5:88:51:9e:89:11:18:1b:da:ee:48:46:6c:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C2:C5:C1:26:08:26:BD:57:35:80:F4:51:66:41:71:7F:6B:E8:47
            X509v3 Authority Key Identifier:
                keyid:8A:F8:BC:FB:50:20:36:4B:B4:4D:69:51:34:3D:C3:B0:9C:3E:72:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/8AF8BCFB5020364BB44D6951343DC3B09C3E72A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AF8BCFB5020364BB44D6951343DC3B09C3E72A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31322e302f32322d3232203d3e20323638383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:38:7f:1f:50:bc:89:08:98:db:8f:ec:6e:f4:02:e2:3d:5d:
         9e:2e:e9:26:aa:43:4a:84:90:9e:74:e6:5a:3f:fc:64:91:cc:
         53:55:30:54:24:ee:b5:21:ba:2c:2d:58:39:a9:f0:76:86:3b:
         23:e6:2c:01:0e:62:9b:b8:84:05:c6:a3:29:3f:1b:c3:75:eb:
         b2:97:55:d5:ff:9f:d1:b3:b2:18:8f:55:a3:fa:0b:82:6d:0a:
         22:f1:92:4a:a4:e6:63:5b:2a:a7:52:a3:dd:93:a9:3c:a4:b5:
         3d:07:1e:3d:39:ed:f4:a0:e3:9e:41:e1:fc:64:af:e0:30:8e:
         4c:30:7d:de:b2:0e:a3:4a:e3:1a:4e:ea:55:d5:66:be:02:0f:
         b9:53:e3:39:79:8b:51:15:7c:ee:84:f6:c1:59:0a:78:ff:46:
         4f:48:63:77:f2:4e:3a:09:ad:0b:03:ef:88:37:1b:56:07:22:
         f1:25:1a:51:70:a7:e7:1f:54:25:1e:23:74:5e:94:b7:cd:fa:
         9d:0b:53:89:6f:d9:4a:61:71:e8:29:c6:49:00:b9:25:02:fb:
         8a:6f:8a:2b:ec:76:f4:18:4f:69:02:59:77:af:cc:0d:c9:dc:
         3c:6d:1a:1e:63:e4:90:c1:ca:f3:0c:21:55:03:63:24:c4:ab:
         1d:b5:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:53 2025 by rpki-client