Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa
File:                     34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa (raw, json)
Hash identifier:          IG/dsm7YOTGIfzbT8oJukrIoLMCzUI6hdwTOJviuhHs=
Subject key identifier:   31:74:F7:CC:DA:DA:8E:DD:3B:69:8E:6B:91:58:B0:E8:34:60:C4:BA
Certificate issuer:       /CN=7DDD1BAC7F4B720D346ADC0831C599B7146A832A
Certificate serial:       0D3B1DA4C37B3555CB59FFD1B348D87BBD6BC91A
Authority key identifier: 7D:DD:1B:AC:7F:4B:72:0D:34:6A:DC:08:31:C5:99:B7:14:6A:83:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa
Signing time:             Mon 23 Jan 2023 17:55:23 +0000
ROA not before:           Mon 23 Jan 2023 17:50:23 +0000
ROA not after:            Mon 22 Jan 2024 17:55:23 +0000
asID:                     268126
IP address blocks:        45.169.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3b:1d:a4:c3:7b:35:55:cb:59:ff:d1:b3:48:d8:7b:bd:6b:c9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DDD1BAC7F4B720D346ADC0831C599B7146A832A
        Validity
            Not Before: Jan 23 17:50:23 2023 GMT
            Not After : Jan 22 17:55:23 2024 GMT
        Subject: CN=3174F7CCDADA8EDD3B698E6B9158B0E83460C4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:70:2d:eb:50:a0:48:ef:63:df:5e:cd:e6:b1:
                    2e:ff:57:c8:ae:e6:7c:68:d2:2c:86:15:03:6b:f8:
                    7c:f2:0b:10:38:62:f3:5e:e9:83:1d:18:6e:9d:fd:
                    72:75:22:1e:b3:b6:15:aa:e6:59:03:61:dd:ab:80:
                    c7:75:af:dc:39:cb:0a:5a:01:e7:b4:0b:e6:27:01:
                    0b:0f:99:4d:1e:ed:a7:a8:7a:4e:65:4e:91:9f:75:
                    eb:c5:79:53:c7:13:f6:1e:e1:59:08:8b:42:91:bc:
                    b5:a4:b3:52:ef:31:2d:90:54:a8:6c:64:59:cd:4e:
                    ee:aa:cf:ed:34:5f:ac:f9:aa:2d:00:b1:d1:ee:4e:
                    87:0e:8c:d3:4f:ec:68:44:e1:f4:7d:04:ab:0e:29:
                    0e:49:57:d3:50:d7:cd:c3:0c:01:6f:d0:aa:f7:81:
                    55:5b:d5:00:c4:ad:06:ee:e0:ef:68:2e:7b:b1:9c:
                    c8:89:a8:a8:e8:ef:25:5c:dd:00:8e:ac:1f:1f:d6:
                    13:0d:00:96:3f:d1:7c:d9:20:4e:5e:a4:8e:45:38:
                    c8:7c:21:35:ff:91:ee:5d:cb:ce:78:96:fa:36:cf:
                    16:69:69:4c:51:eb:74:e6:1d:bf:4a:08:14:b7:7f:
                    a2:64:38:2b:e2:00:90:01:36:f0:d8:82:51:39:78:
                    e9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:74:F7:CC:DA:DA:8E:DD:3B:69:8E:6B:91:58:B0:E8:34:60:C4:BA
            X509v3 Authority Key Identifier:
                keyid:7D:DD:1B:AC:7F:4B:72:0D:34:6A:DC:08:31:C5:99:B7:14:6A:83:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7DDD1BAC7F4B720D346ADC0831C599B7146A832A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:95:ae:44:26:fc:6b:bf:f7:5f:06:04:ca:f2:d3:84:52:25:
         f7:51:be:20:c9:64:da:a3:79:aa:4e:59:d9:9c:a7:b6:6e:2b:
         2c:03:3a:f3:f2:61:42:42:fa:78:07:66:7c:3a:9e:5e:1c:16:
         e7:2a:97:8e:ad:52:a8:24:13:60:f7:ee:31:96:6a:48:c8:9c:
         e2:ce:40:43:24:74:6a:aa:2c:8f:93:f3:98:b4:16:9e:26:fd:
         5f:d9:af:fc:b8:77:7d:fd:33:26:71:8a:95:69:53:77:d6:63:
         a6:22:3d:ea:fc:50:3e:48:ad:0d:d6:8c:6c:c6:ad:a8:9b:df:
         50:77:71:78:95:32:28:21:08:5a:36:2b:82:da:87:ff:4a:97:
         09:c1:02:37:2e:14:6d:66:f6:7f:74:3c:cf:a0:00:b7:41:7c:
         f0:eb:1c:e4:be:2d:ac:a7:79:7e:10:23:ec:68:c5:36:68:45:
         4b:97:ff:de:52:ba:65:1b:9a:11:56:f7:73:49:10:97:ab:f5:
         a6:d1:2c:29:c7:44:5c:64:fa:de:9c:e4:e4:6d:ac:07:aa:49:
         4a:af:77:63:14:01:4c:28:dc:cd:e7:ba:df:db:ca:b8:fc:41:
         3c:cb:7c:80:a3:c6:bd:d0:ba:85:83:22:5f:d1:af:99:a2:3c:
         51:dd:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:13:29 2025 by rpki-client