Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa
File:                     34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa (raw, json)
Hash identifier:          L1J2AQO3umKQSL1X2fIVFhOnjlcSHfn8voQBHxF3bwo=
Subject key identifier:   4C:0D:A3:05:08:13:D1:EB:B3:DD:D5:29:88:25:23:AB:AE:0B:9C:AD
Certificate issuer:       /CN=CF379C33C6F2A3F1FE233FA08798E303EA48C221
Certificate serial:       3A130EE6E83A8871243085F94350857C8DF35491
Authority key identifier: CF:37:9C:33:C6:F2:A3:F1:FE:23:3F:A0:87:98:E3:03:EA:48:C2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF379C33C6F2A3F1FE233FA08798E303EA48C221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa
Signing time:             Tue 09 Aug 2022 23:36:56 +0000
ROA not before:           Tue 09 Aug 2022 23:31:56 +0000
ROA not after:            Tue 08 Aug 2023 23:36:56 +0000
asID:                     269183
IP address blocks:        45.181.108.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:13:0e:e6:e8:3a:88:71:24:30:85:f9:43:50:85:7c:8d:f3:54:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF379C33C6F2A3F1FE233FA08798E303EA48C221
        Validity
            Not Before: Aug  9 23:31:56 2022 GMT
            Not After : Aug  8 23:36:56 2023 GMT
        Subject: CN=4C0DA3050813D1EBB3DDD529882523ABAE0B9CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:72:15:3f:e7:42:4d:1c:97:ef:32:57:67:
                    87:d9:bd:a1:6c:9c:df:0c:16:e6:0a:6c:d0:cc:05:
                    a8:5d:02:74:34:b3:1c:26:13:c4:82:c9:ee:fa:12:
                    88:b7:4c:c8:f7:e4:6a:84:c0:7f:5c:a4:69:28:27:
                    a9:74:40:26:4f:0f:8d:f9:a5:99:13:c3:75:cb:cf:
                    6d:5a:bd:d6:e6:56:87:96:f1:c3:b4:64:29:8d:65:
                    3a:fe:d0:5f:60:5e:0e:25:2a:d1:72:d4:09:4a:14:
                    d1:8d:a6:d8:74:30:af:88:8d:64:6f:87:27:5c:65:
                    16:0e:0c:d4:74:71:7b:56:0d:c5:23:d8:4c:16:e7:
                    3e:c2:b8:fe:8c:07:61:25:b8:d0:28:c8:7e:dd:c6:
                    df:5c:2c:9c:00:b0:09:db:c8:d7:08:09:f5:18:bd:
                    aa:a5:6b:33:b1:c8:8c:f1:90:58:35:ff:ef:4a:27:
                    a1:e5:ed:0c:cd:9c:0a:12:2e:52:9d:a6:90:9e:7c:
                    45:e7:81:7b:e9:9f:4b:14:ca:4c:56:24:e9:30:50:
                    a8:29:46:48:37:fd:86:bd:9c:8b:d1:41:22:0e:1e:
                    39:a7:a6:06:0e:68:a5:58:42:5f:98:9a:a1:28:51:
                    03:0d:63:de:94:f5:c1:85:95:05:d1:5f:b3:15:57:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0D:A3:05:08:13:D1:EB:B3:DD:D5:29:88:25:23:AB:AE:0B:9C:AD
            X509v3 Authority Key Identifier:
                keyid:CF:37:9C:33:C6:F2:A3:F1:FE:23:3F:A0:87:98:E3:03:EA:48:C2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/CF379C33C6F2A3F1FE233FA08798E303EA48C221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF379C33C6F2A3F1FE233FA08798E303EA48C221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:d3:1c:2d:c3:67:54:c2:46:b6:be:3f:dc:e4:0f:9e:40:03:
         72:85:b2:5b:c6:8b:5a:c0:ff:74:d0:66:6c:e5:dc:d9:34:f0:
         f3:75:11:c3:74:b5:6f:fb:89:84:1c:a3:d1:cc:e4:df:45:64:
         e1:28:af:b8:85:c1:85:fc:cd:55:b9:41:b9:ac:4d:50:a0:d3:
         40:b1:ed:a3:c7:4c:0c:dd:b2:be:15:e1:54:35:86:7b:ea:c6:
         7c:45:52:ae:87:fb:78:4a:a4:21:f2:55:aa:00:82:48:d3:5b:
         38:7c:dd:77:6f:2e:eb:f5:02:93:e6:cd:e5:2b:0d:10:b4:4e:
         10:66:43:ce:10:99:bd:46:df:fe:46:dd:8e:e7:f1:3c:5a:29:
         f4:71:6c:ec:8b:71:57:9a:27:ed:3f:98:0e:d6:4e:49:cc:b3:
         73:28:fa:3e:c0:9b:c0:65:7e:b3:15:97:e8:2b:30:fd:3a:f2:
         cd:95:3f:7e:47:4f:6d:c4:08:75:84:8e:52:a0:fd:12:7c:83:
         9d:52:e1:42:b1:f7:7a:62:28:48:af:d6:94:64:c1:0e:7a:f4:
         b6:51:aa:80:76:bb:f4:16:22:16:60:bd:1a:b2:a0:be:17:33:
         9d:d0:50:44:1d:2f:83:93:81:b7:b6:c8:ea:73:0f:40:3b:2c:
         2a:8c:76:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:59 2025 by rpki-client