Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0/34352e3233322e38302e302f32322d3234203d3e20323637323537.roa
File:                     34352e3233322e38302e302f32322d3234203d3e20323637323537.roa (raw, json)
Hash identifier:          UxbN9KXVnNIcCHJQGE4U0sdmFx5NdqbVZzL1PMivu+0=
Subject key identifier:   0F:F3:7D:28:C7:CA:C5:0F:60:8E:7D:30:35:9E:BF:AA:D1:88:09:D4
Certificate issuer:       /CN=3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60
Certificate serial:       550A1A541AFA1D8A4B8D91922094AFA6197F5EEB
Authority key identifier: 3C:48:AD:61:EB:20:DD:DA:BB:33:B6:FA:4C:1B:F5:3D:8B:E5:CD:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0/34352e3233322e38302e302f32322d3234203d3e20323637323537.roa
Signing time:             Mon 12 Sep 2022 14:33:48 +0000
ROA not before:           Mon 12 Sep 2022 14:28:48 +0000
ROA not after:            Mon 11 Sep 2023 14:33:48 +0000
asID:                     267257
IP address blocks:        45.232.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0a:1a:54:1a:fa:1d:8a:4b:8d:91:92:20:94:af:a6:19:7f:5e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60
        Validity
            Not Before: Sep 12 14:28:48 2022 GMT
            Not After : Sep 11 14:33:48 2023 GMT
        Subject: CN=0FF37D28C7CAC50F608E7D30359EBFAAD18809D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:45:2d:cd:96:5f:4d:f1:6e:67:be:39:eb:
                    6d:f3:3a:35:7e:b9:d6:5c:5e:b2:4e:8a:4c:87:d8:
                    3e:fb:b7:4a:e6:dc:d0:f4:5e:94:c8:00:c5:f0:68:
                    a5:e2:d4:38:41:e2:ad:6e:9d:71:fe:86:71:40:24:
                    29:67:5a:da:1f:8e:9b:11:e9:c9:97:9f:4d:b1:26:
                    39:a0:57:c9:e4:94:0b:48:51:c8:f2:72:ea:50:ff:
                    a1:cb:ba:fc:5e:4e:2f:ba:44:76:0d:59:d6:34:31:
                    f1:58:0b:d5:5e:3b:fe:4d:8b:5b:25:d7:57:2d:99:
                    d5:89:9b:bc:0c:89:23:74:17:4d:e4:9e:6d:57:17:
                    4d:04:0f:b2:4d:fd:a5:44:e9:06:25:91:8a:e3:d3:
                    1d:6b:81:f4:87:4b:20:1f:cc:55:81:dd:9a:7c:0d:
                    c2:f6:ad:86:36:01:70:0c:b9:39:8f:f9:5d:75:b8:
                    fc:0f:5a:6e:b5:af:ff:83:f6:0e:b9:ef:83:21:14:
                    6d:15:62:44:5e:25:d7:95:da:04:55:04:2e:72:85:
                    a0:f8:4d:b6:43:7c:e9:c1:21:53:ac:76:9c:21:e9:
                    17:d9:c9:48:d9:38:5f:93:8e:72:ab:c7:83:9a:39:
                    7b:bf:c0:d9:66:18:f4:4c:4d:95:4a:7a:07:08:ac:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F3:7D:28:C7:CA:C5:0F:60:8E:7D:30:35:9E:BF:AA:D1:88:09:D4
            X509v3 Authority Key Identifier:
                keyid:3C:48:AD:61:EB:20:DD:DA:BB:33:B6:FA:4C:1B:F5:3D:8B:E5:CD:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0/3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C48AD61EB20DDDABB33B6FA4C1BF53D8BE5CD60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/0/34352e3233322e38302e302f32322d3234203d3e20323637323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:8a:76:fb:00:14:35:7c:f3:b1:db:58:c6:e5:78:05:07:
         d7:9e:97:35:21:ac:60:cd:42:08:41:76:98:72:1b:eb:70:6d:
         b7:fc:d1:9a:af:a5:58:c3:f2:2f:8b:1d:25:33:66:7a:20:c7:
         f8:37:fb:dc:5c:74:70:49:88:3b:3c:84:8f:b2:cf:b5:b5:9d:
         f2:d0:10:4b:f3:58:2d:74:50:45:4c:d2:2c:db:b6:1b:93:02:
         77:9f:72:f2:53:a2:c8:33:58:82:c6:d5:01:ea:eb:2d:ea:8c:
         9b:52:c7:5b:2b:f0:15:5f:de:d3:c9:06:fe:1d:de:cd:21:20:
         d7:04:37:e5:66:71:97:6e:a2:f1:0b:ab:53:81:0d:46:47:9c:
         12:9a:90:67:75:43:cd:c4:01:a3:92:b4:86:d4:fb:c8:35:ff:
         e2:a0:20:b5:ee:7a:ec:4d:f6:7d:22:40:fd:d4:ac:e8:da:60:
         fc:ae:ba:dc:bd:04:ab:3e:14:a9:98:97:55:fd:b6:8c:cd:58:
         34:32:fd:98:98:fa:70:a7:57:e1:b4:e6:8c:2a:06:5a:ed:d9:
         9e:88:77:dc:ca:fb:59:1d:e1:c7:16:e4:ee:4b:57:3e:79:e6:
         4a:99:08:71:af:6a:21:12:c3:a5:67:f6:3c:3c:f0:63:8c:00:
         83:82:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:28 2025 by rpki-client