Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33352e302f32342d3234203d3e20323638303438.roa
File:                     34352e3136382e33352e302f32342d3234203d3e20323638303438.roa (raw, json)
Hash identifier:          JPOKqm/zq7Ir9MqLh7qgsSWKxBBEST2Gqs434bCAFno=
Subject key identifier:   47:A8:CD:49:81:25:C8:F2:24:DC:22:80:A1:7D:D8:BC:F7:7A:48:8C
Certificate issuer:       /CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Certificate serial:       2FE022F92346BF9C01D7286F2CE42CA00B7D31BC
Authority key identifier: 31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33352e302f32342d3234203d3e20323638303438.roa
Signing time:             Mon 24 Apr 2023 23:55:44 +0000
ROA not before:           Mon 24 Apr 2023 23:50:44 +0000
ROA not after:            Mon 22 Apr 2024 23:55:44 +0000
asID:                     268048
IP address blocks:        45.168.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e0:22:f9:23:46:bf:9c:01:d7:28:6f:2c:e4:2c:a0:0b:7d:31:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
        Validity
            Not Before: Apr 24 23:50:44 2023 GMT
            Not After : Apr 22 23:55:44 2024 GMT
        Subject: CN=47A8CD498125C8F224DC2280A17DD8BCF77A488C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:81:91:02:65:4f:c2:21:c8:b4:ef:05:fd:
                    b1:ce:fa:af:76:26:1a:33:b0:23:58:d8:5f:13:21:
                    d7:a4:03:bc:da:b2:3f:89:77:67:08:2b:ed:0b:ff:
                    2a:26:11:cf:73:99:d8:bb:dd:a3:ad:17:67:86:11:
                    81:8d:5b:78:ad:eb:11:39:e2:cf:7a:db:c3:8c:bd:
                    1d:11:c5:eb:93:9e:75:88:08:6b:c1:fc:57:92:f2:
                    36:56:44:b6:bf:68:cd:dc:d9:f4:4c:c6:7c:ee:a0:
                    32:eb:61:be:ae:24:53:3d:dd:60:7d:f9:25:b2:da:
                    61:fc:90:b4:49:fa:17:a6:5d:d6:60:3d:2c:ba:41:
                    11:b8:63:f3:66:47:15:45:ac:67:2a:bf:99:9c:d4:
                    4f:78:ef:cd:38:f2:07:4a:f4:59:5f:2a:02:e0:c6:
                    09:2e:c7:15:02:ad:4f:c3:54:3f:26:c9:36:ef:a3:
                    8a:8a:07:cd:16:35:ca:af:70:a1:9a:f7:80:32:c3:
                    5c:51:dc:2b:19:09:0e:48:93:bf:eb:ed:23:34:54:
                    bd:c0:b2:a2:8d:ea:5c:d7:07:30:ec:b1:29:ec:a4:
                    b0:4c:cb:9b:dc:d9:5e:91:b3:d1:f6:d5:23:67:70:
                    4d:1b:31:fe:80:bf:7b:31:e6:7a:24:a5:10:50:15:
                    80:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A8:CD:49:81:25:C8:F2:24:DC:22:80:A1:7D:D8:BC:F7:7A:48:8C
            X509v3 Authority Key Identifier:
                keyid:31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33352e302f32342d3234203d3e20323638303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:cd:a6:df:8e:ef:e2:d4:49:db:e0:7b:6c:eb:c0:f9:57:21:
         47:eb:7d:7a:62:ee:63:76:d6:ee:c1:1a:b5:54:e9:34:dc:be:
         bd:a9:a4:6a:9a:2e:22:bd:26:b1:5b:2d:7b:80:07:58:db:11:
         c1:93:83:f2:d3:c7:7f:b6:66:72:dd:3a:c5:ec:87:dc:09:db:
         f7:27:a2:ad:1c:78:81:af:a1:47:48:69:62:eb:8e:89:d1:02:
         6d:4c:bc:59:6d:9b:4b:08:05:62:8f:6d:a0:dd:11:56:7a:41:
         1a:92:f7:d4:da:55:37:c7:95:b5:04:e9:6a:da:4b:fa:0c:f7:
         50:d4:93:41:56:47:8a:ee:a2:4a:6e:ac:55:83:e0:86:a9:1b:
         61:14:2d:e7:a9:41:c0:bc:f8:cb:98:4b:83:72:e6:da:74:31:
         af:e7:b9:c5:56:48:bf:5a:1c:e0:0b:e5:de:a5:41:78:54:0d:
         3a:a0:bf:16:e8:56:7c:d3:54:d2:cb:9e:3f:76:03:07:b2:64:
         ac:8f:84:c9:bf:e3:34:b4:4b:aa:e0:5a:b2:42:04:1e:8b:54:
         c5:40:c1:df:0b:e8:44:40:68:1c:c4:be:bc:e9:43:70:f3:29:
         a2:05:c9:3a:6c:d3:ef:aa:89:e1:2b:20:67:56:a2:f1:3e:01:
         b6:ca:5b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:46 2025 by rpki-client