Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa
File:                     34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          ZPoQ4VXW3dYF9yXmH0RdBQe1iLCTPJZbqYHdNjq7SiU=
Subject key identifier:   31:D4:AC:19:68:57:F1:33:48:BA:34:6C:BA:0C:DE:E4:DA:36:0B:E9
Certificate issuer:       /CN=FF0A9222DC08A63B5F325E52AF79B0BB4820EA45
Certificate serial:       3BFF7BF76799D4E11273A7523661585D04CAA18B
Authority key identifier: FF:0A:92:22:DC:08:A6:3B:5F:32:5E:52:AF:79:B0:BB:48:20:EA:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa
Signing time:             Thu 25 Jul 2024 13:18:00 +0000
ROA not before:           Thu 25 Jul 2024 13:13:00 +0000
ROA not after:            Thu 24 Jul 2025 13:18:00 +0000
asID:                     268786
IP address blocks:        45.172.168.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ff:7b:f7:67:99:d4:e1:12:73:a7:52:36:61:58:5d:04:ca:a1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF0A9222DC08A63B5F325E52AF79B0BB4820EA45
        Validity
            Not Before: Jul 25 13:13:00 2024 GMT
            Not After : Jul 24 13:18:00 2025 GMT
        Subject: CN=31D4AC196857F13348BA346CBA0CDEE4DA360BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:78:7d:29:59:a9:98:0d:79:bc:4c:16:ec:
                    3b:61:bc:35:58:38:34:36:74:95:00:07:b8:2d:a5:
                    06:da:a2:87:56:c6:f0:16:2b:11:7a:38:96:a9:09:
                    fb:da:a9:b9:06:f2:f7:57:f1:9c:36:60:02:f7:bc:
                    06:31:89:a6:53:89:74:69:44:6e:19:a8:d8:ef:95:
                    20:61:f3:fc:e8:46:90:b3:d8:cb:1c:99:5b:09:c3:
                    5b:56:72:9b:89:87:2d:19:8c:5e:4c:2b:e1:4b:d4:
                    50:ae:a9:06:98:dd:8f:c2:f5:5c:c7:f3:0f:91:0a:
                    53:c3:6d:23:a0:20:39:79:cd:50:56:58:57:83:38:
                    eb:64:fa:a6:53:e2:64:f9:4b:0e:e3:69:09:59:ed:
                    a3:8c:80:06:67:1b:fc:5d:6a:29:63:15:93:62:4b:
                    48:dd:f5:92:b1:ba:8d:f5:e3:5d:4e:b5:d3:a0:d1:
                    94:09:38:59:23:7e:4d:2e:f0:22:72:ad:61:57:bd:
                    0e:af:28:a4:09:af:60:2c:ea:ce:fd:12:0b:75:19:
                    9e:48:4c:86:c9:4f:fd:0e:78:06:f3:e8:b0:9a:27:
                    fe:17:43:34:b7:39:dd:9e:ff:87:d8:b7:68:c9:28:
                    ba:f9:c4:32:e9:19:20:f3:7f:37:10:24:b3:80:e5:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D4:AC:19:68:57:F1:33:48:BA:34:6C:BA:0C:DE:E4:DA:36:0B:E9
            X509v3 Authority Key Identifier:
                keyid:FF:0A:92:22:DC:08:A6:3B:5F:32:5E:52:AF:79:B0:BB:48:20:EA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:5a:99:86:0a:a1:a9:0c:17:fe:78:9f:73:8d:2c:66:da:86:
         76:45:de:07:c8:d6:90:f6:89:d2:f7:b7:c4:00:6f:41:93:d0:
         35:bf:72:1a:24:33:b7:ee:5a:0a:4c:0a:93:e6:f2:79:29:88:
         38:2e:4a:4a:3d:81:b7:d7:6a:d8:5b:d0:3f:07:ff:ee:23:28:
         e7:68:a7:6c:18:a0:51:a7:53:0d:95:5b:e3:df:36:a0:75:72:
         40:27:0d:ea:75:03:96:cb:d3:40:5c:5b:29:ae:dc:a9:8c:f5:
         70:af:44:ef:e1:c7:8f:b2:6d:38:57:82:cc:53:4b:fa:b8:b0:
         87:f8:1c:93:e5:ce:52:f3:19:4e:89:0d:44:56:5f:6e:73:83:
         aa:74:20:bc:16:83:01:63:0d:08:88:96:2a:75:56:ab:e0:1b:
         46:7c:c0:a1:5b:2d:9f:f0:7e:d4:c8:f8:1e:6e:d1:49:5f:4f:
         48:6f:63:35:3e:52:fa:fb:38:aa:7c:ec:73:3a:c7:14:44:32:
         bc:83:a5:11:82:30:91:29:e2:8a:c4:b5:9b:38:3e:62:63:b3:
         d4:55:a2:75:d6:4d:dc:f3:ac:b6:d1:c5:56:7e:94:1d:70:0b:
         25:19:bb:e5:76:2d:96:c2:b4:87:d2:84:e4:38:2c:4a:ce:1f:
         10:f6:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:24:46 2025 by rpki-client