Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232382e302f32332d3233203d3e20323632363137.roa
File:                     34352e36352e3232382e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          ypywyZ4usLX6iNqkSt3uZkL3xgHLMwEpM42ddYajoxI=
Subject key identifier:   22:FF:33:F2:48:51:52:1A:BD:91:FB:84:00:25:41:E9:76:AF:EC:79
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       44313219869134567E8F058FA0995C94A92FDCA9
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232382e302f32332d3233203d3e20323632363137.roa
Signing time:             Thu 06 Mar 2025 18:36:37 +0000
ROA not before:           Thu 06 Mar 2025 18:31:37 +0000
ROA not after:            Thu 05 Mar 2026 18:36:37 +0000
asID:                     262617
IP address blocks:        45.65.228.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:31:32:19:86:91:34:56:7e:8f:05:8f:a0:99:5c:94:a9:2f:dc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Mar  6 18:31:37 2025 GMT
            Not After : Mar  5 18:36:37 2026 GMT
        Subject: CN=22FF33F24851521ABD91FB84002541E976AFEC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:92:a0:b1:1b:8e:d5:9b:de:21:fc:c9:0d:fb:
                    50:f2:ae:06:2a:aa:f1:a7:4f:c3:74:0e:66:b7:e7:
                    d0:a5:5c:db:ea:e3:db:ab:a3:53:01:93:3a:7e:e0:
                    39:0b:50:9a:f4:8c:b4:0b:46:2c:56:70:6a:73:18:
                    53:97:d2:15:ec:9a:19:03:05:c0:c6:9b:2b:54:ab:
                    0e:d9:8c:c6:a1:f1:7d:1f:d9:1d:91:2b:7b:54:fd:
                    e1:11:0c:a1:b2:cd:8a:9a:5f:af:60:19:23:0e:38:
                    bb:dd:c9:c9:83:21:51:44:41:b5:a8:cb:68:e9:bc:
                    8e:93:0a:fe:26:ec:6b:35:9b:29:c9:4c:24:10:34:
                    db:b5:d4:88:b7:e6:b8:b0:ac:ec:6a:68:7b:c6:e2:
                    45:db:13:79:3a:42:13:84:10:55:28:e0:7e:c3:d6:
                    15:01:57:3f:20:ed:29:ab:03:4b:43:9c:24:c9:8d:
                    d2:ae:2e:89:f1:8b:51:76:ee:07:cf:0e:9f:56:f6:
                    71:26:1a:b0:f2:1f:c1:64:67:da:c3:0f:8d:5d:26:
                    f8:91:eb:7b:5c:01:20:84:54:0e:a6:4b:05:f2:2f:
                    73:68:07:cc:88:e5:94:2f:04:23:5d:c1:27:9f:15:
                    5b:3d:04:00:64:3d:a4:fc:c3:78:04:d6:9e:23:3e:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FF:33:F2:48:51:52:1A:BD:91:FB:84:00:25:41:E9:76:AF:EC:79
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232382e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:85:02:b2:ad:f2:21:f7:5c:f5:c1:c3:48:65:5a:91:ce:40:
         54:cc:3f:7d:d7:fc:89:9c:33:a3:19:1a:c2:b7:c4:38:aa:19:
         4c:79:42:6a:3d:2c:16:58:ee:22:f8:8a:29:eb:a1:ca:79:06:
         f8:65:55:d3:7f:4f:ef:a4:7b:07:04:d3:3e:c6:b5:df:ca:7f:
         77:12:66:66:4a:34:61:2e:1d:cf:41:a2:ed:fa:c5:92:47:b8:
         90:9b:46:9e:ec:ad:41:fa:d1:f5:ec:9c:61:d3:d7:e6:96:df:
         3e:ef:13:3d:50:b8:09:ae:80:06:f9:8e:22:49:1b:4b:44:af:
         06:29:89:b5:50:59:1c:a0:3a:f5:73:ca:1d:d9:f1:35:37:2e:
         39:35:4b:3e:9d:8f:ac:09:42:69:51:24:4e:98:af:85:97:b8:
         4b:0d:e0:dd:2a:ab:cf:7a:87:cd:0e:e5:37:d6:60:bf:b2:ba:
         0f:d2:e6:f1:15:25:1b:de:07:cf:ad:67:f3:52:33:8e:91:18:
         90:44:6d:3c:8d:66:dd:35:22:73:f0:ae:21:47:5d:b5:c5:ee:
         43:d5:b1:d6:45:7f:8e:0c:4c:9e:cf:3a:e7:59:92:c1:ed:be:
         04:4c:8e:ee:03:01:8b:68:98:8b:c5:5b:b7:f1:b5:ed:d3:41:
         df:21:5d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:11:51 2025 by rpki-client