Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/34352e3232352e3233362e302f32322d3234203d3e20323634303733.roa
File:                     34352e3232352e3233362e302f32322d3234203d3e20323634303733.roa (raw, json)
Hash identifier:          jroKYzFjpj6b3T4dydxqgM8RZUg8V8VJpAzAuy68qVw=
Subject key identifier:   92:36:4A:E0:14:81:12:4A:7F:17:2A:0F:42:9C:AA:B3:5C:CE:1C:45
Certificate issuer:       /CN=2020E4386470854F498B76284D60EBE5CCB3BE98
Certificate serial:       3144B230F8F00244EF1F0AC2B5223136AE993C1B
Authority key identifier: 20:20:E4:38:64:70:85:4F:49:8B:76:28:4D:60:EB:E5:CC:B3:BE:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2020E4386470854F498B76284D60EBE5CCB3BE98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/34352e3232352e3233362e302f32322d3234203d3e20323634303733.roa
Signing time:             Tue 07 Jun 2022 19:00:00 +0000
ROA not before:           Tue 07 Jun 2022 18:55:00 +0000
ROA not after:            Wed 07 Jun 2023 19:00:00 +0000
asID:                     264073
IP address blocks:        45.225.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:44:b2:30:f8:f0:02:44:ef:1f:0a:c2:b5:22:31:36:ae:99:3c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2020E4386470854F498B76284D60EBE5CCB3BE98
        Validity
            Not Before: Jun  7 18:55:00 2022 GMT
            Not After : Jun  7 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4e:e7:c0:2d:77:02:c2:a6:25:b2:c0:3a:c6:
                    d7:2d:ac:33:48:17:12:50:da:75:0f:10:95:42:41:
                    c9:55:c5:e4:dd:93:4d:81:f3:6d:99:7e:72:87:94:
                    65:8a:13:c2:b9:22:26:d1:29:81:cf:23:99:50:91:
                    53:bb:93:6a:f8:7e:14:84:e1:e7:65:9b:da:59:d5:
                    6f:ee:42:7a:51:dd:1d:36:0b:28:04:52:b0:20:52:
                    dd:ed:49:42:b1:02:b2:92:0d:3d:2f:40:13:55:30:
                    8d:62:72:33:19:37:e2:8e:7f:36:eb:85:ce:a2:91:
                    71:8b:4d:ab:e5:42:8f:93:60:31:6b:9c:23:02:e1:
                    d0:ae:d5:d6:c7:2e:48:10:c9:8e:e4:57:63:5e:c3:
                    a0:1f:fb:17:a8:58:e1:12:cb:ac:98:82:32:d8:ed:
                    98:e9:ae:a6:24:a4:aa:56:34:06:f5:58:4f:33:ff:
                    bf:2b:10:fc:88:ff:e4:90:ee:3e:e7:6f:e9:4a:db:
                    40:33:e8:60:48:f6:7a:51:8b:d5:f3:71:0b:80:a3:
                    3d:79:12:1e:50:f8:f3:b0:b5:d6:4f:2b:39:23:c0:
                    4a:3b:1f:da:2a:f7:2f:63:47:bd:a5:d1:dc:8c:a3:
                    46:5d:8f:a6:05:8a:c6:cc:da:93:83:8f:0a:13:48:
                    60:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:36:4A:E0:14:81:12:4A:7F:17:2A:0F:42:9C:AA:B3:5C:CE:1C:45
            X509v3 Authority Key Identifier:
                keyid:20:20:E4:38:64:70:85:4F:49:8B:76:28:4D:60:EB:E5:CC:B3:BE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/2020E4386470854F498B76284D60EBE5CCB3BE98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2020E4386470854F498B76284D60EBE5CCB3BE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vTL6bwuZNcMovGBHY7VqvCgpHmehuyw8jFvmwSc2q3v/0/34352e3232352e3233362e302f32322d3234203d3e20323634303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:21:fd:b2:84:a7:8f:94:a6:89:9d:25:a4:60:d5:29:41:af:
         65:4e:e3:c8:44:80:43:35:a7:48:dd:30:47:6a:41:73:88:13:
         2a:65:9a:46:3a:e8:7d:bc:13:d0:2c:51:5d:e1:45:2c:a1:1c:
         46:bf:20:0b:73:6b:c6:d5:91:43:55:1b:cd:04:32:d5:35:0b:
         53:94:4e:fc:b5:1d:96:fa:28:97:b5:9f:cc:dc:9d:51:a3:a0:
         6f:11:84:30:fa:fa:b6:90:0b:ca:f7:fe:08:ea:c9:48:3e:ed:
         1a:c7:35:e8:38:1e:f6:9a:f4:76:58:b7:0c:8b:df:ef:41:7e:
         85:bb:71:79:22:62:61:2e:28:4f:5b:5f:e7:b6:25:b4:3b:a7:
         35:ab:f8:14:4e:4c:6a:33:1f:c4:87:4d:bb:f9:bd:71:c7:0e:
         89:62:04:69:1b:54:3a:91:a1:0b:7b:23:f8:3d:c0:da:4f:85:
         e4:23:07:a2:17:69:52:d3:f8:ef:a2:7b:7d:77:39:17:63:ce:
         66:4f:41:d6:07:a3:f1:21:5d:ce:3e:9f:e0:57:47:10:c8:b7:
         1f:af:6d:b4:3d:6d:52:d4:71:c3:85:c4:eb:b5:ba:c0:e7:64:
         f2:f2:15:48:a8:0e:f9:f1:03:fd:d0:f0:4a:ca:94:ca:0d:c9:
         2b:0a:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:18:36 2025 by rpki-client