Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e38382e302f32322d3232203d3e20323636393931.roa
File:                     34352e3232362e38382e302f32322d3232203d3e20323636393931.roa (raw, json)
Hash identifier:          u7AwCwL00FN1omoZtnm8xXG7cej1EjFIvpb7D10fRvI=
Subject key identifier:   55:06:84:0A:01:CE:04:B3:BA:36:61:F4:A0:B0:28:25:0F:E4:85:A0
Certificate issuer:       /CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
Certificate serial:       4E6767E2892B25B3C2CAE12A68C337AEB974E124
Authority key identifier: D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e38382e302f32322d3232203d3e20323636393931.roa
Signing time:             Wed 19 Apr 2023 22:00:00 +0000
ROA not before:           Wed 19 Apr 2023 21:55:00 +0000
ROA not after:            Fri 19 Apr 2024 22:00:00 +0000
asID:                     266991
IP address blocks:        45.226.88.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:67:67:e2:89:2b:25:b3:c2:ca:e1:2a:68:c3:37:ae:b9:74:e1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
        Validity
            Not Before: Apr 19 21:55:00 2023 GMT
            Not After : Apr 19 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:4e:e2:67:24:b5:ee:73:f7:56:95:73:68:
                    cd:d8:83:43:52:40:72:cf:9a:eb:6d:34:00:ee:7f:
                    1b:c6:c2:34:04:bf:07:d9:12:89:ab:f2:8c:3a:53:
                    08:50:28:09:52:ae:6a:0e:24:70:4a:82:79:bb:df:
                    ed:3d:14:26:99:3b:1c:2a:5d:cb:11:3b:36:78:02:
                    2e:f4:9f:01:d3:2d:de:81:b8:7a:25:5b:12:59:24:
                    32:29:b6:77:70:dd:f3:9b:c4:e9:9c:07:7f:30:8d:
                    74:97:be:e2:a7:a9:bb:63:04:13:0b:b3:0a:db:58:
                    0c:b5:1a:3e:60:3a:66:29:5d:00:7b:98:00:fe:2f:
                    f9:ac:04:97:c7:0d:cb:28:76:5f:84:83:94:c6:76:
                    b7:2d:ac:04:81:8a:43:26:ff:80:a4:fc:90:d8:af:
                    c2:92:7d:94:c1:ee:f4:f3:3e:2c:3c:95:bd:81:e1:
                    4f:ef:32:6d:9a:32:8b:8c:3b:8e:86:fc:7d:25:90:
                    09:0c:46:4b:28:79:6f:a5:52:a5:a2:74:79:ea:15:
                    7f:0e:c9:2b:86:29:86:17:b8:52:18:cf:75:0a:8d:
                    78:33:2b:cb:a2:e8:b9:33:45:29:6c:68:f9:b0:ff:
                    7a:6e:64:3c:fa:02:ad:11:c8:3c:21:6b:be:c9:20:
                    7b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:06:84:0A:01:CE:04:B3:BA:36:61:F4:A0:B0:28:25:0F:E4:85:A0
            X509v3 Authority Key Identifier:
                keyid:D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e38382e302f32322d3232203d3e20323636393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:bf:60:73:61:59:59:fc:27:de:3e:6b:07:0f:b3:67:ac:fd:
         2b:c9:e4:fa:a4:df:40:f6:bd:82:80:f4:9e:0f:36:c2:f9:85:
         91:08:de:41:31:6a:52:2b:b6:ee:11:07:c7:d5:ce:28:27:a7:
         ed:70:82:d6:78:16:27:b8:de:f1:31:6b:f7:21:1c:aa:c3:99:
         a7:5a:5e:fc:3b:b0:b1:cd:36:50:0d:fd:98:9e:02:73:8f:97:
         86:af:e4:35:6a:88:27:d2:7d:64:f3:b7:e0:5c:30:13:a6:0d:
         61:e6:b8:41:25:ab:56:37:73:fc:38:e9:ca:c8:48:e9:85:0e:
         b5:72:aa:9b:f8:ca:3a:9c:00:31:99:92:5a:56:8c:79:6e:51:
         25:06:7d:70:11:1d:61:b0:cf:0e:53:d1:3a:32:65:5e:2c:a9:
         7c:8b:e9:b3:a7:56:3d:b8:e0:35:2e:2f:0b:d4:b2:c1:ae:97:
         c1:b1:c0:91:74:c4:50:a7:68:cc:88:7f:8c:c2:f9:e2:cf:11:
         21:e9:15:92:80:a8:df:98:a5:f2:75:d0:16:db:81:65:97:3b:
         e6:fb:a7:4f:f8:14:91:b9:5c:0f:72:9d:40:18:ea:35:f0:22:
         16:48:c9:6b:39:4c:00:05:5e:3b:fb:22:21:d8:5a:33:26:e7:
         fc:5e:e0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:17 2025 by rpki-client