Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e38382e302f32332d3233203d3e20323636393931.roa
File:                     34352e3232362e38382e302f32332d3233203d3e20323636393931.roa (raw, json)
Hash identifier:          GtDpJvKcaok+9vriHEE4sokbxw9hBspt0UQtmjmfvqU=
Subject key identifier:   B2:28:87:36:50:F3:5A:69:60:EB:51:BB:E5:D5:43:AD:CD:27:C0:80
Certificate issuer:       /CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
Certificate serial:       3E8730A722FADFA01877C814D73B457BF9DD326C
Authority key identifier: D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e38382e302f32332d3233203d3e20323636393931.roa
Signing time:             Wed 19 Apr 2023 22:00:00 +0000
ROA not before:           Wed 19 Apr 2023 21:55:00 +0000
ROA not after:            Fri 19 Apr 2024 22:00:00 +0000
asID:                     266991
IP address blocks:        45.226.88.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:87:30:a7:22:fa:df:a0:18:77:c8:14:d7:3b:45:7b:f9:dd:32:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
        Validity
            Not Before: Apr 19 21:55:00 2023 GMT
            Not After : Apr 19 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:7e:74:c4:fc:69:a3:f1:4b:28:fd:41:5a:
                    8b:27:6c:6c:f3:20:06:e4:c6:64:0d:87:53:34:b8:
                    91:03:86:06:57:0f:c9:35:55:58:e2:60:e5:1f:20:
                    2e:d1:5a:d2:c2:43:79:f5:ae:6d:a8:92:08:2c:ae:
                    e7:b3:55:7e:16:9e:45:07:0d:3b:0f:11:3b:8a:b8:
                    af:33:59:f2:ed:3c:85:9c:60:31:a8:7a:c7:1c:e4:
                    0d:cd:21:ae:e0:6d:ff:d1:d5:1f:ba:34:6b:82:a1:
                    d7:7e:27:76:40:61:c2:f9:04:4e:97:a6:5a:14:77:
                    28:42:07:5b:06:a7:94:d8:ae:55:42:13:9d:18:4f:
                    4f:ff:a0:f0:6f:c4:38:d1:7c:a1:42:a3:98:92:21:
                    d4:5b:75:9a:3f:96:0f:8e:10:b3:f8:f4:23:29:e6:
                    d0:35:cb:3f:2c:ff:cd:d6:a8:3a:05:70:ff:65:4d:
                    1c:61:a9:37:e4:27:c3:2d:1d:e1:fa:f9:28:34:cd:
                    15:b4:4f:ac:3e:a8:ad:81:3b:68:a2:d9:95:eb:01:
                    56:6f:42:5a:06:4c:16:a6:58:42:18:3c:77:5f:d6:
                    9b:23:12:1e:40:be:fb:eb:f7:95:f9:2a:d5:3a:4a:
                    fc:31:9d:23:4b:38:e6:70:28:bb:89:4b:06:51:0a:
                    f1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:28:87:36:50:F3:5A:69:60:EB:51:BB:E5:D5:43:AD:CD:27:C0:80
            X509v3 Authority Key Identifier:
                keyid:D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e38382e302f32332d3233203d3e20323636393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:36:a0:5e:ba:41:34:59:a5:49:99:79:9a:45:1d:9b:90:
         58:95:b1:38:97:3e:0e:93:96:c8:1b:bf:ce:5a:e3:92:a5:55:
         c0:7e:00:46:b2:50:ec:2f:6f:a1:59:95:63:5c:1c:70:56:27:
         8f:79:02:96:56:f7:a5:93:1d:51:dd:5a:b6:28:5d:b5:7f:81:
         54:0e:e8:8b:cb:00:5c:8b:b7:6c:1f:75:eb:1b:97:a7:53:8f:
         e9:b7:62:43:2d:28:72:8e:0e:55:45:5e:23:e1:31:2c:f9:f8:
         57:7a:5c:82:94:42:31:e3:87:4d:74:ee:e3:ec:0e:f6:be:a0:
         b5:20:59:72:7a:ae:8a:5e:0c:ed:cb:aa:7f:0d:9b:f4:b6:50:
         1c:1f:73:d1:84:37:41:2a:ae:33:24:c6:2b:3e:e1:a8:53:2e:
         d2:1a:76:ef:c2:8e:96:47:c3:29:0d:58:fc:5d:8f:f5:ca:87:
         3f:18:a3:3e:fa:0d:94:c9:a1:e6:2c:ba:f7:a5:2b:41:eb:61:
         82:d7:c1:17:d2:91:ed:5c:d6:9b:8a:53:ed:66:67:97:1f:52:
         ae:3e:a7:55:36:6b:da:73:ff:e2:39:09:e9:b7:63:29:e2:21:
         28:25:30:2c:b2:e9:0c:bb:d1:ee:3c:fb:4c:e8:17:28:ba:af:
         85:4b:fa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:59 2025 by rpki-client