Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e38382e302f32342d3234203d3e20323636393931.roa
File:                     34352e3232362e38382e302f32342d3234203d3e20323636393931.roa (raw, json)
Hash identifier:          /TFNVz73dC5qWQDq/ulR7Yy9CFvWg1IHhcNSvP6Abgs=
Subject key identifier:   7D:1F:F5:ED:55:F4:86:43:B9:2B:E0:61:4D:56:05:F7:91:89:65:8F
Certificate issuer:       /CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
Certificate serial:       421B5D84A531BE0C621C362F0F46BB9602329986
Authority key identifier: D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e38382e302f32342d3234203d3e20323636393931.roa
Signing time:             Wed 19 Apr 2023 22:00:00 +0000
ROA not before:           Wed 19 Apr 2023 21:55:00 +0000
ROA not after:            Fri 19 Apr 2024 22:00:00 +0000
asID:                     266991
IP address blocks:        45.226.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1b:5d:84:a5:31:be:0c:62:1c:36:2f:0f:46:bb:96:02:32:99:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
        Validity
            Not Before: Apr 19 21:55:00 2023 GMT
            Not After : Apr 19 22:00:00 2024 GMT
        Subject: CN=3082010A0282010100AE210B67BC32CB441BCECB03D83C8EF2C4BDE880949624CBF09A53C7593EBB4DA6EC6A71CBD203E83AE4F3602A742889527DA18B6677D9DF579CE04DA0F96C494C907F22E3E24A60172EF5AC4CE8A0A19548A779BB5D820D480EF12AAFA8578CF776036186060CD6235B92915D4177F1A03DE5EA80B8BB053F91A1F58DAC14E71DF364AE57CA62F8D029B11065D781ABB37FB5CF54EC3115A4EE38F421D9CC23C3B0C376C9869C4C6518B15F030C38E81592969FFCFC0440BB7883994D5C12F7D94DDADAC8F24B82702A11C35566E3DAED10B45D9EE5A5E6129FD2045D45A251CA6B2367BCD688C2E1827E1084FCA2EBF362351C8535D21CE368C6F0E50B69A30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:0b:67:bc:32:cb:44:1b:ce:cb:03:d8:3c:
                    8e:f2:c4:bd:e8:80:94:96:24:cb:f0:9a:53:c7:59:
                    3e:bb:4d:a6:ec:6a:71:cb:d2:03:e8:3a:e4:f3:60:
                    2a:74:28:89:52:7d:a1:8b:66:77:d9:df:57:9c:e0:
                    4d:a0:f9:6c:49:4c:90:7f:22:e3:e2:4a:60:17:2e:
                    f5:ac:4c:e8:a0:a1:95:48:a7:79:bb:5d:82:0d:48:
                    0e:f1:2a:af:a8:57:8c:f7:76:03:61:86:06:0c:d6:
                    23:5b:92:91:5d:41:77:f1:a0:3d:e5:ea:80:b8:bb:
                    05:3f:91:a1:f5:8d:ac:14:e7:1d:f3:64:ae:57:ca:
                    62:f8:d0:29:b1:10:65:d7:81:ab:b3:7f:b5:cf:54:
                    ec:31:15:a4:ee:38:f4:21:d9:cc:23:c3:b0:c3:76:
                    c9:86:9c:4c:65:18:b1:5f:03:0c:38:e8:15:92:96:
                    9f:fc:fc:04:40:bb:78:83:99:4d:5c:12:f7:d9:4d:
                    da:da:c8:f2:4b:82:70:2a:11:c3:55:66:e3:da:ed:
                    10:b4:5d:9e:e5:a5:e6:12:9f:d2:04:5d:45:a2:51:
                    ca:6b:23:67:bc:d6:88:c2:e1:82:7e:10:84:fc:a2:
                    eb:f3:62:35:1c:85:35:d2:1c:e3:68:c6:f0:e5:0b:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1F:F5:ED:55:F4:86:43:B9:2B:E0:61:4D:56:05:F7:91:89:65:8F
            X509v3 Authority Key Identifier:
                keyid:D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e38382e302f32342d3234203d3e20323636393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:4d:81:a1:7d:11:6c:ea:a1:5e:a9:35:f1:62:ca:3d:9e:82:
         28:03:8e:55:35:0e:0a:63:da:0a:e5:83:8a:ef:8d:24:f6:38:
         d4:b1:ea:ed:fb:48:a6:fa:c9:79:73:25:13:d3:b6:87:cd:d3:
         72:be:db:14:e0:84:06:58:7e:b8:4a:e6:d4:a8:f1:09:52:99:
         e5:b8:b9:33:8a:d3:4e:2f:dd:a6:ea:b2:bf:c4:d1:c4:76:9c:
         9f:64:ab:cf:2c:d2:20:40:0c:6c:c5:06:c9:4b:27:eb:94:7d:
         76:e9:2b:65:98:92:d4:69:48:c3:f9:a7:65:2d:fa:37:33:bd:
         c6:60:28:b3:a8:57:6e:92:fd:44:91:21:b2:38:f3:74:59:d5:
         b7:26:8b:05:94:2e:a8:83:1d:07:13:12:55:e8:2b:02:98:12:
         f2:9c:2c:34:65:c0:fd:3a:77:f4:30:6d:e4:06:16:fb:be:7c:
         ca:c7:8b:8c:85:6a:04:e8:f1:db:3e:f5:c6:f0:9f:a7:e5:97:
         e3:9d:67:62:6a:44:c8:aa:6d:19:43:b0:c0:4b:d4:6e:85:dc:
         30:d5:f9:d8:bd:72:21:fe:0b:69:b6:db:17:18:00:c9:00:a3:
         2e:37:af:d9:0c:07:cb:0b:19:cb:8e:eb:91:75:4d:cd:68:5d:
         5d:6a:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:20:14 2025 by rpki-client