Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/34352e3232362e38302e302f32332d3233203d3e20323636393839.roa
File:                     34352e3232362e38302e302f32332d3233203d3e20323636393839.roa (raw, json)
Hash identifier:          +QPixlMgWCIJsW5jl8QM8x4S85nrtc8Qb18Tu7xuyRc=
Subject key identifier:   F7:52:6A:FF:A9:E7:BE:D0:92:40:AF:84:49:46:A4:11:3D:22:B0:6F
Certificate issuer:       /CN=FD18894E2A1AA130BC1F34C1E1846C4FDB584D00
Certificate serial:       3F4454086C9890F2E86A9CC7E2833C40B31F1644
Authority key identifier: FD:18:89:4E:2A:1A:A1:30:BC:1F:34:C1:E1:84:6C:4F:DB:58:4D:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD18894E2A1AA130BC1F34C1E1846C4FDB584D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/34352e3232362e38302e302f32332d3233203d3e20323636393839.roa
Signing time:             Mon 29 Aug 2022 18:15:50 +0000
ROA not before:           Mon 29 Aug 2022 18:10:50 +0000
ROA not after:            Mon 28 Aug 2023 18:15:50 +0000
asID:                     266989
IP address blocks:        45.226.80.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:44:54:08:6c:98:90:f2:e8:6a:9c:c7:e2:83:3c:40:b3:1f:16:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD18894E2A1AA130BC1F34C1E1846C4FDB584D00
        Validity
            Not Before: Aug 29 18:10:50 2022 GMT
            Not After : Aug 28 18:15:50 2023 GMT
        Subject: CN=F7526AFFA9E7BED09240AF844946A4113D22B06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:3a:25:0f:72:92:e1:d2:8f:bc:83:c7:99:
                    47:f1:3d:8f:1f:d3:34:5f:eb:06:a8:39:29:e2:a6:
                    16:a4:d3:1e:ff:47:c5:52:17:41:43:6e:38:85:53:
                    b3:c4:a0:08:48:00:b1:24:65:bc:47:23:a4:b1:18:
                    ae:c2:6c:ad:9a:5f:6b:4a:60:05:6d:63:ef:7d:c4:
                    aa:2e:f0:65:8a:37:0f:00:98:0f:e5:bc:39:17:7e:
                    fb:65:ab:95:8e:52:ca:9a:95:d6:ff:a2:b9:64:aa:
                    67:6b:69:ec:a7:bf:b6:29:25:21:b3:47:de:53:c9:
                    09:97:31:2b:f2:f2:16:01:c9:31:30:66:7a:7b:f7:
                    ff:51:5d:36:cf:34:02:30:17:ac:eb:c1:f2:88:39:
                    74:61:72:e8:17:a9:52:c1:0f:e1:87:48:71:4c:8e:
                    4e:ba:1a:9e:b5:8f:34:5c:80:9e:dc:b1:35:ca:fd:
                    40:29:07:ad:13:c8:d9:df:eb:6e:ae:73:c6:f7:94:
                    f1:31:76:60:48:91:d7:c8:e4:d9:db:00:d0:b8:d5:
                    6b:3d:ad:18:cb:02:0a:20:d9:77:f3:f9:05:28:3b:
                    d4:ec:ec:db:81:46:6c:a6:6f:b7:ca:b6:63:39:7a:
                    5c:aa:e6:41:1e:10:ae:ce:7f:86:7f:35:56:36:97:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:52:6A:FF:A9:E7:BE:D0:92:40:AF:84:49:46:A4:11:3D:22:B0:6F
            X509v3 Authority Key Identifier:
                keyid:FD:18:89:4E:2A:1A:A1:30:BC:1F:34:C1:E1:84:6C:4F:DB:58:4D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/FD18894E2A1AA130BC1F34C1E1846C4FDB584D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD18894E2A1AA130BC1F34C1E1846C4FDB584D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/34352e3232362e38302e302f32332d3233203d3e20323636393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:51:09:59:b7:01:ea:e1:8a:c5:3a:63:83:c8:63:a8:1d:75:
         be:9c:67:4a:90:5b:a1:8d:43:39:59:e4:8c:f0:d4:88:8e:11:
         79:08:53:de:ff:8d:3c:f8:24:4c:75:0e:ac:bb:36:1a:01:80:
         54:b2:c0:b8:e1:d3:dc:61:ca:c3:7e:7e:e7:c1:bd:89:82:c9:
         59:03:4d:f4:4d:df:f4:6c:ad:21:38:e9:c7:1c:6e:9b:09:2d:
         20:c8:7b:44:a4:d2:af:34:64:89:54:10:0e:b0:28:0c:fe:ec:
         9f:00:85:f5:ab:3f:0d:96:eb:9b:9c:0f:44:cd:60:e9:49:10:
         d6:81:0f:bf:4e:33:6a:db:12:8e:54:44:f8:a0:ec:e3:89:6e:
         ce:70:41:21:e0:c4:03:95:5f:af:92:4f:11:e8:fa:76:a7:5a:
         24:34:fe:3c:b6:04:0f:09:fe:fb:26:75:cd:e0:61:3f:c9:00:
         f6:34:82:57:26:49:af:37:1d:9a:89:8e:16:26:26:51:0a:54:
         43:b4:26:45:e0:d9:15:df:26:f0:e5:17:6e:a3:c2:51:95:90:
         99:14:42:08:51:bd:20:3f:c9:ca:2a:84:63:22:10:a7:76:81:
         b0:c4:b6:70:70:a2:58:b5:45:f2:9f:3d:66:08:12:6d:e1:49:
         20:47:28:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:44 2025 by rpki-client