Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36302e302f32322d3332203d3e20323731323034.roa
File:                     34352e3233362e36302e302f32322d3332203d3e20323731323034.roa (raw, json)
Hash identifier:          My259zcvjEazPkbkkf8oBMlkFMEurkXkKyQdCRIUFHo=
Subject key identifier:   70:0B:27:14:BA:D3:AA:B8:48:AD:1E:D6:0B:3A:A6:ED:BD:CB:B6:0D
Certificate issuer:       /CN=037F721D54AC618CCE31999B3E24405C2B235FB7
Certificate serial:       29C180E37E8E6731E2BB2E3FA024C11C15B520DB
Authority key identifier: 03:7F:72:1D:54:AC:61:8C:CE:31:99:9B:3E:24:40:5C:2B:23:5F:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/037F721D54AC618CCE31999B3E24405C2B235FB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36302e302f32322d3332203d3e20323731323034.roa
Signing time:             Tue 09 May 2023 20:13:15 +0000
ROA not before:           Tue 09 May 2023 20:08:15 +0000
ROA not after:            Tue 07 May 2024 20:13:15 +0000
asID:                     271204
IP address blocks:        45.236.60.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c1:80:e3:7e:8e:67:31:e2:bb:2e:3f:a0:24:c1:1c:15:b5:20:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037F721D54AC618CCE31999B3E24405C2B235FB7
        Validity
            Not Before: May  9 20:08:15 2023 GMT
            Not After : May  7 20:13:15 2024 GMT
        Subject: CN=700B2714BAD3AAB848AD1ED60B3AA6EDBDCBB60D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:f6:bf:54:14:f4:d7:41:af:75:f8:32:12:
                    ba:91:96:e3:6e:4d:a9:2b:12:93:17:28:0e:f7:59:
                    9c:5e:ae:7c:bf:7a:05:01:d7:a1:5e:7f:a8:c7:2b:
                    94:bb:cb:7c:a5:a6:e7:5f:90:9f:84:fd:d4:47:8d:
                    1c:7a:55:ca:63:c2:fe:a7:91:ed:2f:6b:e8:7e:0c:
                    e3:23:f9:d0:39:f6:68:c0:38:12:e0:71:f4:0f:cb:
                    4f:86:84:9e:5f:8e:54:dc:89:26:c8:a8:fa:2c:55:
                    e3:c2:8e:cc:bb:a4:90:18:cb:fa:e7:56:05:70:25:
                    b5:77:70:b3:1b:ed:f0:91:b1:25:87:1d:1f:8a:2e:
                    6c:81:52:7b:94:d2:35:f1:55:7f:31:15:f2:a6:e2:
                    24:af:16:f5:c5:c9:d8:04:7f:34:f3:ff:b9:c6:bb:
                    19:18:b2:65:07:30:f5:70:53:88:49:db:5c:ee:65:
                    7d:5f:c4:a0:e8:9f:b9:8f:d8:b8:de:31:fc:07:a4:
                    53:33:d7:f8:78:dd:3b:13:2b:4d:81:74:8f:b8:84:
                    23:c6:30:d0:c7:76:8a:22:f0:a9:05:4e:0e:c8:e3:
                    89:d7:04:5f:66:c1:1a:3d:8d:10:14:ea:8c:4f:a5:
                    88:17:2a:ce:98:d1:b6:67:6b:fd:15:86:c6:d6:d5:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0B:27:14:BA:D3:AA:B8:48:AD:1E:D6:0B:3A:A6:ED:BD:CB:B6:0D
            X509v3 Authority Key Identifier:
                keyid:03:7F:72:1D:54:AC:61:8C:CE:31:99:9B:3E:24:40:5C:2B:23:5F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/037F721D54AC618CCE31999B3E24405C2B235FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/037F721D54AC618CCE31999B3E24405C2B235FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36302e302f32322d3332203d3e20323731323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:a0:ba:a8:46:8d:d1:3b:91:4b:ab:f8:79:55:1b:7c:61:80:
         da:5f:5f:f5:c9:f9:bb:1a:9b:74:54:bd:da:99:fd:ac:63:8f:
         fc:51:c5:c9:3c:2a:48:fc:bc:0d:3f:10:0d:18:10:1a:cb:53:
         c8:69:07:7b:08:33:7d:48:a3:68:9f:99:f3:e4:41:cc:12:0a:
         13:9c:18:98:3a:bb:ee:99:24:00:11:14:5e:a3:b4:a6:0a:7d:
         ab:f8:63:39:99:66:96:c7:18:73:f7:37:22:bb:95:79:9c:70:
         9c:db:62:b4:22:58:b2:b5:94:17:44:c7:52:6a:fc:52:30:97:
         04:53:08:c0:2f:12:cb:08:37:b9:67:d2:8e:e6:80:0e:94:75:
         d2:d2:89:08:b3:0a:07:3a:cc:2c:50:ac:09:c9:f8:07:8c:c2:
         ad:b5:70:0d:ae:86:cb:b8:52:78:f2:6c:1e:07:48:c1:37:e3:
         fc:ca:29:d5:d5:57:e8:52:52:00:02:c2:1b:ba:6b:31:30:e7:
         dd:c2:28:c2:0f:a9:77:31:66:ae:ef:4d:6a:46:60:f4:94:db:
         2e:fc:0a:32:f6:70:58:a4:a2:a4:50:3f:ab:98:f3:ab:f2:f2:
         b9:87:19:cf:d4:bf:75:74:e5:4c:4f:86:13:81:41:8b:26:64:
         bc:3e:c5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:47 2025 by rpki-client