Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230342e302f32322d3232203d3e20323639313439.roa
File:                     34352e3138302e3230342e302f32322d3232203d3e20323639313439.roa (raw, json)
Hash identifier:          gSgT6O5KIbo5jh+HSg0sUao/RnqRAMsBo5U4PORggbQ=
Subject key identifier:   E3:24:73:36:50:67:79:2F:D0:EB:4F:D1:AD:D8:6D:35:E8:A0:85:A6
Certificate issuer:       /CN=DC49838DC0E82146CA3629580ACAA15681626498
Certificate serial:       33B0A510DCBD18DA398F2DF0E120D1735C20255E
Authority key identifier: DC:49:83:8D:C0:E8:21:46:CA:36:29:58:0A:CA:A1:56:81:62:64:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC49838DC0E82146CA3629580ACAA15681626498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230342e302f32322d3232203d3e20323639313439.roa
Signing time:             Fri 17 Jun 2022 14:02:04 +0000
ROA not before:           Fri 17 Jun 2022 13:57:04 +0000
ROA not after:            Fri 16 Jun 2023 14:02:04 +0000
asID:                     269149
IP address blocks:        45.180.204.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b0:a5:10:dc:bd:18:da:39:8f:2d:f0:e1:20:d1:73:5c:20:25:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC49838DC0E82146CA3629580ACAA15681626498
        Validity
            Not Before: Jun 17 13:57:04 2022 GMT
            Not After : Jun 16 14:02:04 2023 GMT
        Subject: CN=E32473365067792FD0EB4FD1ADD86D35E8A085A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7d:2d:85:d6:12:e5:cc:0a:e7:34:9b:a7:53:
                    f4:dd:1d:21:28:95:c0:b1:25:2e:80:b1:81:bf:c0:
                    11:73:6c:20:3e:90:d3:bc:2c:78:d9:ec:54:c6:5e:
                    15:2a:9f:b1:a4:d9:6e:db:ae:4d:de:39:01:3b:b4:
                    b1:a4:31:6c:c6:c0:1b:49:9d:c0:c6:2e:65:24:6e:
                    3a:5c:e4:1e:c4:fb:53:c3:cf:81:c1:b2:c9:29:5d:
                    bf:4d:de:ae:08:86:0c:78:4f:b9:a3:8d:f2:78:92:
                    73:0a:d6:cd:f1:c1:f1:70:17:30:ca:17:e4:60:f6:
                    85:78:d9:80:02:40:e9:d9:4b:e8:ed:29:94:af:43:
                    c1:78:5c:41:6a:aa:f8:38:5f:07:60:12:1f:a0:2e:
                    a5:88:10:ba:24:43:a7:00:70:c6:e1:d1:8c:2e:e9:
                    6f:cb:49:7b:2d:85:63:05:01:25:06:b0:31:07:bb:
                    7a:f6:6a:9a:96:db:66:98:94:34:75:c7:82:3c:bb:
                    5f:a5:07:6c:59:f6:3e:5e:f0:34:ea:ab:59:8e:00:
                    23:ab:f8:72:11:ad:12:53:ee:93:61:12:73:17:c8:
                    01:fc:60:5b:a2:82:88:84:61:bf:af:8d:ee:67:96:
                    7d:c2:35:0b:da:e1:06:31:ff:66:35:92:b8:5f:eb:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:73:36:50:67:79:2F:D0:EB:4F:D1:AD:D8:6D:35:E8:A0:85:A6
            X509v3 Authority Key Identifier:
                keyid:DC:49:83:8D:C0:E8:21:46:CA:36:29:58:0A:CA:A1:56:81:62:64:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/DC49838DC0E82146CA3629580ACAA15681626498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC49838DC0E82146CA3629580ACAA15681626498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/34352e3138302e3230342e302f32322d3232203d3e20323639313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:44:76:4d:dc:91:cb:7c:0e:36:6c:3a:59:d0:d9:ac:57:46:
         44:81:e7:8a:46:94:80:b7:1b:fa:45:02:4c:34:eb:9c:f1:26:
         30:dc:86:d9:1a:1d:f5:b7:e8:c3:64:f5:bb:47:e3:a8:c6:54:
         6d:de:50:96:47:7d:ff:dc:a9:ff:2b:44:85:87:fb:a0:92:2d:
         40:7f:43:06:bc:be:c9:fa:56:7c:da:06:33:22:3a:c2:97:d0:
         0f:07:96:10:43:d8:cf:77:93:c3:da:89:d9:37:0b:b1:26:16:
         f0:ab:ef:f2:c1:3a:2a:df:8b:b8:a2:4f:a8:79:82:36:8c:ec:
         a6:1b:02:8c:b0:60:cd:8e:ae:84:86:8f:0c:98:32:db:19:39:
         56:d4:dc:45:f8:c1:64:6a:63:78:b6:b7:da:3b:f6:9e:10:29:
         f4:45:5a:5e:b5:2a:ec:f0:38:ad:64:47:d7:1a:4a:8d:c5:37:
         2d:2b:3f:4d:fe:32:9a:3f:3c:f1:91:27:df:0f:e7:5b:d4:1d:
         35:89:b6:c1:ad:a1:7b:8f:e0:f7:ed:be:bc:a1:c1:3e:0b:8a:
         a5:e3:ba:39:53:73:fc:07:36:59:a6:e3:df:f9:7c:e3:68:d9:
         ec:3f:eb:13:a1:a5:58:66:4b:fb:32:21:08:76:e2:98:b1:4b:
         3f:c2:17:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:00 2025 by rpki-client