Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3332203d3e20323638303838.roa
File:                     34352e3136382e3130302e302f32322d3332203d3e20323638303838.roa (raw, json)
Hash identifier:          TuIjl1PmXDKDOWlZJuc/FMV/OOCtBy6bNhctxVDxuOU=
Subject key identifier:   F2:A2:D0:DA:F0:3A:4C:5D:A5:8A:B1:83:53:3D:79:1E:12:B7:C6:13
Certificate issuer:       /CN=6D3B2E18E39A6DF4ED9D221786904ABD9B918766
Certificate serial:       2BD33E22F932EFEC92025516725A692701384BA0
Authority key identifier: 6D:3B:2E:18:E3:9A:6D:F4:ED:9D:22:17:86:90:4A:BD:9B:91:87:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D3B2E18E39A6DF4ED9D221786904ABD9B918766.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3332203d3e20323638303838.roa
Signing time:             Wed 25 Oct 2023 15:02:46 +0000
ROA not before:           Wed 25 Oct 2023 14:57:46 +0000
ROA not after:            Wed 23 Oct 2024 15:02:46 +0000
asID:                     268088
IP address blocks:        45.168.100.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d3:3e:22:f9:32:ef:ec:92:02:55:16:72:5a:69:27:01:38:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3B2E18E39A6DF4ED9D221786904ABD9B918766
        Validity
            Not Before: Oct 25 14:57:46 2023 GMT
            Not After : Oct 23 15:02:46 2024 GMT
        Subject: CN=F2A2D0DAF03A4C5DA58AB183533D791E12B7C613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:af:6c:8d:12:db:47:0b:ac:36:06:f2:b1:ce:
                    9f:6a:dc:c0:5f:76:7a:3c:fd:b1:36:8a:c4:5e:14:
                    e3:ff:c9:ea:e0:e8:ac:f8:dc:35:b0:d9:9e:39:4f:
                    c3:45:75:61:35:ed:54:69:44:f4:fd:1c:ca:1d:6e:
                    15:e1:5a:72:92:a8:7c:22:f5:99:f5:6d:c8:94:54:
                    00:7a:a2:1e:52:48:f2:5c:39:0a:3a:65:61:a7:4e:
                    d1:96:80:bd:61:c4:2f:98:0d:66:85:db:83:c9:df:
                    01:0b:57:99:03:1e:50:f0:59:91:03:64:f1:fa:06:
                    76:00:df:e4:30:3f:da:88:cd:c6:5d:e6:38:8e:92:
                    56:dd:c8:40:a3:13:5f:2a:90:f2:49:d2:2a:d9:bd:
                    09:c1:ef:1c:2d:98:b5:9f:ff:a7:e8:99:92:a8:5f:
                    07:40:84:02:37:f7:ad:30:73:37:e4:85:cd:4d:2d:
                    73:2e:6f:b8:ba:11:cd:f7:83:17:0f:5e:e8:64:e3:
                    3d:d0:9d:4e:54:c1:c2:71:fe:ac:1f:9d:04:dc:b2:
                    b5:82:a9:7d:ea:e9:8d:a8:e9:5a:9f:e8:bb:0e:a7:
                    d7:93:9d:a9:25:c3:76:dd:3a:05:7b:25:6b:c3:ba:
                    bb:52:82:92:bd:1b:bf:9a:b2:48:2b:0c:0a:1f:cb:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A2:D0:DA:F0:3A:4C:5D:A5:8A:B1:83:53:3D:79:1E:12:B7:C6:13
            X509v3 Authority Key Identifier:
                keyid:6D:3B:2E:18:E3:9A:6D:F4:ED:9D:22:17:86:90:4A:BD:9B:91:87:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/6D3B2E18E39A6DF4ED9D221786904ABD9B918766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D3B2E18E39A6DF4ED9D221786904ABD9B918766.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3332203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:49:8f:6e:82:f0:e8:16:a8:67:e0:ec:a6:25:05:84:aa:9c:
         6f:25:de:fc:08:90:e1:b8:44:51:84:47:07:99:eb:c0:4f:31:
         26:19:a6:84:fa:f0:95:c9:0b:1f:01:c4:33:20:f9:ed:52:6c:
         0d:bc:0f:1c:7c:f2:0a:cb:54:94:47:f5:4e:75:08:94:5e:74:
         b7:d9:5d:be:90:e1:5c:00:3e:f2:ce:8c:2d:fc:6d:b2:27:21:
         66:91:4a:ca:a7:79:5f:12:83:ed:6d:a0:bb:59:a8:70:f6:2a:
         e9:95:9a:26:63:10:1b:50:81:6f:cd:06:a1:c1:55:60:06:30:
         96:f9:78:dd:59:82:d3:04:ec:bd:ba:43:3f:cf:15:93:93:bb:
         78:24:73:ea:bf:09:b8:19:8b:2a:ab:a3:bd:eb:bf:4a:68:81:
         00:38:d4:85:e2:a2:98:0a:4a:43:ea:1d:b8:de:b5:cd:1a:55:
         53:e0:84:31:44:f5:8d:e7:00:1d:7f:12:09:55:21:4b:35:7b:
         4a:1c:88:f0:bc:88:13:7c:1f:30:61:17:b9:e8:c0:a9:d3:3c:
         49:46:34:57:86:ef:41:20:e0:b2:69:18:52:60:49:07:73:c9:
         e5:44:bf:4b:40:7a:51:47:79:6e:f9:6b:37:f2:44:c0:0d:cf:
         85:65:d3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:20 2025 by rpki-client