Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3232382e302f32322d3232203d3e20323638333432.roa
File:                     34352e3233382e3232382e302f32322d3232203d3e20323638333432.roa (raw, json)
Hash identifier:          Z4QSVdk2rYv/ncGRujCTdngS7WLa33Z0m2xZGdQMCRw=
Subject key identifier:   03:F8:B4:DF:41:86:2A:18:C0:AE:0C:D7:99:B2:8A:57:CF:C2:D8:FE
Certificate issuer:       /CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
Certificate serial:       077B9BC6C9A594802CC0F7EB6BBA1214A9344356
Authority key identifier: 3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3232382e302f32322d3232203d3e20323638333432.roa
Signing time:             Tue 13 Sep 2022 03:52:02 +0000
ROA not before:           Tue 13 Sep 2022 03:47:02 +0000
ROA not after:            Tue 12 Sep 2023 03:52:02 +0000
asID:                     268342
IP address blocks:        45.238.228.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7b:9b:c6:c9:a5:94:80:2c:c0:f7:eb:6b:ba:12:14:a9:34:43:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
        Validity
            Not Before: Sep 13 03:47:02 2022 GMT
            Not After : Sep 12 03:52:02 2023 GMT
        Subject: CN=03F8B4DF41862A18C0AE0CD799B28A57CFC2D8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:59:96:4a:b5:ce:e7:10:e8:68:27:69:d8:
                    6c:54:29:03:7b:45:02:b5:4b:a7:90:f7:1c:c7:82:
                    b1:87:f8:0c:59:f1:f5:c6:80:00:bc:8f:ec:ef:3c:
                    f8:fe:ce:07:e5:54:30:0e:0f:17:1c:ca:ca:7f:2f:
                    dd:4b:5f:e0:87:b2:18:b4:d4:0d:ff:93:f5:db:93:
                    2a:ae:1b:20:2d:a4:64:7d:04:85:8e:bc:d0:5f:5e:
                    f5:4e:20:f2:c8:ff:55:4b:3f:56:b9:ec:ed:83:ab:
                    f7:d9:14:90:1b:29:e3:63:ab:bd:9d:44:06:32:a5:
                    15:72:91:34:c4:af:59:29:c6:8b:fd:d2:83:c2:55:
                    69:e0:c3:06:c5:92:c1:5a:69:04:7e:09:18:09:fc:
                    e3:af:8f:f6:d7:94:ea:c8:18:38:1f:08:f0:a0:b5:
                    b8:39:55:19:76:5c:a1:b9:86:fa:f3:3c:9f:69:b1:
                    28:4e:4d:37:1f:55:50:61:f0:21:63:5b:1a:84:2a:
                    5a:31:14:ae:79:20:56:9b:21:10:3c:54:59:37:be:
                    40:9c:f8:9d:2e:1d:40:ab:e3:a8:21:df:a9:00:93:
                    f7:b2:92:d6:d0:5b:74:31:d1:c2:5e:c5:a6:b9:ff:
                    5a:a4:cb:b1:35:d9:79:1f:c2:02:9f:e7:2d:2c:b3:
                    c4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F8:B4:DF:41:86:2A:18:C0:AE:0C:D7:99:B2:8A:57:CF:C2:D8:FE
            X509v3 Authority Key Identifier:
                keyid:3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3232382e302f32322d3232203d3e20323638333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:9b:96:0e:88:df:5f:a8:82:7d:bd:17:9d:43:1d:0a:15:
         82:3f:f8:0e:8b:d8:5c:ed:be:0b:25:6d:4d:74:8f:2c:96:4d:
         5c:71:df:11:d6:ab:c7:9d:f0:27:6a:17:3a:0f:23:12:80:d8:
         81:43:20:a6:95:05:84:22:49:ef:e1:06:57:3c:ba:9c:d4:87:
         7e:22:2a:c0:85:75:39:09:d1:9f:5c:31:93:9f:d4:8f:4e:19:
         84:9e:20:90:87:3b:67:0e:9f:25:cb:90:54:81:70:01:e1:5b:
         01:ed:52:83:9b:da:d0:82:9f:38:4b:0e:c8:71:1f:b5:ae:3d:
         f6:9a:6e:d9:57:20:00:13:1d:3d:62:52:22:a9:f6:11:45:e0:
         71:b7:85:bb:6f:0a:a7:20:01:06:95:e9:ab:d4:4d:0d:db:6b:
         d1:14:5b:b2:c9:b2:32:e6:0a:d9:ef:33:57:5d:d9:16:fd:de:
         c6:a5:8f:33:47:28:11:f4:ad:e2:93:b1:05:df:bc:e4:03:b9:
         0a:33:31:63:8c:e9:a7:94:2d:1b:43:96:a2:7b:2e:19:ef:f6:
         e9:41:58:20:04:02:7c:1d:77:ec:97:80:5e:cc:01:5b:c8:31:
         2d:4d:8b:8b:09:d2:ef:40:68:b7:17:74:53:e3:0b:83:7b:d2:
         47:94:5e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:47 2025 by rpki-client