Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3232392e302f32342d3234203d3e20323638333432.roa
File:                     34352e3233382e3232392e302f32342d3234203d3e20323638333432.roa (raw, json)
Hash identifier:          erH6Ax+h0TtSNupxw9kQgxll9ERkVHWriFKZQD9/Qkc=
Subject key identifier:   D8:8B:0A:5E:CE:1F:C7:99:D2:D4:9F:F2:52:7E:39:FF:64:B2:66:10
Certificate issuer:       /CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
Certificate serial:       171B5926E5CCA125E58F36041FF595202BC06C82
Authority key identifier: 3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3232392e302f32342d3234203d3e20323638333432.roa
Signing time:             Mon 04 Apr 2022 23:55:38 +0000
ROA not before:           Mon 04 Apr 2022 23:50:38 +0000
ROA not after:            Mon 03 Apr 2023 23:55:38 +0000
asID:                     268342
IP address blocks:        45.238.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1b:59:26:e5:cc:a1:25:e5:8f:36:04:1f:f5:95:20:2b:c0:6c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
        Validity
            Not Before: Apr  4 23:50:38 2022 GMT
            Not After : Apr  3 23:55:38 2023 GMT
        Subject: CN=D88B0A5ECE1FC799D2D49FF2527E39FF64B26610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:84:ee:56:d4:ad:b6:9e:76:ee:71:05:6c:d0:
                    b2:7a:32:04:f4:fd:35:6b:c4:4a:48:c8:1f:d2:7a:
                    c9:63:49:9c:24:8f:bb:ef:3a:b6:08:db:41:9d:70:
                    8e:a2:73:fe:94:76:3a:bb:a6:b3:ff:ca:4c:85:4b:
                    11:4e:98:f4:de:32:c3:13:ec:0e:d4:42:9e:ca:b6:
                    18:02:44:b0:7f:e4:2f:c5:86:28:13:05:f3:30:02:
                    27:ec:f8:23:fd:a4:96:dd:d0:26:8b:4d:68:11:41:
                    3e:37:14:4d:9a:c7:2c:18:e5:73:64:fe:0d:f0:0c:
                    05:a2:46:cb:c2:33:d9:0c:be:8e:6e:23:d0:ab:26:
                    51:82:94:74:ba:54:c0:14:13:1c:56:c3:63:06:28:
                    4c:01:72:89:46:9e:9f:54:51:51:1e:13:27:87:69:
                    e7:1b:7a:84:81:c3:7a:c9:4c:76:be:64:6c:ef:49:
                    82:c1:69:7b:16:c7:16:b3:18:c0:8a:98:05:10:7c:
                    0f:c2:53:fa:33:72:39:29:51:89:b4:e8:a6:73:93:
                    9f:69:d9:9a:86:c2:e7:e3:6d:4e:3e:4e:90:d8:d3:
                    c4:91:40:c2:5f:3a:bc:50:92:a3:bc:c0:f9:c5:77:
                    bc:94:75:dc:8f:97:eb:94:f1:5a:21:93:ff:a7:98:
                    a8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8B:0A:5E:CE:1F:C7:99:D2:D4:9F:F2:52:7E:39:FF:64:B2:66:10
            X509v3 Authority Key Identifier:
                keyid:3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3232392e302f32342d3234203d3e20323638333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:8c:60:97:9c:65:fc:fd:56:ca:b8:c0:04:c6:d4:c1:73:53:
         98:36:1c:49:e0:91:59:e4:6c:2c:c7:88:61:09:75:11:4d:eb:
         8c:6e:a3:9b:b9:3a:46:29:fe:0e:e2:92:89:d7:95:66:ab:19:
         6e:68:69:6f:5e:62:78:af:90:30:e4:e1:74:87:d8:b1:49:ff:
         42:59:f1:09:b9:3a:51:24:aa:3b:3c:5b:8e:6b:7a:f3:ec:88:
         89:25:ed:31:e9:6b:a0:7c:03:34:0e:60:54:f4:a1:b2:7c:bf:
         82:cb:d7:10:bc:36:89:f4:97:ea:61:89:39:c2:8b:3f:d3:0a:
         a3:98:26:0d:eb:f7:d0:d5:cd:2d:08:9a:88:b8:c7:14:d4:ec:
         3e:08:51:85:0e:ac:89:15:29:10:8b:cc:76:1f:9e:59:01:bd:
         6e:e0:1f:b4:80:23:24:ab:75:0b:f0:f6:27:81:1f:5b:e3:2c:
         c3:c1:40:8e:f1:6f:04:f3:04:29:10:14:60:4c:c4:52:58:c1:
         56:e5:2a:69:55:a4:cc:2a:3a:93:b3:81:69:6f:45:31:c4:d2:
         fb:9c:61:45:1b:68:92:e3:8e:4a:1a:6f:3d:c7:4b:37:b2:5b:
         e8:36:b8:95:19:93:05:12:36:f1:e0:9d:5b:ec:9a:26:14:0e:
         2d:b9:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:34 2025 by rpki-client