Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3233302e302f32342d3234203d3e20323638333432.roa
File:                     34352e3233382e3233302e302f32342d3234203d3e20323638333432.roa (raw, json)
Hash identifier:          QusTPHo4ktlSsaCY7e+s8th/YscXV2MhMkwwk1+ga8E=
Subject key identifier:   53:3B:44:60:E9:23:45:A2:42:AA:22:42:EF:52:0A:9B:92:91:80:F3
Certificate issuer:       /CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
Certificate serial:       178B46D85EC80881D312D2F013C618C4B4AB893B
Authority key identifier: 3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3233302e302f32342d3234203d3e20323638333432.roa
Signing time:             Mon 04 Apr 2022 23:55:39 +0000
ROA not before:           Mon 04 Apr 2022 23:50:39 +0000
ROA not after:            Mon 03 Apr 2023 23:55:39 +0000
asID:                     268342
IP address blocks:        45.238.230.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8b:46:d8:5e:c8:08:81:d3:12:d2:f0:13:c6:18:c4:b4:ab:89:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
        Validity
            Not Before: Apr  4 23:50:39 2022 GMT
            Not After : Apr  3 23:55:39 2023 GMT
        Subject: CN=533B4460E92345A242AA2242EF520A9B929180F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fc:83:41:7e:fc:48:26:23:ea:2e:8f:b9:ad:
                    3d:15:89:6e:7a:a7:9f:ab:ce:b2:4e:9c:ea:ca:5b:
                    84:9c:1a:ef:d4:a5:d8:bd:f2:31:7f:be:64:ce:8a:
                    cc:9b:a2:39:5d:46:ee:cd:d8:64:1b:59:51:0a:d0:
                    f2:dc:32:87:da:f9:52:bd:a7:e4:b7:7c:bb:a9:9f:
                    34:c9:fe:ec:8a:e9:db:7a:a3:50:3e:1e:ff:35:33:
                    96:bb:75:9b:1a:90:ea:51:a2:8b:1d:69:32:7c:c8:
                    27:5e:83:b4:02:5d:89:0b:0d:54:97:a5:4c:77:73:
                    75:80:66:dd:69:bc:b4:f2:a3:d3:a7:5e:b7:69:7f:
                    05:12:db:78:0b:c1:5b:71:b3:a3:bf:05:ad:b3:52:
                    9d:75:3b:b0:e5:42:f9:ec:6b:6b:68:bb:24:72:34:
                    9e:d0:ab:38:05:37:89:f7:43:4b:28:be:cf:51:00:
                    a5:1d:92:18:61:86:ef:00:39:81:86:64:a9:f9:ed:
                    75:c7:e1:33:c1:3d:bd:62:b3:88:64:dc:8d:13:2a:
                    83:58:a1:35:85:4a:99:84:14:4e:ac:45:6c:9c:e4:
                    43:81:40:73:1e:28:a8:9f:0e:dd:c8:26:29:69:72:
                    54:a2:6f:91:54:fc:1b:6b:e4:90:09:d5:74:0b:b0:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3B:44:60:E9:23:45:A2:42:AA:22:42:EF:52:0A:9B:92:91:80:F3
            X509v3 Authority Key Identifier:
                keyid:3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/34352e3233382e3233302e302f32342d3234203d3e20323638333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:8e:65:04:ff:08:14:be:33:b0:bf:0c:ba:68:69:fd:bd:e9:
         ed:25:53:d9:c6:30:4c:8e:e9:1d:ad:83:dc:21:f3:9a:96:13:
         15:55:1b:b9:9b:c5:ab:fd:5c:4c:38:7f:ca:97:64:1e:8a:bf:
         3f:1e:48:79:a8:3b:8a:d2:ed:67:d9:64:67:4a:73:71:7b:b2:
         e4:e0:52:e2:0c:8e:5b:0d:7c:e2:10:6a:fb:3e:ba:60:d5:08:
         81:5d:dc:2c:71:0c:04:cb:1f:a5:a1:5c:d7:ac:a6:9b:23:42:
         6f:26:46:56:70:7f:87:a4:1f:d9:6a:ce:91:2e:1d:66:f7:63:
         d0:cb:a0:65:47:43:b1:f4:e0:6e:c6:a1:73:dc:ce:4f:7d:24:
         c4:a7:e3:26:6b:16:48:7b:15:97:00:44:9e:65:08:cb:65:de:
         50:65:59:78:e7:a4:96:36:f2:5c:67:1f:d0:2a:2e:f9:38:48:
         22:5e:8e:8b:c5:e6:65:a1:85:1c:e4:10:c2:a8:ac:e5:c1:7a:
         cc:ae:cd:6a:ed:9b:df:82:5f:46:89:51:dc:59:91:26:a9:a2:
         fb:2b:81:cf:31:ec:1e:c1:c8:4b:c9:9c:8d:c6:67:1b:e0:23:
         fd:15:ce:0d:34:25:f8:0a:68:a3:f2:d7:9e:9f:be:23:78:30:
         bf:27:bc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:28 2025 by rpki-client