Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa
File:                     34352e3233352e35322e302f32322d3234203d3e20323638323037.roa (raw, json)
Hash identifier:          N1y5X3IuA+FmG4JCcaCyoYB0+PjzC9iMGzTvVcX4Atc=
Subject key identifier:   DA:58:E6:4F:74:BB:A8:46:A0:B6:67:28:2B:69:83:40:60:0A:42:6F
Certificate issuer:       /CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
Certificate serial:       144142E0488B5E31E0197FCBBC6F192F4797B691
Authority key identifier: 46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa
Signing time:             Tue 21 Nov 2023 17:45:15 +0000
ROA not before:           Tue 21 Nov 2023 17:40:15 +0000
ROA not after:            Tue 19 Nov 2024 17:45:15 +0000
asID:                     268207
IP address blocks:        45.235.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:41:42:e0:48:8b:5e:31:e0:19:7f:cb:bc:6f:19:2f:47:97:b6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
        Validity
            Not Before: Nov 21 17:40:15 2023 GMT
            Not After : Nov 19 17:45:15 2024 GMT
        Subject: CN=DA58E64F74BBA846A0B667282B698340600A426F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:43:2c:be:c4:24:7e:68:23:2a:87:9a:be:
                    ed:60:7e:b8:bd:d6:6b:25:b6:76:27:51:e2:f4:1e:
                    f3:d3:70:03:fc:f3:f9:2a:92:c8:ba:0a:2f:88:12:
                    9d:51:1f:3d:29:be:6d:2f:b8:61:8e:2c:ee:98:73:
                    77:c2:cf:96:89:2b:28:27:b6:28:9f:56:44:37:a8:
                    77:d7:28:20:89:45:6f:47:93:46:17:97:fb:39:8a:
                    e0:92:70:5e:6b:f1:7d:e4:07:ec:f6:73:e4:4a:51:
                    08:59:66:a8:7b:3c:0c:71:6c:d8:e0:2d:b4:9d:09:
                    17:6f:18:eb:8f:09:37:5b:4f:ea:4c:b0:7b:87:29:
                    7d:e4:d2:f7:da:a3:23:6d:4c:58:7f:05:a8:40:21:
                    79:24:50:7b:e0:64:4a:28:cf:01:99:ed:93:af:46:
                    d3:a4:58:f8:30:8d:23:bd:86:8b:9c:2d:2e:76:ee:
                    16:39:75:f4:1b:8a:78:fe:94:98:42:c2:aa:f4:30:
                    e3:3c:35:02:36:80:6c:7f:8a:76:9c:ac:ac:22:25:
                    b7:95:7e:99:01:d6:8d:3b:a1:f6:cc:06:96:8f:d8:
                    ee:4c:fe:07:55:04:f8:5b:51:21:75:de:09:e6:57:
                    00:8b:cc:65:8a:ef:0c:5b:62:57:55:72:22:b4:57:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:58:E6:4F:74:BB:A8:46:A0:B6:67:28:2B:69:83:40:60:0A:42:6F
            X509v3 Authority Key Identifier:
                keyid:46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:92:87:4a:df:a8:af:ab:e2:a7:76:d2:88:1a:0d:35:b1:4a:
         49:9b:62:a4:20:86:1c:07:69:e6:8b:e6:d7:bf:4b:b3:98:b9:
         be:d8:21:2e:74:52:82:e2:90:50:0c:46:a7:c2:b6:14:24:9d:
         2b:39:83:24:03:7b:19:16:6a:b2:e6:02:12:d5:76:72:3a:3c:
         57:55:be:38:83:41:dc:32:d6:49:6d:2d:2b:3d:d8:18:2c:69:
         bd:3c:55:f2:4b:78:cd:a1:0c:b0:4a:1d:5b:ce:1f:67:8e:11:
         f7:29:79:09:d9:f2:4f:9c:24:83:71:84:ff:fd:39:bf:45:a8:
         f3:3c:ff:aa:13:29:75:6d:36:26:fa:6a:67:a3:2e:a3:75:34:
         4c:b4:3d:f8:82:71:09:34:5d:2f:bc:95:38:ea:10:19:73:5c:
         70:17:fc:dd:2c:01:ba:d0:a7:a6:19:26:e1:87:97:95:92:30:
         58:db:94:0a:11:6e:db:6f:8b:ef:96:90:42:db:41:49:d0:71:
         44:85:80:50:bc:85:5c:29:2a:a7:f9:2c:81:ea:3d:c8:04:8f:
         6c:af:95:fd:54:f8:c0:e7:42:6f:b4:e4:45:9a:83:e8:b9:9b:
         29:0c:ea:d9:3a:33:3d:46:e2:58:bb:a3:5e:7a:4f:37:13:9a:
         bc:6c:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:30:10 2025 by rpki-client