Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35332e302f32342d3234203d3e20323638323037.roa
File:                     34352e3233352e35332e302f32342d3234203d3e20323638323037.roa (raw, json)
Hash identifier:          p+N6Kf7VQKV2npZpZSgaSwtkBI/U+x5yuQ8sgec2a1w=
Subject key identifier:   37:C1:DD:9C:96:45:E5:91:B4:38:BB:0A:69:49:8F:5F:1C:D3:29:B1
Certificate issuer:       /CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
Certificate serial:       26A632F98E3CAC2D576B1786F267394AA8E0CA2E
Authority key identifier: 46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35332e302f32342d3234203d3e20323638323037.roa
Signing time:             Mon 10 Apr 2023 13:35:09 +0000
ROA not before:           Mon 10 Apr 2023 13:30:09 +0000
ROA not after:            Mon 08 Apr 2024 13:35:09 +0000
asID:                     268207
IP address blocks:        45.235.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a6:32:f9:8e:3c:ac:2d:57:6b:17:86:f2:67:39:4a:a8:e0:ca:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46CFF885765688FD6A2CCCDB7EA70B837B74CD08
        Validity
            Not Before: Apr 10 13:30:09 2023 GMT
            Not After : Apr  8 13:35:09 2024 GMT
        Subject: CN=37C1DD9C9645E591B438BB0A69498F5F1CD329B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:07:80:fe:e6:c6:1d:c1:56:6d:ae:d1:e7:
                    75:95:00:3b:2c:c1:d4:1d:7d:71:d1:22:48:db:40:
                    16:7a:26:22:c3:5c:69:86:30:08:80:28:c2:b0:16:
                    ba:94:5c:a4:6c:65:22:3e:e2:6b:e4:3c:c0:e6:06:
                    ea:17:a2:62:25:4a:23:e2:ea:59:97:d3:d3:1e:ec:
                    d3:c0:f0:7f:b4:60:cf:5f:c8:09:ab:c3:73:a5:90:
                    29:f5:1d:17:56:93:77:40:74:96:4d:f9:36:4e:8a:
                    8e:38:21:5f:9d:12:3d:f6:b2:b0:1e:b3:c2:ec:c7:
                    3e:9e:cc:e0:24:9a:47:c7:33:ab:a3:5b:d1:bd:c8:
                    50:cf:71:21:b8:f4:72:f6:03:d1:33:01:0c:7f:7f:
                    c3:08:40:84:64:fa:55:29:17:3c:64:b7:21:fb:ee:
                    6b:62:bc:2e:c3:b2:75:81:db:a0:d7:c2:ab:9c:aa:
                    3c:67:98:fd:51:73:11:90:a8:ac:9d:56:95:57:b6:
                    f0:9d:e1:f5:63:97:86:6c:79:f2:83:12:ce:fc:69:
                    6b:c7:d8:96:df:38:32:e3:e9:96:c6:68:d6:28:c1:
                    96:56:95:6b:be:ef:e3:c8:2c:16:ea:f4:37:9c:f9:
                    7d:e7:58:89:10:20:91:19:e0:23:41:ab:f8:6b:cd:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C1:DD:9C:96:45:E5:91:B4:38:BB:0A:69:49:8F:5F:1C:D3:29:B1
            X509v3 Authority Key Identifier:
                keyid:46:CF:F8:85:76:56:88:FD:6A:2C:CC:DB:7E:A7:0B:83:7B:74:CD:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46CFF885765688FD6A2CCCDB7EA70B837B74CD08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/1/34352e3233352e35332e302f32342d3234203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:8b:f6:45:5f:78:ad:84:40:72:95:df:a9:29:b4:77:b9:
         d1:c4:27:b5:8a:18:60:c1:5f:99:42:3c:31:47:2e:0e:9d:69:
         9c:94:4e:14:98:8d:e7:62:a8:a6:1c:45:c3:e1:da:41:9b:be:
         8c:24:07:08:18:e2:a9:f9:44:49:34:c8:a1:55:bd:2d:90:b2:
         62:65:69:72:1b:ef:ec:df:b1:b3:4a:78:20:be:8a:0b:5c:1d:
         b4:fa:c4:bd:62:90:7b:25:dc:58:e5:43:34:62:05:fa:ed:9a:
         d6:29:27:3f:23:bf:d5:3d:dc:07:17:84:f0:a3:6d:c6:30:42:
         37:e2:ca:61:af:8a:07:e6:4b:07:2c:ac:24:33:e4:4d:77:04:
         73:96:58:cf:a9:ff:a8:84:32:2d:14:3d:59:82:34:f2:94:13:
         d1:e7:d3:80:30:89:77:f3:a1:b1:21:03:3e:af:e6:6c:c7:c3:
         13:ee:32:80:c9:96:4a:38:c8:fa:42:d4:d8:5f:a2:58:f0:ef:
         0f:55:a2:c2:3d:61:a3:15:b0:cc:2c:03:1a:0b:d6:50:ca:56:
         f4:92:32:e3:ff:ee:e0:5b:80:27:7a:32:b6:ae:a2:e0:99:ba:
         97:1b:a1:c1:55:57:f2:08:2f:c0:9c:a0:ee:f4:b5:b9:5f:e0:
         fa:90:36:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:11 2025 by rpki-client