Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3137352e3131362e302f32322d3234203d3e20323638383934.roa
File:                     34352e3137352e3131362e302f32322d3234203d3e20323638383934.roa (raw, json)
Hash identifier:          QztXnWHM1FgxmFMk6NBk0AzLhwKNhAdT+UyXWhIIqa4=
Subject key identifier:   D1:91:2D:CD:EA:EB:03:93:D7:FF:EB:41:F3:D4:21:69:86:DE:97:F7
Certificate issuer:       /CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
Certificate serial:       62006D221AF607A790AA793DD036B15D88D4C01D
Authority key identifier: 22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3137352e3131362e302f32322d3234203d3e20323638383934.roa
Signing time:             Mon 14 Feb 2022 12:03:45 +0000
ROA not before:           Mon 14 Feb 2022 11:58:45 +0000
ROA not after:            Mon 13 Feb 2023 12:03:45 +0000
asID:                     268894
IP address blocks:        45.175.116.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:00:6d:22:1a:f6:07:a7:90:aa:79:3d:d0:36:b1:5d:88:d4:c0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D119B99101091409CB2C64663C9A0D0F94DC5F
        Validity
            Not Before: Feb 14 11:58:45 2022 GMT
            Not After : Feb 13 12:03:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d4:4c:7a:e1:b2:e1:aa:4f:10:37:dd:fd:21:
                    d4:0f:79:38:60:9a:b5:9c:ae:91:40:b1:8b:3e:7f:
                    a3:a8:fc:20:41:73:01:70:f7:63:39:0b:01:f6:0e:
                    49:09:4f:b0:12:a5:90:4c:d4:4f:2d:18:ca:90:6c:
                    e1:5e:50:1a:4b:2e:ef:d3:1d:03:ce:76:6f:15:0d:
                    09:43:ec:f1:8d:c9:f4:51:3b:9f:99:a6:23:d7:eb:
                    eb:b7:fd:7e:7e:2c:98:c9:7a:5d:41:34:08:18:e3:
                    1b:d6:6c:83:7e:c8:0f:e5:5f:ed:f5:81:4d:b8:65:
                    10:3d:e6:bb:03:d7:64:4f:36:e3:31:25:d4:cb:b8:
                    ad:bd:ca:50:b4:7a:ba:59:a4:15:e9:b5:15:41:5d:
                    de:24:db:61:9d:f3:93:c8:a7:10:dd:d7:74:58:6f:
                    89:c4:16:40:6e:62:0f:4e:e8:f3:4b:bc:7b:7d:81:
                    8a:74:46:73:73:8e:55:7f:40:89:27:c8:cd:2d:60:
                    a0:4e:7a:19:2c:b1:5d:b4:65:7b:58:87:fc:ba:e7:
                    78:2d:2b:23:5e:a6:78:eb:83:dd:fc:c9:f1:f6:47:
                    f1:60:59:28:a9:00:d3:fc:d7:cc:e6:1c:70:69:83:
                    03:ee:bc:b5:3d:82:90:27:6a:c3:37:f8:68:78:5c:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:91:2D:CD:EA:EB:03:93:D7:FF:EB:41:F3:D4:21:69:86:DE:97:F7
            X509v3 Authority Key Identifier:
                keyid:22:D1:19:B9:91:01:09:14:09:CB:2C:64:66:3C:9A:0D:0F:94:DC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D119B99101091409CB2C64663C9A0D0F94DC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/34352e3137352e3131362e302f32322d3234203d3e20323638383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:00:bf:d6:6b:bb:9f:a5:ae:62:7c:80:fd:f0:47:01:f8:73:
         61:c7:b6:25:f8:d8:f9:8b:e6:58:c8:f2:a9:48:41:47:a8:bd:
         24:a8:2f:5e:02:b8:f0:5b:67:cc:6f:b5:fd:a5:a2:0e:a4:8e:
         74:da:b0:18:f1:e9:e6:29:e0:7e:e9:fa:44:ce:48:d8:5c:37:
         67:a5:4f:7c:1c:a2:85:18:ec:eb:9e:99:87:98:2c:a0:18:94:
         33:68:b8:2e:51:04:ec:5a:5b:7a:12:e7:c9:05:ae:8e:ec:30:
         d9:8d:de:b4:62:68:15:8c:d1:5b:d9:f5:50:56:12:36:65:63:
         fa:bd:5d:07:a1:08:37:51:6e:c2:f7:f5:f1:08:99:b5:10:5a:
         d9:87:5c:6d:6f:dc:86:3e:4e:75:96:76:b5:61:90:27:08:47:
         8d:a4:b2:18:fe:f0:59:5d:f1:a8:81:40:1b:3b:03:19:96:61:
         cd:3d:32:c7:49:a5:9e:1d:e4:fd:87:92:83:f5:b2:fc:f7:f9:
         07:d1:f6:6f:63:59:5f:da:ea:3a:76:02:2a:43:03:f8:7a:72:
         a9:56:07:56:f6:d6:a4:11:a4:70:6c:71:07:c0:53:87:a4:76:
         98:b9:24:60:6d:da:f3:29:81:8d:53:a5:0d:5b:a2:27:eb:07:
         d0:30:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:53 2025 by rpki-client