Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3232203d3e20323639313934.roa
File:                     34352e3233382e3233362e302f32322d3232203d3e20323639313934.roa (raw, json)
Hash identifier:          ArtV9+P7hWLnlaCHaPVfVFg0VwU58cUWOKQ+ZHk2kbU=
Subject key identifier:   CA:99:4F:27:C0:FC:96:49:83:8A:EB:5F:E9:3A:4C:2B:75:10:A5:B7
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       26224F6AFA44175950BBAE748B0D65D9DE298542
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3232203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:39 +0000
ROA not before:           Sat 29 Jul 2023 16:21:39 +0000
ROA not after:            Sat 27 Jul 2024 16:26:39 +0000
asID:                     269194
IP address blocks:        45.238.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:22:4f:6a:fa:44:17:59:50:bb:ae:74:8b:0d:65:d9:de:29:85:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:39 2023 GMT
            Not After : Jul 27 16:26:39 2024 GMT
        Subject: CN=CA994F27C0FC9649838AEB5FE93A4C2B7510A5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:78:1d:4d:57:5a:4f:b1:ed:08:e4:b0:e6:60:
                    2e:a4:69:90:be:31:1d:4b:c8:26:9d:a9:dd:e2:a6:
                    9b:54:e5:de:67:7a:9e:16:65:e5:45:68:b0:96:d5:
                    15:e8:77:bf:ec:44:24:0d:2e:39:b3:4e:00:5c:12:
                    e5:2b:97:f4:1e:87:78:61:b3:ab:12:ec:30:c5:cc:
                    e8:95:2a:fc:fc:0e:e2:84:7c:31:3a:f5:02:ae:17:
                    46:92:c2:70:d2:64:b5:85:00:b9:b7:0d:4f:d4:76:
                    be:6f:44:de:0d:4e:68:e6:bb:66:ce:d2:ae:67:fc:
                    3f:af:87:32:ec:95:c0:fc:bb:27:b1:ac:7b:fd:21:
                    6c:32:7c:de:a1:00:3e:b4:a8:04:89:6c:d7:c6:8c:
                    9a:f6:28:7c:3d:fb:62:88:59:ff:23:2b:c5:cc:86:
                    21:08:f8:7e:2b:ce:fe:51:ca:65:39:4e:21:48:15:
                    db:68:8f:ea:d4:bc:ee:ba:cc:39:a3:8c:4a:0d:2c:
                    32:d7:25:8f:79:05:09:56:3d:70:b1:96:80:90:59:
                    6d:52:99:0e:3a:f4:70:3b:48:58:71:d9:ee:60:33:
                    fe:6e:b1:1a:9a:a8:eb:2b:f7:51:f8:76:e6:24:72:
                    bb:eb:63:40:3e:99:f6:40:12:78:b5:b1:86:3f:0c:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:99:4F:27:C0:FC:96:49:83:8A:EB:5F:E9:3A:4C:2B:75:10:A5:B7
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3232203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:b7:99:73:ed:83:09:b8:53:a7:2d:a6:d4:d2:8f:01:d8:7f:
         66:1c:12:5d:22:f7:e5:75:48:79:ad:17:b5:46:ae:b3:57:48:
         e7:02:e5:4e:2a:af:25:7e:4e:a5:86:ca:6e:f2:4a:61:41:01:
         03:5a:47:0a:d0:4f:4b:ac:92:19:79:da:9c:99:2b:5a:78:da:
         1e:7d:5a:05:f0:34:55:f2:34:cc:30:4c:8e:a0:e8:35:a3:e6:
         61:c3:c5:f7:d7:7d:24:dd:22:1c:79:64:c1:55:6d:34:0e:74:
         9d:7e:7f:e6:81:72:15:62:35:9b:e1:bc:6d:2e:0a:9b:99:7c:
         cf:03:98:b9:36:4f:6c:35:c4:08:75:6b:9a:53:3d:8f:b6:63:
         2f:20:41:46:a1:9e:0d:84:31:e9:0f:db:9a:ca:b2:24:df:15:
         9b:0b:27:53:d2:29:32:99:e2:5b:71:13:27:24:1b:18:8e:bd:
         f8:31:18:0b:e5:8b:0c:b3:29:36:1f:cd:13:42:26:4d:90:c0:
         76:3e:3d:67:cf:08:b6:1b:d8:66:98:e9:6f:b8:f7:39:0d:4e:
         96:f4:7e:eb:9e:4d:dc:b4:0d:ac:39:01:ec:c8:35:70:4c:fd:
         06:1a:f1:00:a2:00:a1:ca:6a:ef:b1:04:94:3d:08:f3:ef:f6:
         c7:f9:87:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:15:24 2025 by rpki-client