Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33332e302f32342d3234203d3e20323636393238.roa
File:                     34352e3232352e33332e302f32342d3234203d3e20323636393238.roa (raw, json)
Hash identifier:          +yZ9jwmlSalas0KSo/l3RlC0LGSjNVE01lDr4sPCE1s=
Subject key identifier:   8D:E6:9B:C5:1F:3E:A9:F7:64:D5:90:5F:22:4C:98:E8:5D:36:39:33
Certificate issuer:       /CN=3CA7B50C9761C3D5278E34F848A83124161D5747
Certificate serial:       63A833550BA66579C9CD3FCB9773FBF0E2CCEA8B
Authority key identifier: 3C:A7:B5:0C:97:61:C3:D5:27:8E:34:F8:48:A8:31:24:16:1D:57:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CA7B50C9761C3D5278E34F848A83124161D5747.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33332e302f32342d3234203d3e20323636393238.roa
Signing time:             Mon 10 Oct 2022 16:00:05 +0000
ROA not before:           Mon 10 Oct 2022 15:55:05 +0000
ROA not after:            Mon 09 Oct 2023 16:00:05 +0000
asID:                     266928
IP address blocks:        45.225.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a8:33:55:0b:a6:65:79:c9:cd:3f:cb:97:73:fb:f0:e2:cc:ea:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA7B50C9761C3D5278E34F848A83124161D5747
        Validity
            Not Before: Oct 10 15:55:05 2022 GMT
            Not After : Oct  9 16:00:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:e3:c4:da:9d:1e:2d:59:fa:f6:cc:93:11:
                    c3:c7:92:fc:1f:d1:ab:79:8e:f8:71:55:c8:9e:1a:
                    18:8e:0e:c1:c0:f9:a1:ac:bb:1e:01:56:00:0b:df:
                    72:59:ae:c3:1d:d8:98:86:e6:a0:59:6a:de:0b:fd:
                    3a:9e:bb:e2:4e:16:25:14:83:06:35:e3:c9:e2:2a:
                    85:83:b5:11:f5:7d:7e:8d:53:5a:f9:d5:fa:12:0c:
                    49:63:91:10:77:a9:ec:d6:1c:6d:8d:8c:5f:36:3a:
                    82:fe:c0:7b:b5:fa:34:97:55:cb:05:0b:dd:1c:59:
                    7a:85:e8:13:4c:96:63:ba:51:5c:72:39:b8:39:ee:
                    05:5e:f0:75:87:92:e1:93:be:ee:bb:c0:a2:d0:7b:
                    bd:6b:dd:cd:4a:64:61:e3:af:2b:8b:91:7f:52:57:
                    27:c8:73:bb:10:28:a5:91:53:01:b8:9e:98:3f:2a:
                    d1:69:59:ed:7e:79:1e:45:21:ef:d4:bc:35:aa:af:
                    35:bd:d8:e3:a1:7f:cc:6e:35:ff:83:4e:a9:e0:69:
                    4e:a1:0e:98:7c:56:f5:ec:07:78:60:10:b2:60:09:
                    ff:97:fc:4f:14:67:03:0c:4f:df:54:91:24:92:b3:
                    c8:4a:ae:17:45:e5:e6:20:0a:83:65:14:ad:f8:12:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E6:9B:C5:1F:3E:A9:F7:64:D5:90:5F:22:4C:98:E8:5D:36:39:33
            X509v3 Authority Key Identifier:
                keyid:3C:A7:B5:0C:97:61:C3:D5:27:8E:34:F8:48:A8:31:24:16:1D:57:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/3CA7B50C9761C3D5278E34F848A83124161D5747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CA7B50C9761C3D5278E34F848A83124161D5747.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33332e302f32342d3234203d3e20323636393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:20:2b:0e:bf:30:1c:53:16:bb:b1:48:83:8d:47:d3:8c:16:
         6c:36:20:e6:f6:27:46:88:b4:ed:dd:1b:6d:6d:af:30:f2:db:
         cc:dc:d0:b3:81:ec:3d:2c:78:a7:6b:0d:68:73:ad:6c:e6:bd:
         ae:07:c5:4d:1d:96:a1:1d:25:34:4b:4e:b4:24:11:5d:ba:a5:
         5f:70:cc:70:3d:ac:46:ae:05:fb:50:7a:4c:6b:e2:8f:11:46:
         3f:8d:96:0a:14:d7:d6:62:03:cd:4c:83:eb:37:91:95:7c:c9:
         dd:b0:e0:71:13:72:91:27:57:c3:c6:96:8b:00:78:85:b2:5c:
         ba:ea:0a:1f:c0:65:14:3c:69:5e:ea:c6:b0:1b:0e:4d:96:75:
         ac:75:00:38:8c:d6:3b:5e:f9:1e:d1:ab:11:36:36:a0:ab:bf:
         80:dc:9f:05:15:d5:0c:80:4b:8a:63:da:b0:56:82:df:81:69:
         e5:20:c3:3c:ae:33:2b:35:67:7f:0f:3c:9a:af:49:ae:fd:d1:
         f2:5a:4d:73:42:c3:8f:df:a8:59:9c:12:38:30:a9:a3:dc:8b:
         30:2e:a2:b9:83:cf:0b:42:63:46:f7:6b:3a:41:37:9e:7b:83:
         a3:5c:fd:98:1f:1e:39:34:c9:5a:70:9b:cd:20:da:c7:7e:85:
         a4:7e:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:47 2025 by rpki-client