Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33342e302f32342d3234203d3e20323636393238.roa
File:                     34352e3232352e33342e302f32342d3234203d3e20323636393238.roa (raw, json)
Hash identifier:          0eF/ewSkEDFo49jFmRRiS5oF9YuH1AuRirHu/Aqkh0M=
Subject key identifier:   2C:0B:77:2E:0A:6D:FA:E3:FA:3C:BC:44:8B:16:8F:17:AC:D1:75:8F
Certificate issuer:       /CN=3CA7B50C9761C3D5278E34F848A83124161D5747
Certificate serial:       79747B18595649837072032EC0D7061A267B84CA
Authority key identifier: 3C:A7:B5:0C:97:61:C3:D5:27:8E:34:F8:48:A8:31:24:16:1D:57:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CA7B50C9761C3D5278E34F848A83124161D5747.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33342e302f32342d3234203d3e20323636393238.roa
Signing time:             Mon 10 Oct 2022 16:00:04 +0000
ROA not before:           Mon 10 Oct 2022 15:55:04 +0000
ROA not after:            Mon 09 Oct 2023 16:00:04 +0000
asID:                     266928
IP address blocks:        45.225.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:74:7b:18:59:56:49:83:70:72:03:2e:c0:d7:06:1a:26:7b:84:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA7B50C9761C3D5278E34F848A83124161D5747
        Validity
            Not Before: Oct 10 15:55:04 2022 GMT
            Not After : Oct  9 16:00:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:65:99:7e:6e:df:6a:9d:ad:d0:18:38:f5:
                    55:66:5e:50:7b:ed:2a:72:44:f4:b4:83:06:fe:7e:
                    43:b2:db:f3:d6:71:ba:c5:69:f9:a3:d8:96:a1:c2:
                    1c:0c:1a:f3:40:47:4e:1e:94:44:4b:7a:c2:a4:07:
                    2d:3e:d6:5c:15:e6:a8:7a:6f:d9:33:48:b7:e7:c1:
                    b7:8a:8d:fb:c0:2d:62:27:59:db:06:14:39:28:ca:
                    3b:d8:a9:b6:ab:d9:73:67:47:97:cf:48:7c:7e:de:
                    c8:d7:9c:3a:6d:71:5e:d8:df:f7:de:83:f6:40:05:
                    f0:a2:75:0c:51:18:76:22:7d:ca:2b:49:22:2c:8e:
                    2f:c5:aa:7d:14:76:2b:05:14:4c:66:b6:60:46:00:
                    dc:bd:9d:29:ec:99:cc:1a:20:31:c9:bd:1e:34:c0:
                    e5:9c:02:4a:27:af:58:1c:8c:56:1b:d6:ee:a8:15:
                    7c:5d:71:43:df:0a:fd:3a:3f:d0:5c:74:9d:ac:9d:
                    1c:32:98:48:e6:11:9b:1f:da:74:b6:4a:74:2e:70:
                    b9:d3:55:c6:62:9c:b6:5b:9b:0e:70:14:2d:50:ba:
                    77:d8:a9:76:6e:4f:0b:19:b1:ea:ac:26:76:44:1e:
                    db:be:8d:c6:14:5e:a0:8f:a0:fe:34:3a:72:36:2c:
                    4f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0B:77:2E:0A:6D:FA:E3:FA:3C:BC:44:8B:16:8F:17:AC:D1:75:8F
            X509v3 Authority Key Identifier:
                keyid:3C:A7:B5:0C:97:61:C3:D5:27:8E:34:F8:48:A8:31:24:16:1D:57:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/3CA7B50C9761C3D5278E34F848A83124161D5747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CA7B50C9761C3D5278E34F848A83124161D5747.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33342e302f32342d3234203d3e20323636393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:2e:aa:49:ef:e5:8c:51:6c:5b:b7:dd:7a:45:f6:58:66:
         41:fc:fe:d0:28:b5:f9:7a:02:71:d6:f0:e9:c5:3b:5a:88:0c:
         8f:04:22:4b:e4:dc:7f:4f:d2:62:0f:cd:97:dd:1c:2a:72:ad:
         e9:db:9b:f1:fa:3a:75:a6:7d:ba:e6:2c:e3:ed:65:48:fd:af:
         55:f4:cc:31:b3:8a:1e:77:8d:0c:11:81:18:1a:b4:8b:1e:2e:
         2f:4b:23:75:f3:3d:b9:5a:ee:b6:29:d2:44:0c:0a:8b:90:7a:
         e5:0c:9b:73:54:37:08:4f:27:c2:d4:43:ea:73:42:68:dc:9f:
         30:3b:3a:8b:47:0b:56:44:76:2a:0c:a8:0e:b7:40:b3:58:13:
         bb:ce:dd:3a:55:06:db:17:51:dd:da:be:0f:4a:e2:2f:c6:18:
         52:aa:b4:ff:91:59:76:3d:c5:1b:45:25:54:74:05:53:8a:1d:
         15:ad:01:77:ae:eb:f0:6f:70:dd:41:9b:50:3b:50:ad:8c:d6:
         08:99:a1:ad:cc:86:05:91:93:66:65:32:80:a6:79:3c:5c:ad:
         ec:e3:cb:8b:d8:94:fd:d2:b3:1f:cb:4b:c3:56:95:09:f6:2a:
         a3:30:8a:8f:f8:c4:b2:c7:18:05:5a:33:79:9b:e7:51:ff:21:
         1e:e9:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:16 2025 by rpki-client