Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33352e302f32342d3234203d3e20323636393238.roa
File:                     34352e3232352e33352e302f32342d3234203d3e20323636393238.roa (raw, json)
Hash identifier:          bz6flnJz/FETtOLBC5Ej47CvJ4ilP5q0Q+3waNR+D/k=
Subject key identifier:   F0:8B:CC:9E:0A:09:6A:8F:0A:7E:E5:98:D9:E9:5E:D8:3A:BC:F8:7E
Certificate issuer:       /CN=3CA7B50C9761C3D5278E34F848A83124161D5747
Certificate serial:       727937E38DBC601CE75F04765C9D65504196712E
Authority key identifier: 3C:A7:B5:0C:97:61:C3:D5:27:8E:34:F8:48:A8:31:24:16:1D:57:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CA7B50C9761C3D5278E34F848A83124161D5747.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33352e302f32342d3234203d3e20323636393238.roa
Signing time:             Mon 10 Oct 2022 16:00:01 +0000
ROA not before:           Mon 10 Oct 2022 15:55:01 +0000
ROA not after:            Mon 09 Oct 2023 16:00:01 +0000
asID:                     266928
IP address blocks:        45.225.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:79:37:e3:8d:bc:60:1c:e7:5f:04:76:5c:9d:65:50:41:96:71:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA7B50C9761C3D5278E34F848A83124161D5747
        Validity
            Not Before: Oct 10 15:55:01 2022 GMT
            Not After : Oct  9 16:00:01 2023 GMT
        Subject: CN=3082010A0282010100D1079C55360179E5BFB5A08148E52D7592410B9701C2DF84E341FF35EBBA60B511B9215416BF800CFC5706A7B08647E8D42E55E1CAB98405DA8AEE441328E65677CC9333C41D8DFF8A17353C2866F4423D6C55143F8B5ED961E851F249508639C3D850293B5079323536E2FE7D02D7C724F437A14328EB0FF2971ACB34D4D56C011BE1F97031008A94B336977D0C093B7821CD9926EE341101AC49664E3487BB01172749895650FBA7965D8A8BFDEA73E060F2914CA7339FA99D0AEA11B6C4CDF8E88140607976CE6862949C6F3D9395573FAE21F3C51726CF036D4E9CB753E61FDA6091A00D655EC3A1F12839227C7907B06EF6C9EE289A69ABFD4804B7F85F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:9c:55:36:01:79:e5:bf:b5:a0:81:48:e5:
                    2d:75:92:41:0b:97:01:c2:df:84:e3:41:ff:35:eb:
                    ba:60:b5:11:b9:21:54:16:bf:80:0c:fc:57:06:a7:
                    b0:86:47:e8:d4:2e:55:e1:ca:b9:84:05:da:8a:ee:
                    44:13:28:e6:56:77:cc:93:33:c4:1d:8d:ff:8a:17:
                    35:3c:28:66:f4:42:3d:6c:55:14:3f:8b:5e:d9:61:
                    e8:51:f2:49:50:86:39:c3:d8:50:29:3b:50:79:32:
                    35:36:e2:fe:7d:02:d7:c7:24:f4:37:a1:43:28:eb:
                    0f:f2:97:1a:cb:34:d4:d5:6c:01:1b:e1:f9:70:31:
                    00:8a:94:b3:36:97:7d:0c:09:3b:78:21:cd:99:26:
                    ee:34:11:01:ac:49:66:4e:34:87:bb:01:17:27:49:
                    89:56:50:fb:a7:96:5d:8a:8b:fd:ea:73:e0:60:f2:
                    91:4c:a7:33:9f:a9:9d:0a:ea:11:b6:c4:cd:f8:e8:
                    81:40:60:79:76:ce:68:62:94:9c:6f:3d:93:95:57:
                    3f:ae:21:f3:c5:17:26:cf:03:6d:4e:9c:b7:53:e6:
                    1f:da:60:91:a0:0d:65:5e:c3:a1:f1:28:39:22:7c:
                    79:07:b0:6e:f6:c9:ee:28:9a:69:ab:fd:48:04:b7:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8B:CC:9E:0A:09:6A:8F:0A:7E:E5:98:D9:E9:5E:D8:3A:BC:F8:7E
            X509v3 Authority Key Identifier:
                keyid:3C:A7:B5:0C:97:61:C3:D5:27:8E:34:F8:48:A8:31:24:16:1D:57:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/3CA7B50C9761C3D5278E34F848A83124161D5747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CA7B50C9761C3D5278E34F848A83124161D5747.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiWRkoJF5PmDHmVJGSp7n7aocrEtQc3PZFuVYb5VRBMx/0/34352e3232352e33352e302f32342d3234203d3e20323636393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:2b:18:17:3e:d3:73:d5:d6:0f:23:91:55:27:d9:1f:15:9e:
         ee:70:0a:06:29:b1:e0:cb:bb:b9:81:97:1a:24:ab:86:0b:76:
         52:f1:bb:fc:f0:63:8e:16:11:f5:4c:2a:53:34:54:4d:8c:ba:
         f6:26:64:d5:89:94:be:f4:68:b0:fe:86:03:ce:b5:c7:69:12:
         72:c9:21:ec:89:48:63:7d:32:f3:e8:5b:3e:15:05:93:de:18:
         4d:05:47:e7:77:55:b4:61:6e:ec:f0:4e:42:a6:14:46:f5:8d:
         48:ff:7b:76:1f:13:0f:bf:cc:d1:09:5d:6a:e3:54:c6:07:c0:
         cc:c1:7c:e6:55:c4:27:37:f3:00:e2:a9:e9:a2:87:ef:80:fe:
         02:a3:48:36:ee:47:29:d7:cf:ce:05:7a:9b:db:60:84:13:4c:
         dc:2c:79:8f:f1:86:e7:b8:bd:b3:a2:66:b5:60:11:62:b2:00:
         a1:20:4a:5c:41:b0:5a:ec:cf:2e:7e:dd:f5:b7:d2:26:fe:dc:
         19:cd:d5:eb:5a:68:e2:36:f4:26:9a:45:60:a5:cf:89:ee:da:
         c7:c3:c1:c7:86:0e:4a:e3:c8:0d:68:a2:43:a5:3c:19:86:a9:
         00:62:78:47:70:f8:57:69:e2:9e:0a:95:e9:cb:54:3c:4a:22:
         f2:96:41:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:30 2025 by rpki-client