Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32332d3332203d3e20323639323538.roa
File:                     34352e3233392e3134302e302f32332d3332203d3e20323639323538.roa (raw, json)
Hash identifier:          wb1uSsmPZkwEO1dqNyMdaCi6OlSlY5EeSWLujeNr/sU=
Subject key identifier:   D9:59:26:CB:48:0A:8D:20:95:56:4B:92:F5:AF:C5:A1:2C:61:74:37
Certificate issuer:       /CN=3C56226A2217A64211E52D9EA9527FAAF1587160
Certificate serial:       7240C2F278E73D2D9045EDD5DD8B023C6A98A0E6
Authority key identifier: 3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32332d3332203d3e20323639323538.roa
Signing time:             Wed 31 May 2023 00:53:03 +0000
ROA not before:           Wed 31 May 2023 00:48:03 +0000
ROA not after:            Wed 29 May 2024 00:53:03 +0000
asID:                     269258
IP address blocks:        45.239.140.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:40:c2:f2:78:e7:3d:2d:90:45:ed:d5:dd:8b:02:3c:6a:98:a0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C56226A2217A64211E52D9EA9527FAAF1587160
        Validity
            Not Before: May 31 00:48:03 2023 GMT
            Not After : May 29 00:53:03 2024 GMT
        Subject: CN=D95926CB480A8D2095564B92F5AFC5A12C617437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:0d:8a:7e:96:03:0b:98:55:06:bd:59:e4:
                    92:07:82:f6:bb:4e:d8:19:c6:b8:97:24:a0:35:15:
                    ea:28:04:88:a5:76:be:17:76:a8:a1:7f:65:e7:3b:
                    27:96:59:7d:e8:c9:32:da:4c:d5:15:8a:3b:9b:6b:
                    14:ea:8c:77:31:b1:8a:62:60:fc:f8:77:92:6a:45:
                    75:12:d5:e0:83:b9:27:ee:5f:21:0c:60:b6:01:5e:
                    5e:f7:f9:8e:b7:d8:ad:c5:e7:80:0d:3f:5a:ab:43:
                    38:3b:83:79:75:fd:94:98:73:c6:90:bb:a8:e6:2d:
                    58:1a:25:0e:2c:61:bf:85:7f:b5:f4:f4:92:d9:24:
                    ce:a0:b6:cc:f6:63:43:99:0e:1d:42:53:6b:a5:8b:
                    72:25:93:25:57:ac:52:52:fd:7a:2c:0a:34:45:23:
                    48:7f:84:5a:47:b5:7a:27:43:8e:41:d8:d7:83:39:
                    83:f9:d0:94:40:78:ae:40:87:e7:36:6a:57:11:29:
                    c1:90:60:f2:02:35:45:fb:d3:96:16:ba:0f:3c:89:
                    64:9d:c9:78:ce:d3:de:d8:c5:35:8b:4f:96:f6:6c:
                    b3:e4:62:ea:7a:90:7c:ce:4b:a7:4d:08:fb:55:3f:
                    41:d0:b6:7b:f8:58:f9:6c:42:01:d4:cf:f4:b1:e7:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:59:26:CB:48:0A:8D:20:95:56:4B:92:F5:AF:C5:A1:2C:61:74:37
            X509v3 Authority Key Identifier:
                keyid:3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/3C56226A2217A64211E52D9EA9527FAAF1587160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32332d3332203d3e20323639323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:74:27:8e:b2:99:75:2f:1f:20:8a:4d:0f:35:25:96:ea:7b:
         7f:3e:61:de:cd:5e:60:e3:e9:1d:b3:2f:78:ce:05:c1:ae:5c:
         e6:2d:f0:cc:58:4b:97:d8:a2:66:e9:06:db:fa:5d:ed:0b:8f:
         c8:8b:27:9d:eb:a2:1e:31:b6:13:9f:e2:ab:c1:ea:84:91:d0:
         5c:fb:94:d2:52:e8:d4:08:b1:33:7e:19:ca:25:89:cc:4c:b6:
         52:9b:fa:00:6d:12:71:b1:9e:0a:6a:ad:f4:d0:0c:f5:84:58:
         e3:9e:2c:a7:75:76:c7:53:c9:c3:ad:b7:1f:bb:80:1a:5d:19:
         0d:59:97:d3:61:cc:ba:e1:c9:4c:c5:d6:1d:d5:0f:7b:18:91:
         e3:8f:08:50:15:8a:0a:01:09:5b:f4:0f:fb:12:55:9f:e8:9e:
         9c:75:5a:8d:b6:45:de:13:2c:49:19:10:b4:32:fe:df:97:2c:
         63:c1:ee:33:57:f6:ec:bd:cf:24:a3:0f:cf:ea:ca:21:65:d4:
         ec:b8:44:ac:37:d7:ec:49:db:d9:71:5c:b6:f2:1c:b8:cc:40:
         ea:d2:05:ae:ce:9f:0d:f3:7a:ed:95:c5:95:49:f3:09:70:68:
         c4:c8:90:36:8d:3c:bd:a2:bf:2d:82:54:eb:cc:85:0f:88:24:
         0d:80:9a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:27:14 2025 by rpki-client