Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234342e302f32342d3234203d3e20323636393939.roa
File:                     34352e3232362e3234342e302f32342d3234203d3e20323636393939.roa (raw, json)
Hash identifier:          Oz2py8M38b6+IFtgGxJQ7+08+mlY/NRvURj/hhR7v6Q=
Subject key identifier:   1E:9B:D0:DB:2D:F0:FC:65:B7:ED:93:34:E9:C4:74:EB:D2:AC:20:0A
Certificate issuer:       /CN=A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D
Certificate serial:       1FA7C5C5BC5DB5A967CAA7ED67E77A197A622525
Authority key identifier: A5:B8:A0:40:1A:3B:D4:83:DA:C7:81:AF:F2:E5:3D:7E:1B:EC:6B:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234342e302f32342d3234203d3e20323636393939.roa
Signing time:             Sun 18 Sep 2022 19:51:17 +0000
ROA not before:           Sun 18 Sep 2022 19:46:17 +0000
ROA not after:            Sun 17 Sep 2023 19:51:17 +0000
asID:                     266999
IP address blocks:        45.226.244.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a7:c5:c5:bc:5d:b5:a9:67:ca:a7:ed:67:e7:7a:19:7a:62:25:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D
        Validity
            Not Before: Sep 18 19:46:17 2022 GMT
            Not After : Sep 17 19:51:17 2023 GMT
        Subject: CN=1E9BD0DB2DF0FC65B7ED9334E9C474EBD2AC200A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:2b:09:02:9c:8f:ba:f2:fc:37:f5:59:58:
                    5a:30:a0:9b:95:b4:a6:3e:d8:a5:8e:d1:f5:3c:a3:
                    5a:ea:f0:87:e2:ad:db:bb:ed:9b:c6:93:16:e5:a5:
                    38:40:2e:6f:77:b5:d7:80:4b:32:28:7f:9c:f4:67:
                    6d:6e:37:fd:8f:ad:15:6d:23:c7:92:50:26:c9:3a:
                    f9:6d:94:d3:87:18:43:35:7d:88:f4:b5:58:a6:8e:
                    0a:61:76:93:4b:6f:34:22:ea:af:cb:60:02:b5:a2:
                    37:3a:23:76:92:51:e0:26:9f:d8:8f:42:00:d1:55:
                    7c:3e:4b:8b:d1:4b:4e:c5:ff:cd:a8:e8:55:73:8d:
                    88:a4:3f:5e:bd:5a:2c:8d:df:d2:47:46:f2:1c:54:
                    45:cf:e0:1e:34:39:91:12:00:fc:98:99:44:fc:4e:
                    99:0a:bd:48:db:bb:7e:93:8e:13:2e:02:2b:2f:0c:
                    49:51:03:8e:e3:3d:16:32:88:72:d2:e5:e4:57:33:
                    bc:62:8b:df:b8:ee:7e:c2:78:b5:61:8c:83:20:ad:
                    b7:cd:95:e1:fe:fe:a1:39:c4:4d:86:da:ec:da:a5:
                    9e:01:49:87:fe:6a:d9:0f:9d:0e:e7:2b:77:32:af:
                    ca:c9:c8:2f:8d:f3:dc:6a:36:88:51:33:29:dd:67:
                    60:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9B:D0:DB:2D:F0:FC:65:B7:ED:93:34:E9:C4:74:EB:D2:AC:20:0A
            X509v3 Authority Key Identifier:
                keyid:A5:B8:A0:40:1A:3B:D4:83:DA:C7:81:AF:F2:E5:3D:7E:1B:EC:6B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234342e302f32342d3234203d3e20323636393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fe:e2:fe:c6:87:59:40:87:56:80:cf:d8:2f:85:7a:19:d2:
         a6:67:e1:04:70:c2:85:db:52:e5:f3:e8:d6:4f:40:d6:36:60:
         6c:ae:fe:f7:35:3f:71:e1:02:74:36:db:2d:ff:2a:b9:2b:3f:
         9f:03:c4:aa:df:c8:7f:04:da:7c:cf:4d:1c:8e:55:d5:39:10:
         5f:63:6c:58:82:92:54:30:3b:d1:d7:5f:65:a1:97:16:c7:a8:
         2b:4c:3b:86:7f:5f:5c:2c:b5:4e:de:f3:d6:85:61:8f:54:1a:
         34:46:3d:83:a6:31:fb:01:e4:cb:24:9a:08:98:37:9c:b6:6b:
         29:f5:e7:5f:db:b5:d8:f1:55:d9:f2:2d:e4:a0:50:c8:7e:e7:
         79:68:32:8e:af:2e:cb:28:e7:02:ff:85:67:26:6d:3d:7c:16:
         34:e0:9e:33:2a:81:c9:56:88:39:5f:f6:bf:71:92:14:1d:ac:
         1b:aa:10:ab:3f:5e:07:2d:8f:7f:b7:ac:57:17:7b:bc:cf:d2:
         9f:b1:68:48:0a:5f:b0:7c:3e:ca:78:ca:bc:d1:8e:c8:f8:39:
         26:83:3f:bc:f5:39:e9:27:62:2b:66:04:d0:eb:dc:23:21:aa:
         0f:02:57:33:3f:b8:d7:7a:6d:40:ff:bc:62:db:7e:c6:33:80:
         3e:0e:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:03:48 2025 by rpki-client