Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/1/34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa
File:                     34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa (raw, json)
Hash identifier:          ypVYv3sk9XylOriKhrdD0+ytFr+g6Zafyf1ru1X0UAA=
Subject key identifier:   D0:6C:91:46:62:00:D0:C1:32:D9:DB:37:9B:01:E5:C3:9D:86:2C:04
Certificate issuer:       /CN=CADA9A4BEBDCF038604FFC030281FA62B7331B92
Certificate serial:       1A79591063B5E7FF0B8A47EE192607B3D4057AC4
Authority key identifier: CA:DA:9A:4B:EB:DC:F0:38:60:4F:FC:03:02:81:FA:62:B7:33:1B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CADA9A4BEBDCF038604FFC030281FA62B7331B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/1/34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa
Signing time:             Mon 19 Jun 2023 15:42:33 +0000
ROA not before:           Mon 19 Jun 2023 15:37:33 +0000
ROA not after:            Mon 17 Jun 2024 15:42:33 +0000
asID:                     268360
IP address blocks:        45.238.200.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:79:59:10:63:b5:e7:ff:0b:8a:47:ee:19:26:07:b3:d4:05:7a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CADA9A4BEBDCF038604FFC030281FA62B7331B92
        Validity
            Not Before: Jun 19 15:37:33 2023 GMT
            Not After : Jun 17 15:42:33 2024 GMT
        Subject: CN=D06C91466200D0C132D9DB379B01E5C39D862C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:49:8a:81:a5:7b:77:5f:2d:e6:5a:9d:46:
                    72:55:60:7b:0f:4b:f3:a8:74:ed:c6:95:fe:48:15:
                    68:9e:67:35:60:8f:47:c7:a0:44:a6:31:f9:a9:30:
                    56:b0:ec:57:49:1b:8d:1d:48:d3:b1:1f:a5:27:89:
                    d0:cc:a2:b4:07:d5:42:21:f5:71:2c:63:ad:da:ff:
                    3f:2a:4b:23:24:4b:4b:0c:b1:65:3a:06:89:8f:fc:
                    47:5a:0f:27:95:48:c1:34:20:6e:fe:e5:ae:da:0e:
                    f0:a9:f4:ff:63:7e:e9:da:19:87:de:23:75:c3:e2:
                    7e:29:0a:1f:04:9b:2f:ab:73:bd:62:25:77:50:0a:
                    29:9e:81:c2:08:fe:d5:b1:9d:9e:9c:80:1f:0c:ea:
                    13:2e:2b:1c:d6:a2:69:69:ad:38:dd:51:af:1e:a3:
                    82:d0:39:18:6f:8c:c3:e5:78:fa:16:78:21:24:73:
                    9c:70:40:e9:fa:ee:97:5f:30:8f:b7:4c:9c:2b:2e:
                    d7:7b:44:e7:b9:cb:3a:e3:ea:f4:0e:2c:cf:5a:40:
                    5d:4f:f3:7e:9a:b2:bb:50:07:83:1c:55:ac:70:2b:
                    1f:87:b2:c4:e1:21:70:51:17:70:3f:22:59:91:50:
                    10:fc:26:b6:d0:b5:0c:dd:6b:1a:1e:d2:a7:bc:42:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6C:91:46:62:00:D0:C1:32:D9:DB:37:9B:01:E5:C3:9D:86:2C:04
            X509v3 Authority Key Identifier:
                keyid:CA:DA:9A:4B:EB:DC:F0:38:60:4F:FC:03:02:81:FA:62:B7:33:1B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/1/CADA9A4BEBDCF038604FFC030281FA62B7331B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CADA9A4BEBDCF038604FFC030281FA62B7331B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/1/34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:d8:d0:67:a3:dc:40:3f:06:47:03:b9:1c:e4:8e:1e:73:34:
         30:5a:c3:7b:e3:25:df:d1:6f:56:43:82:ee:ad:af:d2:0b:08:
         71:9e:93:78:b4:c9:fd:b2:18:37:3e:ca:c1:b2:fd:84:87:4b:
         a0:5d:8c:d6:7f:49:32:58:3e:2b:d9:d0:f8:cb:35:10:cb:35:
         5d:cc:66:aa:99:f2:2b:5f:d4:db:e5:66:d8:5c:9d:9a:b0:eb:
         da:79:47:4a:90:d3:66:6b:96:ac:e1:dd:c1:cd:9b:81:62:02:
         4e:16:c2:c1:d5:4b:26:5f:2a:4e:54:3d:eb:d0:62:e0:13:e3:
         c8:e8:78:b1:b5:4a:6b:f1:19:e2:cd:3e:5a:c6:c4:9d:00:94:
         55:5f:bc:7c:cd:02:4c:f8:d3:e8:76:0f:c4:56:3b:a7:46:42:
         f1:8e:77:c7:e4:9c:d9:af:d3:f8:e8:5f:7e:66:5a:38:9d:5c:
         dd:52:9c:0c:5f:16:93:66:a8:30:41:d1:10:31:48:0d:47:4e:
         9c:50:94:4a:d6:0e:10:9b:0e:f2:e4:7a:3d:f8:4d:0e:33:31:
         a0:9e:34:b1:71:a2:a6:a5:41:59:ab:1b:cd:28:85:b9:47:0e:
         93:8f:89:bf:0d:65:ae:7d:4b:30:44:39:37:ed:78:d1:a8:8d:
         20:2d:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:44 2025 by rpki-client