Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/34352e3233352e31362e302f32322d3234203d3e20323632333931.roa
File:                     34352e3233352e31362e302f32322d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          V8rwHiQugQ94t7BrGZcwnbu2XTwlSg+UDJtWNfeetWo=
Subject key identifier:   9F:E2:BE:F5:34:63:45:77:D3:C1:68:DF:A2:5F:BA:A0:9A:44:4C:7E
Certificate issuer:       /CN=6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E
Certificate serial:       22977F193FD0F251EF7B62C3FD6CB660D40C993E
Authority key identifier: 69:40:B8:D2:97:29:F5:A3:FB:C8:C0:D0:7D:1E:A5:82:89:4E:3D:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/34352e3233352e31362e302f32322d3234203d3e20323632333931.roa
Signing time:             Thu 24 Feb 2022 19:25:20 +0000
ROA not before:           Thu 24 Feb 2022 19:20:20 +0000
ROA not after:            Thu 23 Feb 2023 19:25:20 +0000
asID:                     262391
IP address blocks:        45.235.16.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:97:7f:19:3f:d0:f2:51:ef:7b:62:c3:fd:6c:b6:60:d4:0c:99:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E
        Validity
            Not Before: Feb 24 19:20:20 2022 GMT
            Not After : Feb 23 19:25:20 2023 GMT
        Subject: CN=9FE2BEF534634577D3C168DFA25FBAA09A444C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:6d:62:bf:91:a1:1c:22:1f:e1:35:76:2a:
                    d6:21:e7:f9:4f:92:11:a6:6d:82:38:5b:3b:97:3e:
                    5d:1a:ff:79:10:9c:30:05:32:26:99:48:18:c9:c9:
                    29:29:f8:5a:50:7d:e7:2d:5d:94:31:de:2a:f5:a0:
                    6d:49:60:40:ad:18:bb:a1:2b:cc:8e:50:37:b6:73:
                    68:21:81:80:88:25:05:60:06:71:b9:48:67:00:cd:
                    77:b9:3d:15:32:ad:3c:ec:af:7d:f0:b7:61:75:a3:
                    e6:4e:48:0e:9d:44:22:f3:79:8a:17:f0:6a:1a:e7:
                    25:ce:ac:f7:4a:fe:50:8d:2e:82:c5:46:0f:74:bc:
                    64:3f:7b:42:d6:ac:75:aa:0e:14:3e:a8:1b:24:eb:
                    31:4e:b7:2d:0c:c9:ea:3f:e1:d5:af:8d:2b:b7:64:
                    10:7a:2b:d5:b1:53:56:b8:58:f1:a6:d1:a8:2f:b5:
                    73:07:34:9c:09:22:ec:a0:30:50:e4:de:1c:b3:5c:
                    fd:f3:69:01:9a:69:9e:40:ba:e4:cf:21:51:c8:92:
                    fa:11:62:96:67:c5:66:91:ce:a9:5b:65:61:5f:98:
                    d1:ef:d2:5e:95:b5:d0:df:01:d6:5b:6b:6d:b1:78:
                    bd:10:59:c6:76:c6:e0:a8:fe:a2:7d:7f:73:5b:d3:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E2:BE:F5:34:63:45:77:D3:C1:68:DF:A2:5F:BA:A0:9A:44:4C:7E
            X509v3 Authority Key Identifier:
                keyid:69:40:B8:D2:97:29:F5:A3:FB:C8:C0:D0:7D:1E:A5:82:89:4E:3D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/34352e3233352e31362e302f32322d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:43:e0:8a:2e:e6:1b:96:99:e4:db:11:61:60:67:7f:a4:
         0a:77:64:e9:0f:58:a9:ee:41:cf:db:34:85:72:9c:38:ef:fb:
         23:12:7e:23:54:43:4b:75:f8:91:89:7f:89:c7:ce:7a:a7:33:
         2d:40:6a:ae:8a:3b:e6:56:48:04:6f:13:6a:75:4a:c8:a6:0d:
         5f:35:5a:4e:3c:47:a2:8c:8d:25:29:66:30:df:c5:84:33:d0:
         19:35:41:f1:a3:62:ef:14:78:8a:3a:17:68:36:7e:08:c8:4a:
         5b:81:eb:59:29:f9:39:d7:bc:69:66:64:5e:af:9a:dc:ba:63:
         d5:6e:ac:8c:c7:bd:14:df:53:a2:4c:a1:42:74:80:46:0e:2e:
         f1:2e:cd:24:c3:83:81:84:7e:7b:c2:0e:68:a8:57:72:4c:59:
         2e:9f:b5:87:d6:54:69:86:f4:33:8f:be:8a:cd:46:aa:a5:6b:
         59:8b:38:66:31:c7:3a:9f:f3:c9:9e:2c:d3:7d:8b:6a:fc:6e:
         c8:7a:e7:3a:7d:9f:0a:75:a3:05:bc:ca:0a:fa:a1:bd:05:10:
         c1:76:f8:26:66:78:19:12:56:43:a6:3d:53:71:42:ab:9e:88:
         95:16:60:fb:26:77:8d:f7:68:b5:45:a1:23:0a:f0:5e:3b:ff:
         13:fe:36:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:23 2025 by rpki-client