Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/34352e3233372e3130382e302f32322d3234203d3e20323632343831.roa
File:                     34352e3233372e3130382e302f32322d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          8AJSs834VsTI6qrIp7iYdTGBGuGolbWf7vxRVmaD8vE=
Subject key identifier:   1B:8C:2F:E8:89:B7:55:05:7C:CA:5E:EC:64:7E:4E:8A:B3:D4:31:3A
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       1DF74915594B1F7F3743CB86A1C64E3FD9501F42
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/34352e3233372e3130382e302f32322d3234203d3e20323632343831.roa
Signing time:             Fri 03 May 2024 21:38:43 +0000
ROA not before:           Fri 03 May 2024 21:33:43 +0000
ROA not after:            Fri 02 May 2025 21:38:43 +0000
asID:                     262481
IP address blocks:        45.237.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f7:49:15:59:4b:1f:7f:37:43:cb:86:a1:c6:4e:3f:d9:50:1f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:33:43 2024 GMT
            Not After : May  2 21:38:43 2025 GMT
        Subject: CN=1B8C2FE889B755057CCA5EEC647E4E8AB3D4313A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:5f:da:61:c5:be:6c:b6:ad:a0:77:b6:72:
                    0e:56:1c:c8:8a:fc:58:ae:01:a9:fa:95:4b:42:17:
                    3d:02:0f:cd:1b:1e:89:fa:a8:4e:51:0c:a1:42:41:
                    f7:9c:15:a1:b1:91:41:37:ef:5a:9a:5d:82:d6:a4:
                    0f:fd:2f:ff:3c:1f:64:4e:90:4a:ae:d4:8d:8c:c7:
                    0e:25:80:02:bd:c3:79:fc:3b:96:2f:96:bc:c4:ab:
                    d8:23:da:0d:21:ab:7e:92:04:ad:c7:42:97:27:78:
                    e5:63:14:65:10:b4:03:c7:03:ba:83:7a:1b:b3:20:
                    27:e9:a8:9b:2b:58:16:2e:3c:04:5f:36:22:e3:26:
                    3f:4d:b9:32:70:44:61:af:19:a4:d0:4b:8c:ed:78:
                    9f:53:ea:a9:c0:32:21:f2:b8:9f:6f:aa:1d:89:3e:
                    55:3b:d1:43:55:ca:ff:b7:07:20:cc:20:61:06:f5:
                    b2:4e:89:a5:87:02:18:1f:33:72:a8:10:51:29:38:
                    9c:9e:09:d6:1b:95:22:c3:72:cc:c5:84:82:4b:f1:
                    22:9e:60:22:00:37:11:39:30:8b:52:58:c3:c8:73:
                    cd:07:41:e2:07:1c:16:50:99:3a:0c:6e:be:43:82:
                    82:39:15:0b:2d:0e:c3:f1:fd:5a:37:a3:c0:f0:26:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8C:2F:E8:89:B7:55:05:7C:CA:5E:EC:64:7E:4E:8A:B3:D4:31:3A
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/34352e3233372e3130382e302f32322d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:e7:8f:ce:44:15:aa:0b:92:56:31:66:96:53:6e:8a:94:f5:
         36:e9:c8:87:cd:05:ca:d3:1a:fa:74:cf:c6:f2:71:18:21:6d:
         32:8a:e1:0c:1c:50:16:8c:58:b1:8d:19:d2:0d:c7:f1:62:ca:
         72:7f:96:6c:d9:5d:7e:da:69:2b:24:de:a1:40:c3:1d:41:0a:
         e4:3a:16:7b:18:0f:8c:4e:0a:7c:8e:70:25:f8:0c:f1:b4:22:
         2e:1c:e5:56:65:7a:00:2b:84:63:e6:22:af:b3:ce:cf:3d:ec:
         78:4f:16:1a:cd:86:8f:4a:18:0c:bf:57:0b:4c:a8:9a:c3:84:
         df:9c:6f:50:99:db:23:bf:38:b1:57:b0:8f:d9:74:0f:ea:90:
         17:30:58:d2:12:af:0d:a2:e9:4f:9d:c4:92:88:2f:e3:76:50:
         2f:18:df:d1:88:5b:42:d3:83:89:3b:f2:7d:77:41:9e:c9:5c:
         71:84:c9:17:47:1b:6f:22:b8:b8:63:0b:dc:32:8d:ba:58:6e:
         df:af:67:0b:a1:44:74:20:d8:e0:60:f9:aa:7b:83:58:32:b0:
         2e:41:6f:19:cb:41:65:5f:55:9e:b8:57:fa:ab:27:b9:75:c3:
         cf:fa:94:eb:71:0e:ca:40:75:ca:7d:1d:7e:36:0f:df:58:77:
         5c:a9:de:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:23:19 2025 by rpki-client