Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa
File:                     34352e3233352e35322e302f32322d3234203d3e20323638323037.roa (raw, json)
Hash identifier:          v/QOBCcEJUCRYbJOZrbP+bHnKWkarc1OkME7oi8z1WU=
Subject key identifier:   0C:49:0F:2E:D0:75:B1:E5:36:73:25:EE:F0:6A:07:C2:09:02:67:E7
Certificate issuer:       /CN=22CBA337E0370365B681D563898357F37A7D4D97
Certificate serial:       1E473A71F18E568317D7DB0BE18FC6E682BCC59C
Authority key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa
Signing time:             Thu 29 May 2025 14:38:09 +0000
ROA not before:           Thu 29 May 2025 14:33:09 +0000
ROA not after:            Thu 28 May 2026 14:38:09 +0000
asID:                     268207
IP address blocks:        45.235.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:47:3a:71:f1:8e:56:83:17:d7:db:0b:e1:8f:c6:e6:82:bc:c5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22CBA337E0370365B681D563898357F37A7D4D97
        Validity
            Not Before: May 29 14:33:09 2025 GMT
            Not After : May 28 14:38:09 2026 GMT
        Subject: CN=0C490F2ED075B1E5367325EEF06A07C2090267E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:c2:31:5b:f9:51:20:a9:e3:b3:09:3b:b7:
                    29:cd:69:92:f7:d9:5e:35:0e:e6:1b:c7:2c:d3:b9:
                    87:6f:a1:e0:9a:17:ad:49:0e:5e:d3:df:22:93:0a:
                    72:9a:f5:ee:f4:98:4c:da:18:ec:e8:f6:05:9d:df:
                    66:a2:59:eb:17:83:2b:ac:a4:19:00:ed:22:e9:e7:
                    fc:f8:e5:67:74:45:c9:38:8f:cc:f5:88:44:ee:df:
                    d5:c2:77:dd:01:3e:55:0a:b9:59:dd:8c:16:7b:82:
                    03:d3:84:31:a8:af:e0:ba:7f:ef:e3:2b:9b:72:f0:
                    b6:c0:58:a4:33:bb:2e:26:9c:64:ea:5f:94:8a:98:
                    f3:73:5a:df:c9:c9:ac:f3:75:7d:7b:40:b6:31:0e:
                    d0:de:fe:aa:67:22:5f:f3:ac:d5:27:a4:05:08:79:
                    da:70:77:e0:3b:3a:44:88:89:08:18:8f:49:91:6d:
                    e7:ba:04:5f:84:cf:64:8c:4a:31:28:b4:1b:d5:be:
                    10:2f:77:23:8a:59:18:9d:94:d6:b0:4f:a1:7f:c9:
                    b5:b1:8e:cd:b1:4c:c4:99:db:4e:65:d4:74:69:dc:
                    df:45:dd:c0:e4:99:0b:07:f7:3e:af:9f:72:93:58:
                    65:88:33:23:3f:51:ef:28:d5:12:b9:fe:11:36:b1:
                    cd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:49:0F:2E:D0:75:B1:E5:36:73:25:EE:F0:6A:07:C2:09:02:67:E7
            X509v3 Authority Key Identifier:
                keyid:22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:b2:f8:c8:8e:63:b6:b4:bb:66:46:6b:0b:1a:dd:41:05:e2:
         41:d0:37:42:e7:8d:a8:6e:16:4a:e7:ad:43:4a:45:05:1b:2d:
         05:f2:85:81:14:e5:40:55:98:6d:1f:58:a6:b7:ee:71:43:0e:
         11:c3:16:11:e4:b9:08:37:7f:ca:f8:fc:0c:e2:65:a4:73:8e:
         c1:e5:56:f3:82:dd:9f:46:15:3b:b8:64:9b:40:98:66:36:e4:
         2a:5e:37:1e:bd:d3:cd:18:c4:25:24:64:81:49:c4:2f:6a:4e:
         64:46:d7:8c:3b:86:7a:06:a7:66:c9:2d:dc:36:f9:74:03:87:
         63:20:cb:82:71:af:2e:da:54:84:64:bb:a9:47:32:37:8e:64:
         5c:8b:d3:c8:9a:e8:a6:66:d1:e0:b9:84:70:a6:48:81:e2:8d:
         9b:cb:d4:ca:85:b9:2a:5a:e5:48:cb:07:45:f4:33:8b:b3:12:
         31:80:e1:86:d3:3b:d9:e8:98:63:f1:67:de:dc:c8:bc:c1:0c:
         36:7c:87:cd:3e:bd:55:96:a7:5b:54:b6:6b:64:7b:b8:24:ef:
         81:3c:af:b9:2d:d3:ef:0a:f9:cf:86:06:c8:c0:4e:11:c8:86:
         36:68:6d:34:1a:23:3a:53:aa:e7:ae:d5:a2:46:e3:a4:f2:61:
         1e:09:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:39:30 2025 by rpki-client