Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0/34352e37302e3230382e302f32322d3332203d3e20323731363138.roa
File:                     34352e37302e3230382e302f32322d3332203d3e20323731363138.roa (raw, json)
Hash identifier:          9G5Ont0w0G/J+h271ou/dV9ZkSrdBb8dCJMm/G/+8fw=
Subject key identifier:   0E:49:D3:EF:C1:A2:B9:54:7D:E2:9B:DC:64:D8:BE:68:C8:AF:DD:C8
Certificate issuer:       /CN=7E06211EB7582E728E713888DC80445D4D9CC6D7
Certificate serial:       29FE9E0D1F29B448FEF26E9DD58B3CBEDA4683EA
Authority key identifier: 7E:06:21:1E:B7:58:2E:72:8E:71:38:88:DC:80:44:5D:4D:9C:C6:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06211EB7582E728E713888DC80445D4D9CC6D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0/34352e37302e3230382e302f32322d3332203d3e20323731363138.roa
Signing time:             Sat 31 May 2025 21:41:07 +0000
ROA not before:           Sat 31 May 2025 21:36:07 +0000
ROA not after:            Sat 30 May 2026 21:41:07 +0000
asID:                     271618
IP address blocks:        45.70.208.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fe:9e:0d:1f:29:b4:48:fe:f2:6e:9d:d5:8b:3c:be:da:46:83:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E06211EB7582E728E713888DC80445D4D9CC6D7
        Validity
            Not Before: May 31 21:36:07 2025 GMT
            Not After : May 30 21:41:07 2026 GMT
        Subject: CN=0E49D3EFC1A2B9547DE29BDC64D8BE68C8AFDDC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:3e:8b:24:a3:ea:b1:c2:79:36:97:ad:db:
                    3e:54:70:01:86:22:8f:4f:2b:89:dc:71:e7:2a:9d:
                    66:5a:1a:75:32:69:ae:d2:93:c6:ad:6b:5b:fb:68:
                    aa:70:1a:7d:36:e4:26:5c:1e:c6:5c:eb:36:fc:e6:
                    80:c4:f8:6b:21:99:18:92:89:2b:61:f6:33:3d:ec:
                    30:39:db:50:62:c1:9e:36:9a:d5:c4:d4:c7:a3:1e:
                    5b:13:21:05:66:1d:ed:12:2b:d9:29:8f:83:b7:36:
                    52:62:fb:c4:ae:a7:e3:e9:ce:29:bb:24:c6:f2:e2:
                    7c:69:48:e6:28:dc:af:ec:05:63:a4:49:43:58:f4:
                    79:0e:f8:e5:e2:ea:35:6e:ee:9c:cc:49:de:76:e1:
                    4b:7a:ed:b3:18:27:57:aa:fd:0c:f6:9a:71:94:92:
                    a0:72:4a:e2:38:b7:d6:38:99:c5:81:5c:ce:9e:d4:
                    e0:0a:e0:de:8a:43:ec:d7:2d:c6:2a:5d:c3:3a:83:
                    43:53:cb:3c:56:af:9c:32:bc:88:6c:89:56:fb:c4:
                    9d:e9:fc:8f:47:23:99:13:0c:6d:a8:01:0a:42:04:
                    92:40:05:94:89:ee:19:5e:60:4b:04:45:17:17:03:
                    55:92:1b:be:31:ea:32:d5:f2:00:fb:72:6d:d0:67:
                    c4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:49:D3:EF:C1:A2:B9:54:7D:E2:9B:DC:64:D8:BE:68:C8:AF:DD:C8
            X509v3 Authority Key Identifier:
                keyid:7E:06:21:1E:B7:58:2E:72:8E:71:38:88:DC:80:44:5D:4D:9C:C6:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0/7E06211EB7582E728E713888DC80445D4D9CC6D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06211EB7582E728E713888DC80445D4D9CC6D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0/34352e37302e3230382e302f32322d3332203d3e20323731363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:5f:d6:c0:63:ae:e8:ff:6f:83:65:d7:3b:fc:a5:a2:89:62:
         1d:0f:d6:fb:18:bb:87:e3:72:dd:6c:37:fe:33:6c:6d:ef:e3:
         00:8e:95:d4:58:7f:80:09:1b:ae:cf:26:ab:38:e4:61:12:b5:
         2f:68:27:00:35:5a:02:a9:95:4d:e9:7a:3f:bb:f6:79:7a:38:
         0c:7e:63:16:ba:33:5d:02:eb:af:fe:0a:6d:a4:79:15:25:9a:
         b6:9f:84:f2:68:24:92:fb:c7:52:21:b8:38:80:34:1c:fe:04:
         a5:dd:60:90:54:d9:e6:1d:59:01:61:3d:da:33:39:9e:bf:11:
         c7:00:11:03:f4:b2:dc:78:e1:a5:42:f2:a2:0e:45:2a:2b:08:
         d3:d7:ac:65:b2:df:71:c0:0b:f4:bb:66:e4:07:94:b0:3d:c6:
         fd:b6:1e:f2:06:09:27:dd:e6:ab:76:c9:1e:d5:e4:ba:cc:3e:
         d4:18:e2:2a:40:9d:a0:db:a7:34:0d:b8:52:20:79:cd:b6:ae:
         bf:53:ad:e8:df:cd:8f:90:f3:e0:92:06:d6:82:6e:56:13:1b:
         df:fd:2d:52:f0:73:a8:8e:f9:0d:b5:3a:04:ca:14:da:78:ec:
         e9:55:ff:9e:b6:df:dc:9d:bd:a7:80:5f:34:53:a5:6e:1d:0f:
         77:1f:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:04:04 2025 by rpki-client