Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3130392e302f32342d3234203d3e203631353839.roa
File:                     34352e3233302e3130392e302f32342d3234203d3e203631353839.roa (raw, json)
Hash identifier:          prE5e1lRqNrmSqposZK+Te4KXzKPc0RYzEBByhROdII=
Subject key identifier:   76:A8:9B:A8:FC:CF:77:E2:DB:F8:18:EE:51:7D:37:59:AF:A9:A8:F1
Certificate issuer:       /CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Certificate serial:       7E01772F885AC079BB6F4596321A0BDE823E2840
Authority key identifier: 64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3130392e302f32342d3234203d3e203631353839.roa
Signing time:             Tue 21 Mar 2023 13:30:19 +0000
ROA not before:           Tue 21 Mar 2023 13:25:19 +0000
ROA not after:            Tue 19 Mar 2024 13:30:19 +0000
asID:                     61589
IP address blocks:        45.230.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:01:77:2f:88:5a:c0:79:bb:6f:45:96:32:1a:0b:de:82:3e:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
        Validity
            Not Before: Mar 21 13:25:19 2023 GMT
            Not After : Mar 19 13:30:19 2024 GMT
        Subject: CN=76A89BA8FCCF77E2DBF818EE517D3759AFA9A8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:26:51:d6:a6:dd:1e:8c:51:c5:2b:59:5c:
                    0a:01:c0:0d:1b:38:59:29:31:e9:84:02:3b:fd:17:
                    0b:cc:ef:b7:e0:23:82:eb:1e:1f:9e:78:53:39:d1:
                    58:8b:04:ad:90:63:55:7d:fe:e5:ee:29:a3:8d:74:
                    7f:06:41:1d:37:fc:b6:5f:48:48:51:32:13:34:32:
                    85:c7:74:06:71:59:be:0b:1c:7c:ea:7b:5b:66:86:
                    d0:26:ef:4a:51:de:ab:41:e2:2a:c1:73:1f:4b:cb:
                    87:f8:9f:72:c2:23:3e:e7:0d:da:68:fc:8e:7e:a9:
                    50:66:48:fd:22:d3:99:d2:42:17:60:28:99:b6:7b:
                    dc:be:c3:b6:52:fb:a1:92:0c:79:ab:40:56:30:79:
                    d4:e4:27:eb:3e:7a:ab:79:f1:dc:ef:c1:ad:47:bd:
                    b9:69:a1:08:da:a7:2a:5d:99:66:7d:5e:64:e5:8a:
                    69:ea:63:c2:e8:9d:10:e1:51:24:5a:3a:fa:f2:43:
                    a0:b6:78:fa:6d:0f:c3:75:ee:4d:8a:72:1c:86:b9:
                    25:82:9f:1e:d2:43:b5:3b:c2:f6:47:68:cd:8e:4f:
                    c8:2e:c3:d6:ec:3c:14:7f:27:20:82:76:7c:48:01:
                    e4:cd:be:5c:d0:69:25:69:04:87:28:0b:7b:7f:2d:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A8:9B:A8:FC:CF:77:E2:DB:F8:18:EE:51:7D:37:59:AF:A9:A8:F1
            X509v3 Authority Key Identifier:
                keyid:64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3130392e302f32342d3234203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:27:21:84:63:ac:16:11:c6:af:07:5f:b4:ed:c8:a7:9f:28:
         aa:ba:54:a7:29:ef:68:22:47:c1:47:2c:75:c0:b3:e8:8b:c7:
         f1:b4:85:f7:9a:a0:59:62:c7:e3:27:9b:47:4d:40:2e:2b:c1:
         2b:aa:36:84:7e:67:2f:74:55:e9:0d:7e:21:19:6e:83:ee:95:
         f8:b2:aa:08:e5:97:2a:47:3c:4f:b5:4f:e6:c7:20:fc:bf:6b:
         da:ff:ec:fc:cf:2d:0f:83:29:66:b4:72:6c:8f:4a:df:2c:f0:
         db:51:5b:65:85:ef:36:8e:f5:fd:25:6f:03:b0:0e:d0:90:f7:
         fd:cc:da:03:4a:fe:cc:a2:48:9a:08:03:c6:60:3c:c1:79:62:
         4a:ee:80:8f:8a:db:21:3c:73:60:1f:3b:18:d5:cd:a1:ea:c1:
         dd:3d:21:8c:50:67:9f:c8:51:88:56:8b:fc:88:dc:e0:3c:3f:
         59:c8:6b:58:84:ec:b3:1d:4a:ac:42:8c:73:b0:8e:cd:e2:f0:
         26:eb:72:3f:7b:3d:cc:45:c9:88:06:3f:bd:6e:39:7b:dd:cb:
         75:56:6a:ea:27:7a:02:c4:b1:35:a9:58:75:9c:e9:e9:4d:55:
         a5:d2:26:ca:d3:80:1c:93:00:af:e2:3f:fe:07:34:5c:66:65:
         08:b4:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:17:59 2025 by rpki-client