Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25A79kiCDFs6T9UjvkwUJC2BYi5JHG95fyNXPFZ1fwFZ/0/34352e37312e32342e302f32322d3234203d3e20323637363331.roa
File:                     34352e37312e32342e302f32322d3234203d3e20323637363331.roa (raw, json)
Hash identifier:          Gbj8fSZWQqK95CvY2tm6o5qkg+Qnmw8TLpxFFMELinU=
Subject key identifier:   FC:83:58:72:5F:C8:6A:BA:57:3B:5F:B4:DB:07:C5:98:DD:18:9E:D0
Certificate issuer:       /CN=42E7D79A75CBB202B57664488D04DE79D288BDEC
Certificate serial:       3D60126EA871248069DE20DDA3E095CF56229717
Authority key identifier: 42:E7:D7:9A:75:CB:B2:02:B5:76:64:48:8D:04:DE:79:D2:88:BD:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42E7D79A75CBB202B57664488D04DE79D288BDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25A79kiCDFs6T9UjvkwUJC2BYi5JHG95fyNXPFZ1fwFZ/0/34352e37312e32342e302f32322d3234203d3e20323637363331.roa
Signing time:             Thu 02 Sep 2021 15:22:00 +0000
ROA not before:           Thu 02 Sep 2021 15:17:00 +0000
ROA not after:            Thu 01 Sep 2022 15:22:00 +0000
asID:                     267631
IP address blocks:        45.71.24.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:60:12:6e:a8:71:24:80:69:de:20:dd:a3:e0:95:cf:56:22:97:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E7D79A75CBB202B57664488D04DE79D288BDEC
        Validity
            Not Before: Sep  2 15:17:00 2021 GMT
            Not After : Sep  1 15:22:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:76:42:d3:f0:d3:6e:47:6b:8e:39:7e:16:
                    f5:09:2e:3f:e1:6b:b2:4c:4b:1b:30:de:ba:3b:05:
                    7f:cd:13:ce:df:d1:b4:12:d3:ee:1e:5a:96:89:6e:
                    b4:e9:7d:96:20:d7:85:65:a5:25:cb:f8:00:55:c6:
                    54:92:ec:6f:a1:ed:4d:62:34:bc:f6:a9:f8:6d:06:
                    81:e4:7e:8b:6c:a2:79:ef:db:cb:e0:73:9f:65:46:
                    5d:c2:c4:14:cd:c4:d8:56:45:b3:8b:0a:5c:1c:8b:
                    30:68:b4:c4:c1:8b:8c:a9:b9:ed:4e:1e:95:69:4e:
                    e8:78:4d:b3:0e:5b:7a:ae:74:77:d2:60:0e:7f:71:
                    4d:73:53:f9:e5:8d:5d:95:6b:e2:8f:8d:c2:79:0e:
                    4c:83:67:14:44:e6:24:7d:ff:55:33:8a:87:80:bc:
                    e3:e0:9e:c0:28:9b:e4:b8:6e:73:ff:f4:9e:81:ad:
                    79:f0:3d:5e:27:37:97:f2:16:f9:ff:c4:ba:9a:fa:
                    20:fa:91:ed:4c:8f:da:e1:4f:f2:03:d6:5a:01:dc:
                    a7:85:b4:b4:69:0d:78:dd:89:49:f0:63:07:09:dd:
                    48:a0:b7:61:46:68:f7:bd:49:7a:72:ef:a1:18:9c:
                    61:07:7f:74:da:6f:d2:51:0a:3b:cb:cd:40:69:08:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:83:58:72:5F:C8:6A:BA:57:3B:5F:B4:DB:07:C5:98:DD:18:9E:D0
            X509v3 Authority Key Identifier:
                keyid:42:E7:D7:9A:75:CB:B2:02:B5:76:64:48:8D:04:DE:79:D2:88:BD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25A79kiCDFs6T9UjvkwUJC2BYi5JHG95fyNXPFZ1fwFZ/0/42E7D79A75CBB202B57664488D04DE79D288BDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42E7D79A75CBB202B57664488D04DE79D288BDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25A79kiCDFs6T9UjvkwUJC2BYi5JHG95fyNXPFZ1fwFZ/0/34352e37312e32342e302f32322d3234203d3e20323637363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:50:9e:0b:49:47:89:58:52:dd:3e:a9:2e:fd:79:1a:b5:ee:
         ab:19:f8:73:ff:b4:c0:17:7f:58:0f:29:59:48:2f:e3:8e:05:
         46:89:d9:7a:fd:87:53:b8:c9:29:1a:7c:df:0d:2f:21:6f:d0:
         37:54:7b:d5:0f:f1:60:0e:7d:64:84:7f:8f:ba:e7:f8:c6:4b:
         67:a1:c0:b7:bc:41:e3:f8:c1:99:f9:f5:67:dd:27:77:f3:f5:
         ef:4c:49:f0:68:43:c2:00:9b:7b:fc:98:25:bf:a9:bb:a6:91:
         f1:04:32:0e:e0:0b:4b:07:41:90:51:36:ad:01:73:b1:64:83:
         59:95:54:96:5f:64:c4:b8:d0:f2:dd:a2:6f:44:d3:73:ad:98:
         68:a4:ed:c2:09:52:02:74:6b:c1:6f:95:96:82:1f:e8:c0:66:
         e5:4d:f7:57:ec:b4:3e:e0:e2:7b:08:56:12:a3:f4:00:da:80:
         d9:13:66:59:ce:c4:dc:78:89:05:97:c1:dd:c1:04:f9:ed:38:
         ce:dc:a1:11:93:f1:d0:ac:42:a1:97:21:08:27:85:2f:dd:e4:
         84:de:fe:31:80:d2:e4:5c:fd:76:ae:4a:18:9b:87:69:d1:e3:
         ef:05:13:7f:2f:13:61:09:b8:2c:95:a0:71:0a:b4:da:0f:aa:
         4f:ee:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:44:38 2025 by rpki-client