Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa
File:                     34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (raw, json)
Hash identifier:          2RkNWBLR029RFRbh32kFnlXtZFOD9xnYisNTVjldsO0=
Subject key identifier:   2A:64:58:5F:69:7D:2E:D8:D3:E7:1F:E3:5B:02:DE:C6:07:6D:6B:5C
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       7AED18178E6B16E41F57799A679D80728A0E7BFF
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa
Signing time:             Thu 06 Mar 2025 09:03:17 +0000
ROA not before:           Thu 06 Mar 2025 08:58:17 +0000
ROA not after:            Thu 05 Mar 2026 09:03:17 +0000
asID:                     269145
IP address blocks:        45.180.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ed:18:17:8e:6b:16:e4:1f:57:79:9a:67:9d:80:72:8a:0e:7b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Mar  6 08:58:17 2025 GMT
            Not After : Mar  5 09:03:17 2026 GMT
        Subject: CN=2A64585F697D2ED8D3E71FE35B02DEC6076D6B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:66:e9:89:ba:6c:63:65:df:e4:c0:33:9c:
                    d5:7e:f3:21:77:97:a1:d1:ff:33:6c:d0:e8:18:fd:
                    5e:25:eb:20:e0:05:7f:78:9b:ff:ad:aa:27:97:e7:
                    12:04:62:ea:28:d6:bd:01:6b:34:bd:52:6e:59:01:
                    21:d0:d2:d9:bd:cc:93:1d:be:96:d1:de:ab:88:2e:
                    c7:5a:ff:a0:c3:d2:b3:3e:ff:fb:05:0e:96:98:de:
                    de:73:94:a7:f3:04:f1:cf:71:d4:9d:77:4c:ca:dd:
                    56:bf:77:4d:0b:81:48:cf:8c:f4:4f:37:a7:68:f3:
                    a6:a5:b6:3a:60:a9:d2:15:e7:1d:61:85:c6:e8:c1:
                    00:82:1a:d4:8f:39:00:d6:e0:a7:53:6a:dc:33:e7:
                    0a:3d:43:17:fd:af:58:80:84:8e:b0:ed:d8:54:ce:
                    72:0a:2c:b4:e8:c6:90:bd:39:a5:50:c8:59:72:3c:
                    b9:9d:c4:87:b5:4f:e9:53:17:c8:66:50:fa:0f:c8:
                    08:97:c5:90:63:62:df:aa:b4:46:69:6d:ef:84:02:
                    9a:4a:9c:52:33:d9:75:9c:6b:e0:36:00:f8:d8:14:
                    f0:2c:81:ef:ed:5a:09:a8:e2:e6:a6:38:90:0e:84:
                    70:7a:14:56:44:36:df:db:1c:7e:0c:a5:fd:52:38:
                    dc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:64:58:5F:69:7D:2E:D8:D3:E7:1F:E3:5B:02:DE:C6:07:6D:6B:5C
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:f1:6e:3e:73:dd:18:33:75:19:17:e7:09:04:8c:91:6f:3d:
         04:a0:35:76:ad:4d:51:ab:99:e7:f7:11:d6:a9:74:54:af:06:
         f3:2a:19:0c:6a:98:12:b6:d0:ac:43:13:74:80:03:b9:6b:dd:
         60:93:96:64:5b:c4:5a:d7:80:ae:0e:96:e7:46:f7:30:4f:ab:
         26:5f:55:ac:51:7b:21:75:00:79:ff:db:f4:99:62:65:f3:f1:
         6c:1a:76:8a:01:44:00:8e:55:71:7a:5f:4d:c1:29:50:3d:e5:
         fc:3f:c0:a7:40:2d:0c:07:b8:7f:19:b0:cc:f3:41:59:08:6d:
         4c:8f:62:47:43:a3:ba:f9:38:53:be:b0:e6:6d:d0:42:5b:62:
         89:34:b7:cb:7e:a0:ef:90:32:d1:ac:9f:53:ac:1b:15:94:4a:
         62:bc:e3:c0:74:f2:01:86:42:ff:07:3e:aa:3a:ca:60:22:b5:
         ec:e0:af:23:9c:cb:c2:8e:d3:82:f0:a9:96:54:cc:bd:9f:9f:
         7e:37:49:16:cf:18:ad:0d:ae:ee:e2:2a:fa:2e:e8:2f:02:3f:
         26:4b:53:b3:c9:10:c6:f7:05:29:51:fb:db:8b:b5:ed:cb:bb:
         37:b8:08:bb:a9:66:2f:10:90:f8:23:ea:6b:9a:30:85:87:dc:
         c4:a6:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:23:06 2025 by rpki-client