Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa
File:                     34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (raw, json)
Hash identifier:          /bpAsgSUi1LnoTyueVXmEbHEdvQmkmUVeA1xO4MqaNU=
Subject key identifier:   67:84:E3:52:54:38:38:C0:E0:6F:26:74:E2:6E:8F:E6:E3:96:12:42
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       6514D7905F9D1E5108669AE1839F89D2464A3A13
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa
Signing time:             Thu 06 Mar 2025 09:03:17 +0000
ROA not before:           Thu 06 Mar 2025 08:58:17 +0000
ROA not after:            Thu 05 Mar 2026 09:03:17 +0000
asID:                     269145
IP address blocks:        45.180.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:14:d7:90:5f:9d:1e:51:08:66:9a:e1:83:9f:89:d2:46:4a:3a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Mar  6 08:58:17 2025 GMT
            Not After : Mar  5 09:03:17 2026 GMT
        Subject: CN=6784E352543838C0E06F2674E26E8FE6E3961242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:9f:3c:ee:13:f4:c4:16:c4:d5:25:8c:ea:
                    b6:a8:fe:f9:61:9c:53:9d:9b:e2:a6:9f:05:e0:42:
                    19:f0:90:90:a3:12:10:df:c2:e9:a7:ab:85:97:2a:
                    5e:8c:54:eb:59:33:47:ac:ae:39:14:8c:c8:33:b8:
                    15:0f:1e:dd:2e:17:aa:f1:76:2e:5a:70:cd:0d:f0:
                    ba:1a:03:f0:92:2d:81:9c:0f:63:d9:49:b3:9c:41:
                    79:41:b3:3f:12:d8:c4:ff:d3:9d:30:e3:93:e9:dd:
                    e0:fc:9a:cd:da:2d:f1:fa:ed:70:cd:dc:ba:49:bb:
                    fa:ab:dc:97:30:c5:63:69:61:e5:b6:1f:af:ab:54:
                    0e:ad:8e:7b:43:0c:04:92:c4:07:9b:fa:7d:4f:ba:
                    8c:47:f4:bd:d7:e1:50:60:5a:54:c8:14:21:77:8c:
                    04:cd:cb:5b:06:e8:95:c3:ab:78:d1:39:20:08:56:
                    31:f2:53:26:e9:f5:90:a8:39:25:27:cf:c8:71:f1:
                    6f:85:d4:43:1c:3e:51:85:ab:3c:2a:66:28:41:ce:
                    e7:1d:ab:f0:48:a6:2d:84:82:26:13:41:d5:97:b1:
                    21:ec:f4:a0:91:ba:e1:9a:2f:e1:b8:2e:ff:59:0c:
                    f8:3b:60:f9:00:7d:1b:fa:1b:ff:ae:eb:90:36:b5:
                    a9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:84:E3:52:54:38:38:C0:E0:6F:26:74:E2:6E:8F:E6:E3:96:12:42
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:bf:3a:8c:a1:3c:41:bb:0f:0a:57:5f:1c:a0:35:4a:0a:d3:
         02:6d:fa:c0:f6:32:b0:c0:37:9a:e4:13:70:32:1a:29:89:c2:
         78:ef:fb:78:ba:14:76:ad:17:8c:13:b7:71:a7:32:88:d9:fa:
         18:46:53:89:7e:f4:23:bc:10:0c:6a:f5:1e:38:d9:e4:b2:22:
         8e:97:22:ab:80:73:9c:f7:35:ec:0a:8f:2c:bc:1b:04:91:6b:
         91:e3:60:4d:6f:78:d0:c2:71:45:b8:aa:30:f5:36:de:32:d5:
         34:94:86:d3:87:91:2e:c2:ed:f9:d6:60:23:54:7e:d5:75:d3:
         e1:51:92:39:d7:49:76:7f:ce:00:f0:01:d8:00:d3:b6:42:76:
         f8:38:80:d2:7b:cd:1a:be:fe:63:4b:13:c9:18:6e:c7:1c:a2:
         a7:52:49:c8:5a:8b:6b:0e:b2:f9:04:4c:c8:b1:ba:6e:e7:da:
         70:2d:f8:02:49:0f:7a:dc:34:1e:5b:c0:ee:37:8e:91:8c:a4:
         df:f1:5e:bb:72:67:b0:1a:b3:62:8e:d2:eb:ef:15:be:9d:4d:
         bc:0e:44:59:a3:0f:c7:6b:e7:42:bb:f9:9f:b0:00:49:60:91:
         dd:67:b2:dd:d0:44:5e:11:e6:53:1d:63:d0:b9:58:f7:8d:c7:
         f8:10:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:34:56 2025 by rpki-client