Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33342e302f32332d3233203d3e20323636393234.roa
File:                     34352e3232342e33342e302f32332d3233203d3e20323636393234.roa (raw, json)
Hash identifier:          JABEgsKFctWvQAHlkek04CeyXB9iBebAfk2kUyF1a28=
Subject key identifier:   56:A9:F2:98:1D:51:28:99:15:4B:2F:88:FE:84:40:09:F1:C2:D2:83
Certificate issuer:       /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial:       6859769B86F0878AE943E3E5841FEBDCDEA0BF89
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33342e302f32332d3233203d3e20323636393234.roa
Signing time:             Wed 04 Dec 2024 16:46:47 +0000
ROA not before:           Wed 04 Dec 2024 16:41:47 +0000
ROA not after:            Wed 03 Dec 2025 16:46:47 +0000
asID:                     266924
IP address blocks:        45.224.34.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:59:76:9b:86:f0:87:8a:e9:43:e3:e5:84:1f:eb:dc:de:a0:bf:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
        Validity
            Not Before: Dec  4 16:41:47 2024 GMT
            Not After : Dec  3 16:46:47 2025 GMT
        Subject: CN=56A9F2981D512899154B2F88FE844009F1C2D283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e8:04:40:c3:85:71:4d:59:3d:47:b9:4b:fd:
                    bf:9b:cf:51:7e:bd:ef:ad:5e:55:6d:c2:6b:ee:46:
                    9f:c5:3a:3d:61:ce:0d:d4:4b:c5:14:12:49:ca:9b:
                    18:fc:70:2b:2c:26:f8:0d:61:7b:06:23:c1:3a:cd:
                    21:f5:a7:b8:8a:43:32:ed:8c:86:c0:ea:32:ae:e6:
                    1e:c6:9c:37:b6:6c:ef:2a:1b:90:71:a9:5e:84:e0:
                    10:e5:1c:28:76:65:21:23:9b:05:24:0d:0a:01:c7:
                    bb:4d:56:17:03:b5:3c:a5:df:81:8b:0b:01:48:81:
                    ed:fb:08:80:b9:1e:4c:2b:d6:b4:a4:04:f5:df:de:
                    e6:39:b3:36:8a:f5:01:99:e5:71:1f:bc:05:04:5e:
                    8b:bc:21:ba:de:b7:3a:60:99:f7:f6:8d:aa:f4:7e:
                    cd:3e:2e:82:47:14:67:c0:8b:c1:c5:41:30:5b:2f:
                    2c:69:70:79:c2:30:06:a9:ed:bc:36:68:2c:4c:e2:
                    03:f3:13:bc:5a:ea:24:d4:b1:ef:ef:c5:9a:33:db:
                    8f:a5:2b:34:ef:c0:b7:31:d9:7b:d2:2d:1b:d2:87:
                    7b:6e:0b:5d:07:00:0a:77:b0:67:cc:44:a7:b0:39:
                    24:1e:ca:84:2f:5e:c2:42:52:bf:c6:03:b1:1e:90:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A9:F2:98:1D:51:28:99:15:4B:2F:88:FE:84:40:09:F1:C2:D2:83
            X509v3 Authority Key Identifier:
                keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33342e302f32332d3233203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:88:fd:d2:2b:bd:cb:39:3c:40:be:eb:00:ed:18:41:1a:85:
         14:1f:b2:89:ea:c6:97:d7:f3:5e:9e:17:9b:83:24:b8:fc:77:
         e6:7b:ae:a9:ba:5d:cd:5b:4a:c8:0e:46:84:dc:11:89:22:0e:
         3d:27:64:44:46:00:a2:8e:d6:52:3a:4c:f4:73:de:be:cb:30:
         2f:d2:16:76:50:02:42:9e:39:67:97:70:b8:23:b6:0d:f4:4f:
         09:94:88:66:7a:91:8e:cf:86:39:49:08:32:88:0c:e2:a2:8d:
         5f:5c:33:71:ed:4a:e0:6a:65:77:34:6a:8f:1e:ae:fb:0e:97:
         0d:93:bf:99:af:98:40:c4:58:5c:f7:fb:13:1c:b4:eb:69:20:
         7c:a7:dd:2b:ea:6a:77:a5:0c:ef:55:b6:96:f5:d0:85:76:a3:
         20:67:1d:de:2f:ae:83:e6:96:27:d6:f0:dc:fb:9a:be:b8:f9:
         d9:34:48:fc:4d:e1:8a:82:f3:c6:86:32:95:8d:21:f5:74:55:
         36:99:f3:fe:4e:50:9c:d3:db:49:88:58:41:cb:d7:b4:03:57:
         ce:be:ce:70:6a:4b:1e:4e:e8:7c:3f:ed:3b:e3:34:36:f7:15:
         5f:c4:17:78:73:92:5d:af:89:20:3a:dd:af:4a:68:e1:87:f1:
         dd:4e:75:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:20 2025 by rpki-client