Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36342e302f32322d3232203d3e20323639333230.roa
File:                     34352e3138342e36342e302f32322d3232203d3e20323639333230.roa (raw, json)
Hash identifier:          Iu2WuOxtdHFxgnBZEpMHAMPocZUOk6vdOLyNMQD+bnw=
Subject key identifier:   9D:B4:95:EB:8B:AE:38:07:34:E4:AE:BB:C5:49:5B:AF:BE:C7:C9:12
Certificate issuer:       /CN=E7AAEDFFE8F937D38CBFB93A46F13195B05AD040
Certificate serial:       7DE59AFF9B92D269D1C4AA0349C1FE21EF4F7297
Authority key identifier: E7:AA:ED:FF:E8:F9:37:D3:8C:BF:B9:3A:46:F1:31:95:B0:5A:D0:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7AAEDFFE8F937D38CBFB93A46F13195B05AD040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36342e302f32322d3232203d3e20323639333230.roa
Signing time:             Mon 07 Nov 2022 10:59:02 +0000
ROA not before:           Mon 07 Nov 2022 10:54:02 +0000
ROA not after:            Mon 06 Nov 2023 10:59:02 +0000
asID:                     269320
IP address blocks:        45.184.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e5:9a:ff:9b:92:d2:69:d1:c4:aa:03:49:c1:fe:21:ef:4f:72:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AAEDFFE8F937D38CBFB93A46F13195B05AD040
        Validity
            Not Before: Nov  7 10:54:02 2022 GMT
            Not After : Nov  6 10:59:02 2023 GMT
        Subject: CN=9DB495EB8BAE380734E4AEBBC5495BAFBEC7C912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:48:f8:7c:00:63:8f:42:8e:19:c0:71:05:
                    e7:77:f7:bb:68:a4:58:3e:4d:79:7a:e6:fe:67:3e:
                    a6:42:e1:dc:e8:e5:57:76:88:2c:9d:d9:89:c0:ad:
                    08:ac:46:2c:1e:2e:91:52:40:81:4f:fb:54:01:94:
                    a7:40:25:fd:a5:11:af:e9:f9:51:a4:d0:96:87:ea:
                    73:4c:b0:26:6f:3d:96:a7:ee:b8:4e:d4:cd:f1:30:
                    0a:46:f6:43:90:f4:c0:52:f7:c6:30:a8:ee:71:cc:
                    48:81:8c:c6:f6:b2:3c:6b:d8:06:55:9c:bb:9b:2f:
                    88:47:06:4b:09:81:b3:bd:02:b7:f1:11:4d:b2:8a:
                    9b:93:84:1d:b2:85:c8:cc:e4:e4:98:1a:85:2d:bf:
                    2a:af:14:a2:98:34:d7:fe:14:66:b1:6d:cb:20:f2:
                    80:4e:41:ba:de:cd:95:7b:80:08:c9:f4:d8:39:b1:
                    34:a1:91:52:9a:73:6e:b3:db:e8:2f:59:bd:6f:93:
                    b7:4b:39:61:d1:21:c8:b9:74:b0:07:99:dd:69:0c:
                    7d:74:4f:11:8e:88:fd:5b:df:65:64:a7:c9:2a:4d:
                    54:17:73:3a:c6:4d:70:aa:b2:2f:5d:e3:e1:6a:44:
                    8e:fb:9c:73:cc:ae:20:e3:93:b5:83:7b:74:44:9a:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B4:95:EB:8B:AE:38:07:34:E4:AE:BB:C5:49:5B:AF:BE:C7:C9:12
            X509v3 Authority Key Identifier:
                keyid:E7:AA:ED:FF:E8:F9:37:D3:8C:BF:B9:3A:46:F1:31:95:B0:5A:D0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/E7AAEDFFE8F937D38CBFB93A46F13195B05AD040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7AAEDFFE8F937D38CBFB93A46F13195B05AD040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36342e302f32322d3232203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:2a:4a:b0:42:61:f5:aa:8e:3b:70:ef:e7:19:1d:28:d2:41:
         0c:f4:16:f9:46:e8:bb:42:b6:c7:01:29:52:4e:33:ee:9c:fe:
         b3:09:15:62:fe:3d:31:0b:98:5d:72:0e:79:7e:eb:ff:f4:05:
         6f:54:ce:2d:ff:d5:44:ce:9f:97:ef:3b:8d:05:5c:02:5c:5e:
         3b:14:9f:b7:11:c5:1b:6c:36:37:56:f1:1e:cb:d8:d9:a6:0c:
         21:07:0f:7d:5a:ca:5a:f4:7c:36:32:14:57:37:6e:6b:69:17:
         8b:9c:21:f7:00:0d:95:79:18:8f:b5:86:75:18:b9:9e:47:cc:
         f9:a5:8e:ac:af:40:f7:40:7b:70:c3:82:d4:4e:bb:35:cd:3e:
         0d:fb:46:13:d3:2f:33:cd:ad:09:b7:36:7b:75:bd:fa:a1:bb:
         d3:b8:46:96:a2:1f:b7:a2:84:d1:6d:02:50:a5:48:ae:d6:df:
         37:36:39:04:ac:61:9a:83:e6:d0:7b:85:fc:c5:c1:bf:47:80:
         64:04:6d:e0:86:43:e2:44:36:af:98:2b:02:b6:63:ba:3d:a9:
         c6:32:4b:b1:26:fc:b6:2f:5c:c9:bb:43:e3:b7:26:c1:fb:6b:
         0c:a8:dd:79:c0:39:ef:c5:77:09:22:94:19:49:fd:25:fc:21:
         f0:01:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:31 2025 by rpki-client