Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138312e302f32342d3234203d3e20323639353239.roa
File:                     34352e3138382e3138312e302f32342d3234203d3e20323639353239.roa (raw, json)
Hash identifier:          PwFePfziN2W83wfbOaaX/nzqIko7RVTIU1iYsrDKgrk=
Subject key identifier:   A1:83:C6:33:62:D5:32:DC:27:CC:AC:F0:11:DB:FC:09:CC:54:20:A0
Certificate issuer:       /CN=30C124FDC8D6BEBE26543F78B069AB896B0FF4EE
Certificate serial:       53F16C3ED01A0153DE63B11E4C88E83B254CE3FC
Authority key identifier: 30:C1:24:FD:C8:D6:BE:BE:26:54:3F:78:B0:69:AB:89:6B:0F:F4:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138312e302f32342d3234203d3e20323639353239.roa
Signing time:             Fri 17 Jan 2025 20:22:58 +0000
ROA not before:           Fri 17 Jan 2025 20:17:58 +0000
ROA not after:            Fri 16 Jan 2026 20:22:58 +0000
asID:                     269529
IP address blocks:        45.188.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f1:6c:3e:d0:1a:01:53:de:63:b1:1e:4c:88:e8:3b:25:4c:e3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30C124FDC8D6BEBE26543F78B069AB896B0FF4EE
        Validity
            Not Before: Jan 17 20:17:58 2025 GMT
            Not After : Jan 16 20:22:58 2026 GMT
        Subject: CN=A183C63362D532DC27CCACF011DBFC09CC5420A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:a6:ff:fa:d0:20:d2:bc:3c:30:f1:be:64:
                    32:6d:d4:eb:7e:41:6d:47:b4:43:a2:3e:96:03:32:
                    18:30:b6:42:a8:3c:a8:d5:78:22:dd:ba:f1:2e:54:
                    70:6d:e9:37:f7:83:81:6e:48:5c:76:0e:78:66:86:
                    30:fb:88:f4:be:bf:8e:91:dd:78:65:c5:40:89:00:
                    9b:8d:ff:7a:75:4d:2c:e8:30:cb:81:f9:17:4d:3e:
                    74:22:3c:3b:eb:e1:44:59:07:4d:5f:dd:b1:4d:32:
                    a2:0f:89:86:70:d4:ef:cd:f3:b2:34:7e:c8:eb:7c:
                    13:11:8e:07:f6:c5:ac:8b:35:d6:e4:a6:fd:cd:dc:
                    c2:51:2d:a6:9b:3d:68:28:50:69:04:51:f5:85:bb:
                    1c:eb:e8:88:64:30:6c:e2:26:64:c4:c4:52:df:be:
                    ec:a6:33:db:73:ca:fe:61:fe:67:b5:86:1f:f3:74:
                    78:6c:b6:c6:ca:74:14:11:ba:72:61:6f:4a:40:3f:
                    be:e0:3c:73:8e:63:6f:84:5c:33:d6:75:19:4e:f4:
                    03:ea:10:f1:37:7f:7d:ac:30:49:07:1e:7d:05:b2:
                    88:67:a3:55:42:df:1d:88:f8:30:23:a0:a8:66:d5:
                    45:80:c3:7f:38:32:6b:08:a5:2a:a9:74:16:d2:80:
                    5a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:83:C6:33:62:D5:32:DC:27:CC:AC:F0:11:DB:FC:09:CC:54:20:A0
            X509v3 Authority Key Identifier:
                keyid:30:C1:24:FD:C8:D6:BE:BE:26:54:3F:78:B0:69:AB:89:6B:0F:F4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C124FDC8D6BEBE26543F78B069AB896B0FF4EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138312e302f32342d3234203d3e20323639353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:77:a7:8a:98:b5:bf:9a:3d:5c:a4:ce:d7:3e:a0:74:46:41:
         c2:8d:10:4d:25:a3:da:a1:75:c4:41:86:5d:b7:11:e6:e4:2e:
         94:58:2e:84:0d:54:61:21:b9:e9:c6:0d:5a:de:0c:ee:02:8f:
         a0:c3:e7:15:83:48:99:0e:bc:06:20:53:89:99:c1:87:0c:a6:
         b3:be:97:0a:91:0f:df:3b:25:d8:b6:69:e3:f6:2a:b9:16:8e:
         a9:27:94:6a:eb:ba:ce:5a:f9:e9:10:a8:2b:82:47:c0:a5:bc:
         3d:62:36:a8:7e:d8:cb:79:5a:5c:01:7c:9a:9a:47:97:b6:8b:
         2c:37:02:77:ec:09:af:3d:ef:14:ee:27:80:3a:cf:d8:c8:fc:
         17:a5:2a:58:af:45:bc:fc:99:9a:61:d2:2e:58:81:5e:33:bf:
         34:81:be:17:05:ee:54:e4:11:f7:f2:b0:f5:35:4b:d4:a8:16:
         75:d8:af:13:b1:09:7b:23:c4:63:ec:6f:28:ae:15:f2:06:b0:
         44:a5:f4:71:36:c3:74:ff:ea:cc:91:d8:c9:ec:06:07:95:dd:
         b1:2e:51:67:16:06:72:4f:e9:d8:85:de:bf:08:1c:24:f4:0a:
         2f:25:af:a9:17:57:09:45:a2:81:e0:f7:5e:0b:98:e4:58:cb:
         d1:00:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:26 2025 by rpki-client