Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa
File:                     34352e362e3136342e302f32322d3332203d3e20323636313430.roa (raw, json)
Hash identifier:          qMvBmq1pgzlHrJKNsO9NjVqPj2Gyp6zALArUCGJqi18=
Subject key identifier:   74:0A:8D:A5:A5:33:FA:ED:A4:FB:BC:DB:C6:28:8A:36:88:4C:5A:74
Certificate issuer:       /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial:       0F795B172A494F292D98F48A5938FFBACD6EEC99
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa
Signing time:             Thu 06 Mar 2025 23:07:13 +0000
ROA not before:           Thu 06 Mar 2025 23:02:13 +0000
ROA not after:            Thu 05 Mar 2026 23:07:13 +0000
asID:                     266140
IP address blocks:        45.6.164.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:79:5b:17:2a:49:4f:29:2d:98:f4:8a:59:38:ff:ba:cd:6e:ec:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
        Validity
            Not Before: Mar  6 23:02:13 2025 GMT
            Not After : Mar  5 23:07:13 2026 GMT
        Subject: CN=740A8DA5A533FAEDA4FBBCDBC6288A36884C5A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d3:35:22:35:0b:dc:2f:4f:ce:f5:bc:3b:8d:
                    40:3c:d0:57:cb:64:de:cf:77:8c:9b:2d:9f:18:2f:
                    17:9b:58:91:7b:27:b9:00:53:3d:b4:b1:2b:b3:52:
                    7a:dd:73:f2:4f:8b:a8:d4:78:af:44:98:00:86:3f:
                    b7:71:54:de:f6:18:dd:9b:91:30:98:8e:10:8e:9a:
                    90:f9:8f:a2:b2:87:f8:fb:0e:cf:b9:f0:3c:09:97:
                    50:c7:57:35:89:b8:d1:14:46:da:50:c3:60:80:29:
                    a6:90:0f:84:64:82:21:bd:2a:25:9e:43:2c:2d:d5:
                    10:44:8b:0a:b1:5b:c3:e1:bb:25:8c:0d:75:85:62:
                    6f:d1:eb:6a:e6:fb:df:13:d2:73:87:8d:ab:fb:9d:
                    83:c1:e7:f7:3f:b1:83:22:e6:f8:a2:84:75:93:0a:
                    2f:c9:29:3a:c7:cf:8e:6e:02:10:5f:5d:74:48:fc:
                    03:e6:38:af:bd:34:6c:e6:25:0e:79:68:97:0d:09:
                    2d:ac:c4:8c:d5:31:fa:90:df:53:ba:86:ae:49:b7:
                    28:d2:9d:6f:ec:5a:2f:c0:05:7a:71:0c:46:64:45:
                    90:df:b2:56:5f:ed:e7:ef:cc:fb:29:44:88:3c:17:
                    41:77:9a:92:83:41:e3:c8:97:3f:af:c0:97:6a:ac:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0A:8D:A5:A5:33:FA:ED:A4:FB:BC:DB:C6:28:8A:36:88:4C:5A:74
            X509v3 Authority Key Identifier:
                keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:a9:36:2b:8a:23:54:ce:14:87:80:69:d8:4d:7e:58:96:0b:
         7c:ce:e5:a6:11:db:47:25:34:6a:ed:cf:ac:f9:d2:77:bf:a8:
         15:91:10:54:14:c6:50:6f:7d:db:d7:4a:3b:13:fa:36:21:52:
         8a:06:ea:e3:f6:6f:7f:84:ff:d7:87:e7:67:49:57:cb:2a:eb:
         e7:8c:f5:20:1b:95:a4:2a:dd:be:2d:cf:a4:38:e3:09:5a:1e:
         ed:2d:9c:03:62:e5:9d:67:da:7b:71:9f:9b:3a:c4:2f:22:41:
         87:66:98:8c:e3:93:88:df:15:5b:98:5b:8b:a4:56:26:ca:5b:
         5d:cd:1f:1e:b1:a1:d1:b5:7d:41:03:46:38:30:a5:c1:24:35:
         e8:94:4b:04:41:a0:8f:2a:8f:c1:8b:83:bf:d3:3c:62:50:56:
         e4:ba:dd:5b:3e:aa:84:be:cf:6d:74:95:15:18:3c:93:eb:aa:
         72:62:53:44:d7:87:ab:7e:c8:f0:f1:1b:2a:40:39:4d:2a:64:
         30:9d:57:1f:38:ea:65:d6:fd:e5:b8:8c:79:3c:d3:c6:74:e7:
         18:06:58:47:1d:58:33:96:c4:c2:75:c1:5e:5b:a1:cd:dd:19:
         17:71:bd:95:80:9c:d2:5b:79:87:36:33:45:2c:38:84:b8:b2:
         d2:82:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:10:06 2025 by rpki-client