Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/34352e3232342e3139362e302f32322d3232203d3e20323637363732.roa
File:                     34352e3232342e3139362e302f32322d3232203d3e20323637363732.roa (raw, json)
Hash identifier:          wmhDlGx6fYsgFndN9RAILpvTIPKSJIucsUqs/RifPac=
Subject key identifier:   20:B8:44:D5:27:79:EE:D8:17:3A:51:6D:2C:0B:4E:68:6C:5E:17:0E
Certificate issuer:       /CN=140CEF6122CCF9B56142A37BB98256AD903460C9
Certificate serial:       1158E7461617A8E8BE8B0C71EC0E95A4FD0599E0
Authority key identifier: 14:0C:EF:61:22:CC:F9:B5:61:42:A3:7B:B9:82:56:AD:90:34:60:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140CEF6122CCF9B56142A37BB98256AD903460C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/34352e3232342e3139362e302f32322d3232203d3e20323637363732.roa
Signing time:             Fri 23 Aug 2024 19:46:57 +0000
ROA not before:           Fri 23 Aug 2024 19:41:57 +0000
ROA not after:            Fri 22 Aug 2025 19:46:57 +0000
asID:                     267672
IP address blocks:        45.224.196.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:58:e7:46:16:17:a8:e8:be:8b:0c:71:ec:0e:95:a4:fd:05:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140CEF6122CCF9B56142A37BB98256AD903460C9
        Validity
            Not Before: Aug 23 19:41:57 2024 GMT
            Not After : Aug 22 19:46:57 2025 GMT
        Subject: CN=20B844D52779EED8173A516D2C0B4E686C5E170E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:ba:f9:13:ab:a8:a9:6e:a1:36:66:77:37:
                    dd:b1:29:ff:bc:6e:58:cf:ef:b2:72:83:ca:ce:0f:
                    36:14:dd:8e:ee:be:9d:75:90:d6:88:03:23:31:bb:
                    61:c8:c0:d9:2a:8f:a3:83:95:a5:02:50:dd:e2:ce:
                    99:41:fb:7a:0a:41:12:48:98:06:fc:97:60:79:c2:
                    a6:63:0c:d5:5f:6e:7b:dc:94:b9:80:97:6b:b5:ec:
                    ce:e6:f7:37:52:47:ea:d3:a6:75:3d:bf:84:e1:85:
                    2c:93:a2:e8:10:a7:1e:a4:96:8c:b9:29:d3:18:ef:
                    8f:e5:9b:15:b6:05:be:65:77:aa:c1:79:69:c6:26:
                    d9:59:bb:73:d3:8d:7a:82:87:70:06:e1:4e:ce:71:
                    56:e7:78:07:38:b7:2f:26:56:49:33:6a:52:a4:36:
                    93:a2:26:57:2c:00:1e:1c:8f:05:58:f5:35:c6:b6:
                    c3:d0:19:64:0f:b6:d5:ff:69:4c:21:fb:d6:cd:24:
                    05:39:0a:8b:13:36:66:ee:25:ef:c9:df:ac:4c:23:
                    50:d4:f5:2c:8b:8a:fb:92:5a:d5:2a:f3:99:30:35:
                    a7:92:19:97:80:bc:bc:b4:e3:82:a5:fe:87:4b:06:
                    9f:f2:40:49:58:aa:76:88:bc:44:d8:c6:d4:d1:00:
                    40:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B8:44:D5:27:79:EE:D8:17:3A:51:6D:2C:0B:4E:68:6C:5E:17:0E
            X509v3 Authority Key Identifier:
                keyid:14:0C:EF:61:22:CC:F9:B5:61:42:A3:7B:B9:82:56:AD:90:34:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/140CEF6122CCF9B56142A37BB98256AD903460C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140CEF6122CCF9B56142A37BB98256AD903460C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/34352e3232342e3139362e302f32322d3232203d3e20323637363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:3e:8d:b0:67:14:fe:8d:41:30:87:77:d0:e6:ea:88:c2:
         53:76:09:52:bd:a1:e1:bb:0b:f5:f5:15:ec:ad:a1:da:d8:e0:
         81:3a:ea:c9:fd:f3:50:85:0d:83:bd:7d:2f:c7:02:e8:e8:0f:
         1d:da:6e:55:12:f0:a1:cf:fb:1b:38:25:aa:e3:5c:43:0d:6c:
         76:e5:2f:6b:1a:42:47:ae:bd:2d:9d:f2:b2:4e:0f:da:b8:ea:
         52:99:0a:02:51:24:75:5e:14:bd:cf:e2:f6:e9:ab:06:34:92:
         36:12:44:5d:92:e2:51:e0:35:4d:7b:71:d9:70:17:eb:08:c6:
         0d:73:c7:94:0e:aa:4f:9b:41:ff:30:c0:08:36:60:fa:4c:5c:
         c9:b7:16:b2:6b:10:a7:a9:1d:b7:d1:a9:ab:ad:b1:d9:e3:01:
         9c:bf:c3:4f:a2:b0:76:65:b5:c8:e4:9d:51:b8:54:f5:e1:6c:
         18:4f:2b:1f:bf:04:e6:17:ae:67:ab:e6:d1:7d:e0:a2:41:57:
         6d:88:e0:7d:a1:5e:e4:be:db:14:a8:29:92:1f:16:5d:fc:90:
         95:d7:91:63:81:a0:b0:2a:86:f0:cc:6f:86:20:1a:5a:98:ef:
         7c:4e:a4:17:ca:e8:f8:ae:96:63:9a:12:a6:0e:44:0d:be:d0:
         71:ef:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:27:40 2025 by rpki-client