Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131392e302f32342d3234203d3e20323636353834.roa
File:                     34352e372e3131392e302f32342d3234203d3e20323636353834.roa (raw, json)
Hash identifier:          CZMin7WBTIlrqk8yAaVxGQPwcPYSeVoFYBuV8G9I7I0=
Subject key identifier:   C3:29:8C:BB:5D:BE:FB:D7:5A:1A:C1:0E:79:0A:92:3B:B7:53:71:E8
Certificate issuer:       /CN=2E0076A37EFDCC7006F754C5E68251073C6A031D
Certificate serial:       1E15B744B606C0FB5913358CB936DD0275C642F8
Authority key identifier: 2E:00:76:A3:7E:FD:CC:70:06:F7:54:C5:E6:82:51:07:3C:6A:03:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E0076A37EFDCC7006F754C5E68251073C6A031D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131392e302f32342d3234203d3e20323636353834.roa
Signing time:             Tue 17 Oct 2023 12:49:01 +0000
ROA not before:           Tue 17 Oct 2023 12:44:01 +0000
ROA not after:            Tue 15 Oct 2024 12:49:01 +0000
asID:                     266584
IP address blocks:        45.7.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:15:b7:44:b6:06:c0:fb:59:13:35:8c:b9:36:dd:02:75:c6:42:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E0076A37EFDCC7006F754C5E68251073C6A031D
        Validity
            Not Before: Oct 17 12:44:01 2023 GMT
            Not After : Oct 15 12:49:01 2024 GMT
        Subject: CN=C3298CBB5DBEFBD75A1AC10E790A923BB75371E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:df:00:4c:b8:5e:ba:10:cf:bf:d1:0d:ff:
                    e2:be:32:f4:db:af:24:07:f0:44:c1:e6:d0:26:dc:
                    a6:28:3d:13:29:d0:8e:83:1e:a3:5d:cb:84:3b:48:
                    90:43:9b:0e:a7:56:cc:93:b2:63:ca:94:1f:b7:52:
                    d5:3b:40:6d:0d:0c:a8:37:45:b6:bd:60:66:82:58:
                    d5:fc:9f:96:ca:34:dd:ad:f2:19:ff:bc:24:d4:5d:
                    b3:76:9c:f6:f8:a1:5b:96:90:6f:81:56:7b:94:8d:
                    58:55:2b:8c:b4:61:d1:f0:da:18:39:2c:53:2e:bd:
                    ba:0b:74:f6:af:63:91:08:7d:be:8e:fa:05:15:c5:
                    00:1c:e6:68:2d:43:bb:a3:c6:a3:38:81:ff:63:01:
                    81:ed:98:d5:d9:fd:cc:11:96:6c:67:0d:f9:ea:00:
                    ef:8a:6b:c0:74:2a:64:b8:7d:73:7b:7e:d5:cc:f0:
                    94:e7:d4:36:50:64:01:c2:ce:74:be:ef:fe:41:ea:
                    de:6d:c2:b3:43:18:49:c1:de:7d:b2:09:43:17:55:
                    ed:82:ae:4f:95:fd:f4:59:32:07:f8:80:1c:1b:f6:
                    1c:a2:31:f3:39:cc:59:02:c0:95:9d:11:85:b7:79:
                    92:79:e4:5b:3b:ae:43:41:15:cc:a9:92:2f:f0:14:
                    4e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:29:8C:BB:5D:BE:FB:D7:5A:1A:C1:0E:79:0A:92:3B:B7:53:71:E8
            X509v3 Authority Key Identifier:
                keyid:2E:00:76:A3:7E:FD:CC:70:06:F7:54:C5:E6:82:51:07:3C:6A:03:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/2E0076A37EFDCC7006F754C5E68251073C6A031D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E0076A37EFDCC7006F754C5E68251073C6A031D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131392e302f32342d3234203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ee:34:b7:52:a3:a8:62:57:64:e9:87:e8:41:31:e9:9d:bc:
         40:55:4d:13:fb:ab:6b:d7:59:92:6d:43:30:99:80:20:b7:38:
         2b:b4:96:5b:56:e0:a0:27:95:85:6b:b9:50:a6:15:ad:5c:29:
         32:59:58:8b:73:89:2e:91:dc:90:19:cd:b6:58:36:1c:f9:84:
         12:54:98:1b:bc:2c:ca:14:c0:c0:94:39:8e:0e:84:b8:e4:88:
         d7:10:41:dc:6c:9b:27:06:55:76:82:9d:b2:07:cf:22:18:89:
         70:c8:62:23:b8:96:2e:c8:07:62:63:66:7b:61:72:a7:d7:20:
         ab:c5:fd:82:dc:db:57:f8:04:cf:14:2d:c9:ab:38:72:a1:61:
         6e:88:42:57:b1:d2:73:8e:23:46:c6:20:a0:65:6d:91:07:3b:
         45:77:17:23:81:19:4d:6b:2b:8e:91:00:50:10:13:71:cf:43:
         29:9a:e3:de:5a:00:dd:90:b2:46:6a:9d:9c:9a:02:fa:4d:b1:
         4f:f1:de:09:74:8c:45:9e:4f:76:d2:c2:da:4e:ef:54:16:ae:
         35:80:83:a0:de:6d:b2:8f:e3:c2:5d:f3:4e:33:0d:4e:af:59:
         f8:53:74:85:d0:ff:fa:29:ff:f9:00:a3:78:73:05:c0:14:19:
         2e:7f:c5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:56 2025 by rpki-client