Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136322e302f32342d3234203d3e20323639373234.roa
File:                     34352e3138392e3136322e302f32342d3234203d3e20323639373234.roa (raw, json)
Hash identifier:          MWE6zYlhUrd03lhngkeWDNLL3mzhdwcMjbv2vnUsFsU=
Subject key identifier:   9F:18:CB:1A:6E:19:97:D0:2F:82:6C:0C:36:61:57:64:C1:8C:F8:BF
Certificate issuer:       /CN=E4D6F69AC5581A8F3760E52E48C0A165A0463D57
Certificate serial:       3992C7F0501394CBE5C9FC2A31F3AFE3EA44675E
Authority key identifier: E4:D6:F6:9A:C5:58:1A:8F:37:60:E5:2E:48:C0:A1:65:A0:46:3D:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136322e302f32342d3234203d3e20323639373234.roa
Signing time:             Tue 04 Feb 2025 19:47:46 +0000
ROA not before:           Tue 04 Feb 2025 19:42:46 +0000
ROA not after:            Tue 03 Feb 2026 19:47:46 +0000
asID:                     269724
IP address blocks:        45.189.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:92:c7:f0:50:13:94:cb:e5:c9:fc:2a:31:f3:af:e3:ea:44:67:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D6F69AC5581A8F3760E52E48C0A165A0463D57
        Validity
            Not Before: Feb  4 19:42:46 2025 GMT
            Not After : Feb  3 19:47:46 2026 GMT
        Subject: CN=9F18CB1A6E1997D02F826C0C36615764C18CF8BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4f:83:6c:0b:a1:92:bc:87:43:10:ad:54:f5:
                    7f:08:69:16:32:f9:6e:d0:50:23:e5:2a:eb:5e:e4:
                    91:68:f0:21:e4:c4:0c:b6:ae:3a:c0:53:b2:f8:62:
                    ba:b2:0f:b8:5c:cb:ea:0f:7a:d8:a2:c9:84:20:80:
                    15:92:4b:ed:c6:6d:cf:e7:4b:dc:e0:38:ff:69:4f:
                    46:ef:a8:e7:9b:2e:34:79:ef:4b:48:f9:a7:3b:b7:
                    10:11:9f:30:e0:23:2d:9a:81:9a:c0:7f:64:fe:08:
                    9c:37:79:ee:10:ba:73:5f:99:d4:1a:1a:e9:f6:d5:
                    26:1b:8f:33:11:6c:c6:a1:c8:47:ee:4e:07:34:c2:
                    b7:aa:27:09:94:49:ce:1f:ca:d3:53:d5:77:df:53:
                    73:96:fb:f2:15:a4:58:50:09:f5:2d:21:e8:b8:66:
                    1f:5c:85:0f:87:43:ba:4e:cf:be:13:85:c5:4d:d9:
                    45:31:33:35:46:2f:e2:a0:f1:40:c2:5e:b6:62:7c:
                    eb:34:68:d7:96:49:d0:27:3f:d2:8c:f0:26:b9:87:
                    d1:d5:60:50:87:d6:5e:9e:e3:be:7c:df:dd:b7:dd:
                    94:32:6c:30:ec:94:6c:5d:12:00:f4:b2:99:a5:1e:
                    c0:2f:e9:ad:6a:fb:88:3c:bf:fd:b2:ae:28:24:bd:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:18:CB:1A:6E:19:97:D0:2F:82:6C:0C:36:61:57:64:C1:8C:F8:BF
            X509v3 Authority Key Identifier:
                keyid:E4:D6:F6:9A:C5:58:1A:8F:37:60:E5:2E:48:C0:A1:65:A0:46:3D:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136322e302f32342d3234203d3e20323639373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:56:08:32:bc:5c:50:47:c7:18:c4:e6:a4:5a:2b:4f:4d:62:
         48:65:ea:5f:52:a2:4b:39:2f:7c:09:42:f8:80:bc:99:97:14:
         4e:7c:a2:08:7f:52:a5:98:28:61:4a:54:a6:dd:ae:2e:c9:9a:
         f1:bd:c4:2e:6f:f9:2f:e3:90:4c:06:41:cb:5c:27:bc:9e:b4:
         1b:8f:fb:76:00:ad:d6:30:4b:e2:85:e9:af:6c:e5:56:f0:17:
         0d:1c:8e:69:d9:7a:43:e3:51:cd:31:bf:4c:2c:fc:ca:09:32:
         bd:65:b6:e5:1a:95:68:24:be:1b:8b:c5:e0:ed:c1:75:05:cc:
         01:9c:0d:14:2a:dc:11:61:50:a7:73:cd:b3:eb:98:62:f5:b2:
         fa:b3:f3:29:ad:75:84:a3:4d:96:05:f1:a1:ed:b9:fe:4f:0e:
         92:b6:ee:89:70:d1:93:c0:4c:08:f7:ae:59:63:33:75:77:80:
         9f:00:03:b8:b2:89:08:a7:a3:3a:8d:ba:f3:1a:b6:cf:04:ce:
         76:1f:f2:7b:2e:0d:86:f4:60:75:90:ff:1a:74:a9:35:7f:db:
         4b:cb:82:bf:d4:1d:b2:4c:82:c1:f8:b4:fc:20:1b:90:58:8e:
         e1:03:d6:81:28:f1:dd:25:05:46:2c:fa:73:62:fd:3c:65:c8:
         81:e7:0e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:47:22 2025 by rpki-client