Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35302e302f32342d3234203d3e20323638343437.roa
File:                     34352e3136312e35302e302f32342d3234203d3e20323638343437.roa (raw, json)
Hash identifier:          IlqWLYGghODrqO6TkJN2yhiBrt18XiwSj1NCRz8cS0Q=
Subject key identifier:   B8:1D:A8:48:F1:24:19:F7:F7:1D:BC:92:2A:21:74:A9:7C:49:0C:41
Certificate issuer:       /CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Certificate serial:       702D9A303F237A32C5E7D228BB5AE88D9542171A
Authority key identifier: 3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35302e302f32342d3234203d3e20323638343437.roa
Signing time:             Tue 08 Oct 2024 22:43:23 +0000
ROA not before:           Tue 08 Oct 2024 22:38:23 +0000
ROA not after:            Tue 07 Oct 2025 22:43:23 +0000
asID:                     268447
IP address blocks:        45.161.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2d:9a:30:3f:23:7a:32:c5:e7:d2:28:bb:5a:e8:8d:95:42:17:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
        Validity
            Not Before: Oct  8 22:38:23 2024 GMT
            Not After : Oct  7 22:43:23 2025 GMT
        Subject: CN=B81DA848F12419F7F71DBC922A2174A97C490C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:f6:c9:63:82:66:f9:7f:52:08:df:2e:9f:
                    a6:9f:46:a4:e1:cf:83:ca:da:73:b7:9d:81:65:75:
                    86:9e:8d:b5:31:25:32:9d:d1:87:09:6f:88:2e:df:
                    07:0e:94:57:9b:a7:f1:fc:7c:1a:98:be:b8:17:94:
                    f9:aa:7c:47:e5:8d:a5:98:64:ae:71:64:66:0e:80:
                    59:13:aa:56:dd:f0:25:84:9d:e6:68:3c:2c:b1:77:
                    84:61:98:e7:0b:64:c7:97:65:4e:b9:ae:82:8e:7e:
                    a8:69:e5:41:67:b7:e5:a8:05:99:b3:de:16:4e:52:
                    a1:e3:3e:93:de:72:2d:78:16:74:f7:59:48:fb:ec:
                    25:43:6b:fd:ba:6b:b2:0a:19:09:25:f5:da:f0:0f:
                    29:8c:61:b1:e3:86:69:ee:23:ef:5a:08:00:45:a2:
                    45:b0:79:09:04:e2:18:92:c6:5b:87:97:f4:ff:80:
                    9f:bb:fb:93:7d:e0:d5:a7:a8:1d:b9:7d:7b:d5:1d:
                    ac:b3:41:9d:ad:83:68:a6:e5:82:c6:14:a7:77:f4:
                    72:af:d2:ea:26:30:a6:c8:05:fb:a0:18:8f:9a:e0:
                    f5:cb:b5:c5:01:02:e3:29:72:fb:03:e6:eb:e4:6a:
                    17:25:7e:f4:7b:d7:48:f4:eb:d5:9d:ed:a1:c1:d3:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1D:A8:48:F1:24:19:F7:F7:1D:BC:92:2A:21:74:A9:7C:49:0C:41
            X509v3 Authority Key Identifier:
                keyid:3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35302e302f32342d3234203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:95:fd:ad:42:e6:46:e9:64:92:a8:88:10:fd:12:5f:e8:11:
         af:46:29:a8:21:ce:99:ab:09:70:50:d5:6c:c0:ba:7c:36:32:
         34:df:58:2c:f5:74:53:bf:36:5b:c2:0c:ad:7a:31:74:3d:64:
         eb:10:1a:a5:f9:db:5a:ea:51:a5:17:d2:a7:3a:87:f9:27:f4:
         c6:9c:a7:91:52:31:82:95:03:75:b6:8e:37:40:9e:f8:27:aa:
         21:8f:20:52:2f:07:5b:99:13:e4:48:fa:2f:22:40:e2:b7:05:
         ea:a9:28:b8:06:14:56:bb:74:53:20:66:f5:32:49:1b:a7:ea:
         8f:6b:ab:d5:91:b1:44:60:7d:44:45:14:64:41:09:86:13:b6:
         64:01:39:9e:4d:d9:9c:21:eb:e7:64:76:9d:14:33:ab:fc:67:
         de:ea:17:05:37:21:31:09:11:82:9a:e3:6b:09:b6:22:7a:92:
         4c:6d:8e:37:e1:8f:d3:c3:8b:97:0b:04:fb:e0:bf:6c:44:14:
         c5:49:6d:9b:77:00:69:31:03:76:cc:2a:eb:2c:96:ea:98:6e:
         22:87:b5:d6:c9:b4:34:25:ad:08:7b:ae:50:bc:72:f3:e3:64:
         d3:97:51:7a:82:7a:25:fe:85:78:20:5e:37:0d:ce:84:4c:1b:
         c9:a4:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:05 2025 by rpki-client