Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231352e302f32342d3234203d3e2030.roa
File:                     34352e3136312e3231352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          XAvpdg/9BYIW22hyiuX2jLxnZJidQsDhEbWjSwK3Jpc=
Subject key identifier:   B2:C9:91:06:91:D6:FA:80:20:EA:85:0E:3D:5B:ED:07:94:A6:42:5B
Certificate issuer:       /CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
Certificate serial:       5CB458AA1E2564BA6EE4B3FDD934ABFEB03C2841
Authority key identifier: 7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231352e302f32342d3234203d3e2030.roa
Signing time:             Mon 24 Apr 2023 12:58:37 +0000
ROA not before:           Mon 24 Apr 2023 12:53:37 +0000
ROA not after:            Mon 22 Apr 2024 12:58:37 +0000
asID:                     0
IP address blocks:        45.161.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b4:58:aa:1e:25:64:ba:6e:e4:b3:fd:d9:34:ab:fe:b0:3c:28:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
        Validity
            Not Before: Apr 24 12:53:37 2023 GMT
            Not After : Apr 22 12:58:37 2024 GMT
        Subject: CN=B2C9910691D6FA8020EA850E3D5BED0794A6425B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:ff:f8:61:86:16:cd:6e:47:15:d2:fb:d8:
                    c5:21:6d:9f:71:7a:1e:be:97:4a:20:ce:f2:2d:07:
                    dc:df:70:56:e8:39:81:15:c9:f7:cd:a3:55:6e:0a:
                    98:37:d7:87:07:c7:56:e1:08:42:c5:72:4b:58:40:
                    c4:af:7d:e0:58:39:19:e1:4f:15:56:a2:4e:83:6f:
                    2d:69:9f:5c:9f:65:28:6b:c9:cf:37:72:19:e4:fe:
                    34:28:6a:e4:cf:9e:21:02:ab:1d:85:d5:6d:2c:f5:
                    4e:5a:7e:be:98:da:70:02:0c:74:38:64:06:31:01:
                    6b:94:12:c3:17:63:99:33:57:c1:ab:6c:b8:c9:c3:
                    99:b5:e3:67:81:4c:2b:5f:ca:f4:41:bd:b1:3f:04:
                    53:88:cf:73:b5:93:db:92:f3:eb:a7:e5:69:93:d7:
                    2f:a4:84:83:4f:53:2b:3d:aa:df:f8:07:c5:98:11:
                    53:d6:60:9d:7a:00:02:4d:18:86:0a:41:b0:ee:1c:
                    3b:6d:24:da:1e:44:af:06:57:ca:17:2c:26:92:14:
                    d1:42:8a:27:50:2a:c2:15:35:83:39:09:e5:be:90:
                    48:f4:fe:4e:d0:c9:6e:40:7e:85:c9:05:de:94:a5:
                    d7:38:f3:80:d0:d9:81:b6:09:e9:9e:14:b5:a3:e6:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C9:91:06:91:D6:FA:80:20:EA:85:0E:3D:5B:ED:07:94:A6:42:5B
            X509v3 Authority Key Identifier:
                keyid:7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/34352e3136312e3231352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:7d:54:b0:df:0e:30:8c:c4:09:16:c6:53:93:16:5b:4d:c2:
         ad:ee:af:4f:de:26:d0:7c:16:38:1e:e8:1b:73:6d:46:97:2a:
         80:ec:8d:88:e9:b2:b7:01:bd:25:55:a8:17:31:dc:6d:f6:c4:
         0d:27:bb:7a:30:a3:96:5a:0d:25:b8:b5:7b:07:34:c4:8b:d0:
         fc:ed:7e:ec:80:b1:a3:82:40:e9:16:db:3f:19:f5:a1:9f:7b:
         6f:44:3e:16:42:24:34:48:cb:e3:1f:d4:37:d2:5d:c8:b2:cc:
         29:72:31:c7:b6:f3:a3:a2:50:91:39:50:7d:07:04:5e:4f:2a:
         d3:7c:67:0c:63:53:68:9e:02:a9:51:7d:60:47:dd:46:81:0f:
         42:2b:fa:47:92:0b:52:ab:44:a9:1d:5b:f0:4e:b7:4e:2b:76:
         41:61:12:ce:e9:63:42:5b:51:eb:e4:50:7e:82:62:af:a1:59:
         1c:ac:b6:34:d7:0b:16:ee:02:eb:16:7a:69:3c:5c:83:29:67:
         f9:87:f2:08:60:df:19:e0:3f:11:36:d9:f5:c1:ec:ba:15:79:
         26:b0:9a:9d:45:15:e6:f6:33:93:2c:b4:1f:f8:7d:d9:38:66:
         0a:d4:c2:06:1e:3c:2a:60:ad:11:36:45:f7:f0:b4:15:bb:35:
         e0:01:fb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:52:02 2025 by rpki-client