Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/34352e3136302e3130332e302f32342d3332203d3e20323638343036.roa
File:                     34352e3136302e3130332e302f32342d3332203d3e20323638343036.roa (raw, json)
Hash identifier:          2t22s4Oir4OIO8YYRvJ4YEvMCks7SaJvOowD8HMt2Tw=
Subject key identifier:   51:A4:4D:E5:E5:AD:B1:D0:53:64:DA:0F:8D:35:8B:1E:FC:0A:51:9D
Certificate issuer:       /CN=4852815508EC2F58157FB70DFE5F018163E5DD67
Certificate serial:       6307C43BBB0AED4D43345D5C9C3880DBE22F02E0
Authority key identifier: 48:52:81:55:08:EC:2F:58:15:7F:B7:0D:FE:5F:01:81:63:E5:DD:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4852815508EC2F58157FB70DFE5F018163E5DD67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/34352e3136302e3130332e302f32342d3332203d3e20323638343036.roa
Signing time:             Fri 05 Jul 2024 14:51:49 +0000
ROA not before:           Fri 05 Jul 2024 14:46:49 +0000
ROA not after:            Fri 04 Jul 2025 14:51:49 +0000
asID:                     268406
IP address blocks:        45.160.103.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:07:c4:3b:bb:0a:ed:4d:43:34:5d:5c:9c:38:80:db:e2:2f:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4852815508EC2F58157FB70DFE5F018163E5DD67
        Validity
            Not Before: Jul  5 14:46:49 2024 GMT
            Not After : Jul  4 14:51:49 2025 GMT
        Subject: CN=51A44DE5E5ADB1D05364DA0F8D358B1EFC0A519D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e5:3c:b3:26:ce:73:d6:b1:58:3c:99:4f:4f:
                    f3:7f:06:ea:ef:f5:a2:a1:9e:db:49:a7:17:b8:2d:
                    6f:8a:60:8d:4e:2f:c3:58:25:33:bb:e8:24:82:50:
                    0f:21:4a:73:c7:62:e0:d5:38:30:95:99:10:29:76:
                    4c:0b:fc:d8:37:fe:45:45:f7:ff:30:43:2e:c7:c9:
                    44:e7:60:bc:cb:05:b8:6e:11:44:a4:48:02:ad:c8:
                    cc:9b:1a:ae:10:fc:9f:7e:dc:68:e4:91:cf:3d:0d:
                    87:c9:db:f5:eb:58:1a:7f:b5:ae:6e:23:22:61:9c:
                    13:6c:86:19:4c:ce:19:05:e1:95:5f:87:62:d8:6d:
                    d8:52:30:62:3b:5e:63:bd:0b:7e:12:74:63:1c:02:
                    6d:76:80:68:d4:61:a7:51:ed:03:92:83:19:fa:a7:
                    8e:46:eb:b7:14:ea:c3:4e:5e:02:ec:f6:9a:b3:cc:
                    93:9b:d3:9e:3d:5a:27:cd:c8:cc:24:95:23:ca:c9:
                    0d:be:bf:cc:95:4f:19:a1:3f:88:50:e4:f3:89:87:
                    1a:19:3e:fb:25:d8:fe:e7:74:43:0b:ab:8b:8b:b2:
                    ef:fe:ab:43:d6:90:39:99:02:2f:a0:96:a3:06:72:
                    62:67:3e:cc:46:46:af:9a:06:ac:6e:b5:eb:60:9c:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A4:4D:E5:E5:AD:B1:D0:53:64:DA:0F:8D:35:8B:1E:FC:0A:51:9D
            X509v3 Authority Key Identifier:
                keyid:48:52:81:55:08:EC:2F:58:15:7F:B7:0D:FE:5F:01:81:63:E5:DD:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/4852815508EC2F58157FB70DFE5F018163E5DD67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4852815508EC2F58157FB70DFE5F018163E5DD67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/34352e3136302e3130332e302f32342d3332203d3e20323638343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:73:a6:68:fa:2e:79:cb:32:4d:f0:c7:5a:6b:66:18:b9:07:
         3c:54:c9:ce:dc:bc:36:6b:ea:27:29:f6:b4:ad:77:59:97:15:
         ce:a8:93:43:17:1f:79:a5:79:bf:8e:1a:7c:34:11:53:02:07:
         f2:4e:49:97:af:af:0f:86:6e:59:2e:66:19:c1:33:d8:25:be:
         75:e8:42:79:f9:65:c4:a4:55:2c:65:04:73:ed:74:e4:0b:2e:
         77:de:20:a4:bd:86:00:b2:cb:3c:2a:ec:ef:43:0a:1f:30:71:
         b0:7e:e8:fb:42:b2:b3:8b:3c:1f:31:25:08:97:ec:a7:57:a1:
         07:c8:70:4c:86:8a:fd:58:33:2e:8e:d2:4f:43:ce:ef:00:66:
         34:88:18:62:8f:e6:91:0b:bf:7f:a0:0f:f7:b8:af:63:83:ea:
         eb:99:14:b0:de:2b:2c:85:cf:2b:9f:d7:98:b7:f3:75:04:a9:
         fd:3c:1d:08:92:aa:9e:60:55:43:46:7d:4a:14:eb:d4:9c:dc:
         93:44:5a:ab:0e:2f:e2:33:bb:22:38:4c:eb:e8:34:1a:99:52:
         d8:6d:4a:e0:f0:a7:d7:57:2f:7e:7b:4b:8b:66:8d:61:db:77:
         d4:ba:fb:11:25:16:7e:fb:74:3c:c8:57:a9:72:71:75:49:e9:
         d4:d2:da:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:49:51 2025 by rpki-client