Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/34352e3137392e342e302f32342d3234203d3e20323639313230.roa
File:                     34352e3137392e342e302f32342d3234203d3e20323639313230.roa (raw, json)
Hash identifier:          /lqbtQqWkzpqifkc4/G2YJ67KqYHTZ2smAvIoq6Gx2o=
Subject key identifier:   CA:E4:4A:52:6A:B8:37:5D:1D:AF:18:C2:B6:36:F9:18:50:39:09:A3
Certificate issuer:       /CN=6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A
Certificate serial:       02645A9B3DAB80921D8064F5204175DA69D87550
Authority key identifier: 6B:6A:2A:9C:47:A9:F6:0A:7A:49:B3:AB:53:B5:8E:89:F7:12:75:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/34352e3137392e342e302f32342d3234203d3e20323639313230.roa
Signing time:             Wed 08 Nov 2023 17:39:57 +0000
ROA not before:           Wed 08 Nov 2023 17:34:57 +0000
ROA not after:            Wed 06 Nov 2024 17:39:57 +0000
asID:                     269120
IP address blocks:        45.179.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:64:5a:9b:3d:ab:80:92:1d:80:64:f5:20:41:75:da:69:d8:75:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A
        Validity
            Not Before: Nov  8 17:34:57 2023 GMT
            Not After : Nov  6 17:39:57 2024 GMT
        Subject: CN=CAE44A526AB8375D1DAF18C2B636F918503909A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:11:43:84:f8:66:e1:2a:d9:e0:9a:85:67:
                    7b:b4:5e:b6:89:b2:bb:c2:c8:7d:70:9e:24:4d:b1:
                    ad:b9:2a:5b:08:f1:d0:c2:6c:91:93:ca:ad:88:5e:
                    85:73:b4:b7:e6:0b:ad:ab:72:ab:93:84:3e:e1:2b:
                    b3:c1:d3:54:2f:05:fc:db:3b:d6:25:cb:b8:ba:05:
                    19:03:88:f6:94:8e:fb:6d:82:53:62:d3:34:7d:01:
                    0b:8f:41:41:d4:6c:28:3f:95:39:16:17:89:80:d7:
                    da:74:73:23:f6:5a:68:b4:ce:11:cf:73:80:1f:08:
                    07:c2:39:a1:72:dc:34:86:e7:1f:e7:f8:ae:8c:01:
                    d8:6a:07:77:19:21:9e:4c:3c:a2:92:34:68:4f:e9:
                    82:a4:44:26:82:64:62:90:7b:a7:cb:83:72:bc:84:
                    29:13:c6:dc:a1:74:65:5c:1d:45:9a:62:c4:39:1a:
                    b3:9a:6b:e5:50:6e:00:a7:07:3f:06:83:f4:04:08:
                    f1:ba:05:c0:ad:44:d1:37:2e:3b:83:46:06:6e:70:
                    c2:db:a9:cc:95:da:0e:2e:67:61:23:46:6e:2d:1c:
                    dc:58:b1:95:26:c3:53:8b:41:f3:84:4c:7b:c0:e4:
                    87:b9:ba:61:d2:5d:1f:f8:71:9a:12:b6:56:57:38:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E4:4A:52:6A:B8:37:5D:1D:AF:18:C2:B6:36:F9:18:50:39:09:A3
            X509v3 Authority Key Identifier:
                keyid:6B:6A:2A:9C:47:A9:F6:0A:7A:49:B3:AB:53:B5:8E:89:F7:12:75:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/34352e3137392e342e302f32342d3234203d3e20323639313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:18:f4:95:87:fc:d7:ba:29:e6:c6:d3:73:03:cd:94:b5:92:
         2a:90:17:a1:3a:34:d7:21:94:1a:b2:00:84:04:1a:1e:44:89:
         3d:46:02:37:a6:e6:50:93:f5:eb:e0:79:5a:26:8f:41:c8:e4:
         8c:cb:7f:a2:9d:65:ec:ea:e9:22:14:c5:fe:9b:49:62:d8:bc:
         c4:06:30:25:6c:69:87:8b:b6:9c:53:ad:f3:77:86:3d:09:db:
         4f:fb:5b:d2:6b:30:e8:4a:bc:05:7e:31:b8:3b:00:72:46:f4:
         96:39:76:1b:d7:74:57:a9:69:a7:c5:61:cf:57:47:bd:f1:6a:
         e5:08:17:13:35:b3:92:72:6f:4e:d1:93:8e:39:11:fb:df:b6:
         f2:49:36:ae:4c:ef:33:8a:33:6e:07:fa:03:03:96:79:c5:9d:
         0f:30:62:87:8b:08:c9:7c:35:42:bb:8c:ce:99:df:2b:e0:ab:
         14:f1:32:4c:00:cc:9f:14:92:8b:9a:1c:c8:69:6c:18:97:2f:
         f4:36:e5:e1:5c:4a:a7:18:03:74:c2:2e:47:5b:f5:b0:ef:f1:
         50:3c:33:96:92:23:8c:42:1b:53:5a:a1:11:da:c2:3c:88:57:
         22:c9:0f:bc:69:ba:b5:f1:ce:e7:91:be:22:4f:48:c9:58:25:
         dc:6c:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:06:05 2025 by rpki-client