Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3232203d3e20323630393536.roa
File:                     34352e3137382e3230342e302f32322d3232203d3e20323630393536.roa (raw, json)
Hash identifier:          Hi0WW4TazdbDHW7Qvi6NUcM7NWMcTwFFmSA0+WO6OPs=
Subject key identifier:   AA:04:51:11:2C:28:C1:DA:75:F5:BC:EC:82:E5:79:C8:6F:87:0A:E8
Certificate issuer:       /CN=3295E3B481EE9D21F4414766870EF17DEDACBAAB
Certificate serial:       7ACC9022857ADFF87A218715B4E584085BE3AF5F
Authority key identifier: 32:95:E3:B4:81:EE:9D:21:F4:41:47:66:87:0E:F1:7D:ED:AC:BA:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3232203d3e20323630393536.roa
Signing time:             Fri 04 Aug 2023 11:34:50 +0000
ROA not before:           Fri 04 Aug 2023 11:29:50 +0000
ROA not after:            Fri 02 Aug 2024 11:34:50 +0000
asID:                     260956
IP address blocks:        45.178.204.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cc:90:22:85:7a:df:f8:7a:21:87:15:b4:e5:84:08:5b:e3:af:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3295E3B481EE9D21F4414766870EF17DEDACBAAB
        Validity
            Not Before: Aug  4 11:29:50 2023 GMT
            Not After : Aug  2 11:34:50 2024 GMT
        Subject: CN=AA0451112C28C1DA75F5BCEC82E579C86F870AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:84:a4:ed:41:47:be:fb:aa:29:53:37:7e:
                    77:ce:e5:8a:03:2f:57:6c:40:2c:8d:62:d2:ff:5c:
                    6c:e5:0c:e8:eb:f1:3c:7a:7d:d4:61:c5:cc:de:1c:
                    e1:38:b0:e5:86:a4:ce:37:e1:87:f6:61:97:2f:3a:
                    a2:72:0b:2c:fe:31:2d:18:ac:c3:1c:b7:91:90:66:
                    99:59:65:4d:fe:37:a0:56:e9:b1:cc:57:fb:30:aa:
                    db:6a:79:54:26:81:d1:75:32:4d:cb:7d:2b:95:2d:
                    45:fe:12:8d:42:d3:a1:e8:b1:f2:4c:e8:eb:2e:e4:
                    ee:a3:ca:6e:30:49:06:ab:25:77:18:f9:fb:8a:bd:
                    2c:ff:10:d7:67:78:62:ce:9f:86:a0:57:42:f4:98:
                    da:f1:b3:5c:34:8d:e4:0a:9a:e7:f7:60:cf:37:d9:
                    90:db:da:60:0d:07:30:45:75:9b:39:e7:cd:eb:29:
                    39:1e:0f:4d:a1:2c:0f:dd:ae:bd:b1:c1:94:34:00:
                    4d:2a:66:a4:13:e2:66:b6:ea:3a:af:88:fe:75:b9:
                    66:da:65:55:7d:59:12:99:03:76:c6:42:36:a4:a2:
                    4a:30:33:1f:16:b7:5b:f7:cd:c9:f6:d0:66:39:98:
                    9d:27:c3:8b:70:9a:6b:e3:eb:a7:e2:13:4e:e4:5c:
                    86:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:04:51:11:2C:28:C1:DA:75:F5:BC:EC:82:E5:79:C8:6F:87:0A:E8
            X509v3 Authority Key Identifier:
                keyid:32:95:E3:B4:81:EE:9D:21:F4:41:47:66:87:0E:F1:7D:ED:AC:BA:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32322d3232203d3e20323630393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:b0:e6:52:f2:87:e7:e3:86:2f:fa:4a:9d:24:c3:b0:a9:f7:
         69:a4:39:21:b4:01:22:24:af:18:c5:4c:a0:38:22:3f:ac:61:
         d1:a9:65:37:b0:2f:2a:65:de:46:47:87:a9:80:fb:a3:a4:5c:
         70:12:f1:42:f0:55:dc:24:6f:83:fb:78:1d:b7:3d:6a:ff:ec:
         72:43:8f:42:b5:4e:3c:23:3a:e5:78:40:92:87:4d:8f:d7:91:
         14:52:a2:e0:be:7e:38:45:9e:dd:26:c6:90:5c:8d:b6:b3:12:
         ab:6c:69:bd:15:9d:a7:44:e2:0e:97:9a:40:64:8b:54:90:9e:
         1e:cf:54:96:9d:53:20:c3:46:b1:76:1f:ef:15:22:25:68:f7:
         fd:f9:cc:dd:76:e4:bc:4a:07:47:46:47:80:b6:5b:16:ed:99:
         77:70:ea:53:d0:64:c0:5b:e0:6a:56:7a:90:4f:47:6f:bb:97:
         ef:c7:1e:b5:10:9c:b4:08:f8:49:c1:80:e8:fa:7b:d0:64:46:
         3a:37:e1:97:9b:8b:84:29:bc:f3:4d:c8:5f:6a:c9:80:ee:88:
         dd:38:f6:13:81:76:9f:f2:d1:08:e3:31:31:63:7d:a4:85:8e:
         95:d9:cf:7a:ea:d8:a5:d3:cb:fb:78:1b:8b:4a:90:16:4f:a6:
         20:70:80:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:30:28 2025 by rpki-client