Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa
File:                     34352e3137342e31302e302f32332d3233203d3e20323638393338.roa (raw, json)
Hash identifier:          EutCkXof4Hu16NoksQ21/CM8Kzw/U9c1ZAxMGB77jUA=
Subject key identifier:   2D:76:55:87:43:D9:8D:87:ED:61:4D:D8:C4:E6:23:FC:61:E6:6D:62
Certificate issuer:       /CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
Certificate serial:       0CB95A32DC1BF987E3E596387B0375BBE10C4C38
Authority key identifier: 5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa
Signing time:             Thu 06 Mar 2025 02:11:59 +0000
ROA not before:           Thu 06 Mar 2025 02:06:59 +0000
ROA not after:            Thu 05 Mar 2026 02:11:59 +0000
asID:                     268938
IP address blocks:        45.174.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b9:5a:32:dc:1b:f9:87:e3:e5:96:38:7b:03:75:bb:e1:0c:4c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
        Validity
            Not Before: Mar  6 02:06:59 2025 GMT
            Not After : Mar  5 02:11:59 2026 GMT
        Subject: CN=2D76558743D98D87ED614DD8C4E623FC61E66D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ab:4b:41:49:bf:52:01:c4:9c:94:5a:61:da:
                    b2:76:54:e7:f6:13:68:ac:ee:ad:dc:87:57:6f:bf:
                    5a:ea:f4:74:c6:48:cd:44:3b:a3:71:f5:1d:1b:6a:
                    72:7c:06:0a:f3:e2:96:d7:54:9c:e1:24:5a:b4:50:
                    70:a3:2f:bd:34:43:05:9a:d9:1e:9a:15:05:04:0a:
                    09:14:b5:fd:fe:c4:e9:ed:43:0b:d5:88:f3:19:2a:
                    99:eb:cd:71:aa:15:8e:29:10:65:50:82:ae:48:21:
                    52:03:eb:2d:aa:72:ed:ed:3e:85:31:23:3a:b2:1c:
                    d9:c2:1a:1a:da:84:41:bc:51:c7:51:68:1d:97:b7:
                    d9:87:42:c7:bf:f6:ab:79:43:2a:09:12:f9:38:18:
                    36:b1:66:e7:23:82:82:68:37:9c:71:a0:4d:99:90:
                    3d:23:54:80:3e:5f:26:cf:79:77:5c:dd:1c:5d:3d:
                    a5:2c:1a:b9:6c:52:41:23:78:06:ed:7c:cb:33:db:
                    cd:d7:91:b1:96:1b:12:a0:10:39:eb:1b:4c:5f:3e:
                    8e:ee:15:b7:20:f2:cf:a1:b8:a4:dc:10:c7:16:9e:
                    b8:2e:0e:ab:e4:81:0d:23:e4:5e:08:85:10:0f:44:
                    3a:92:3c:07:a4:a6:45:53:f9:7b:c4:4a:72:80:77:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:76:55:87:43:D9:8D:87:ED:61:4D:D8:C4:E6:23:FC:61:E6:6D:62
            X509v3 Authority Key Identifier:
                keyid:5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:96:44:22:31:09:e6:be:b5:84:f6:79:0e:e5:9b:35:bc:ad:
         0f:45:df:35:60:9a:d0:06:9c:a7:fe:c9:ed:74:9e:ad:7c:3e:
         20:01:97:e6:85:b0:ed:cd:07:44:74:bd:28:1f:7e:78:c9:14:
         89:bc:b5:b9:b8:4e:ab:b6:a0:7f:ce:0a:ea:9a:ae:98:2c:a2:
         1a:a0:c0:90:6a:98:29:8e:f2:08:2e:44:28:98:78:f0:82:a0:
         63:56:f3:3b:ce:46:e3:bc:87:3b:5c:c1:06:ed:f2:9f:66:c2:
         92:37:21:0e:9f:c3:76:38:86:59:a1:51:12:2b:76:67:c7:1c:
         1c:85:ac:73:d8:33:06:4e:cc:e5:90:d1:9c:7b:be:3c:67:59:
         60:db:0a:41:93:34:cc:c9:da:0f:c7:4a:15:d5:41:5c:4a:23:
         cb:cc:4b:91:e5:ab:23:75:7e:19:ed:a5:c7:7b:b4:42:36:96:
         3b:2c:f7:6f:82:cc:d3:e9:0a:af:1a:6c:07:72:9d:52:05:43:
         d1:ce:1a:3b:b2:80:be:a4:62:36:a8:f2:f7:cc:b2:e7:03:3a:
         bc:0b:0f:32:6f:96:f7:a8:93:80:1c:2a:08:6c:e6:57:9b:d8:
         90:4e:35:f7:4f:44:09:6a:1a:61:51:d6:b6:bb:c4:49:7b:08:
         46:c6:5a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:29:52 2025 by rpki-client