Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          GU6deRi/iCoYTYIdFj/1m2XSkBGz5G7vbDv7rmeS6Qo=
Subject key identifier:   09:27:9A:49:B8:DC:77:E3:6C:AF:FF:5A:B8:18:96:73:AE:F2:ED:61
Certificate issuer:       /CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
Certificate serial:       1F5FEFE67B6C5454593E3F5375E6A1A000077F08
Authority key identifier: 4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa
Signing time:             Fri 31 Jan 2025 18:02:24 +0000
ROA not before:           Fri 31 Jan 2025 17:57:24 +0000
ROA not after:            Fri 30 Jan 2026 18:02:24 +0000
asID:                     267027
IP address blocks:        45.227.170.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5f:ef:e6:7b:6c:54:54:59:3e:3f:53:75:e6:a1:a0:00:07:7f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
        Validity
            Not Before: Jan 31 17:57:24 2025 GMT
            Not After : Jan 30 18:02:24 2026 GMT
        Subject: CN=09279A49B8DC77E36CAFFF5AB8189673AEF2ED61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:34:3f:b1:c6:56:71:5e:d4:1e:bc:80:71:77:
                    bd:62:a0:f7:fd:c0:9f:59:76:7b:15:b9:e4:17:42:
                    f8:42:3a:30:11:18:fb:19:a7:57:cd:a7:ff:c7:3e:
                    36:21:87:e6:da:43:62:c6:79:f5:46:7d:ac:27:a6:
                    92:4c:06:3b:54:80:72:88:3a:72:c0:6c:ec:b8:c7:
                    d5:d8:1a:57:f0:dc:fa:c9:d1:18:88:cd:5a:5d:c4:
                    67:3d:29:6b:bf:8d:0a:f6:93:42:00:f5:f8:18:28:
                    f7:e6:40:37:35:26:7b:ec:bf:9e:54:b0:ae:df:29:
                    59:7f:83:71:4f:88:9e:d4:3a:97:27:48:94:a1:e2:
                    b9:60:27:4b:27:c0:af:cc:d1:86:5b:2b:1a:bf:d7:
                    11:79:aa:04:b9:f3:49:af:1c:36:30:ee:8e:b0:45:
                    61:f7:4d:e4:a7:de:92:12:f3:ec:c0:cb:0d:ac:1f:
                    72:b5:4f:5d:04:a5:66:dc:0d:24:97:cb:e7:34:67:
                    f3:66:c6:1a:44:ab:2e:81:b3:64:15:a0:17:cf:71:
                    8c:09:14:36:d9:e1:00:ae:eb:3e:5e:80:a1:6d:52:
                    fc:23:f9:b5:bc:65:96:61:47:4d:08:5a:b5:02:67:
                    a9:eb:33:ed:a7:4e:a9:9f:f3:03:48:2a:6d:7b:9e:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:27:9A:49:B8:DC:77:E3:6C:AF:FF:5A:B8:18:96:73:AE:F2:ED:61
            X509v3 Authority Key Identifier:
                keyid:4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4d:81:b5:1a:dc:08:e2:ea:56:33:a3:ab:53:5a:c2:9e:40:
         f5:6a:38:4d:64:26:a8:e4:22:24:6f:50:60:18:60:04:ef:dc:
         24:62:bd:5b:1b:61:31:f9:3d:46:a9:9d:aa:97:34:86:b7:ed:
         43:29:f7:35:89:a8:62:fa:c4:0e:9c:07:63:d7:95:37:37:e0:
         9f:38:5b:c1:03:fe:5c:4a:b9:70:3b:f8:49:af:06:2b:ff:9b:
         c3:cc:46:62:59:12:b0:d4:e3:9e:be:a6:98:eb:6f:94:02:1c:
         3b:68:c5:f8:cd:1e:81:e3:82:5d:23:20:2e:57:63:43:e8:cd:
         76:af:df:d2:cc:8f:b6:02:f6:c5:46:10:86:df:16:65:67:18:
         75:ea:c4:0a:f8:12:05:3b:01:bf:93:c8:15:58:9f:66:6a:3f:
         39:88:82:29:8f:44:71:96:2b:e3:38:98:cb:29:0f:9a:85:c8:
         9c:5b:9a:25:84:cb:67:9a:39:6e:6b:3a:12:f1:5e:78:a6:ec:
         16:ac:ae:8c:f4:90:c1:b8:2e:a3:e1:71:22:21:d6:ba:8f:4d:
         e2:43:28:d3:0c:90:27:bb:03:33:ee:6f:41:c7:e0:ce:6f:95:
         7a:f6:f2:26:6a:c2:dc:2c:fc:0e:03:10:ed:b7:14:e8:89:d1:
         2a:48:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:32:20 2025 by rpki-client