Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139392e302f32342d3234203d3e20323637323138.roa
File:                     34352e3233312e3139392e302f32342d3234203d3e20323637323138.roa (raw, json)
Hash identifier:          GvWrXDK628P/cTnD7Vi0LR8if/5f5fjcP2mcN/t+HYM=
Subject key identifier:   ED:D8:9D:1F:F2:46:3D:27:CB:1C:15:90:AF:6F:4A:87:A3:59:81:05
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       4928C43BDF87D36B1E50088BECDD4957F5A7E092
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139392e302f32342d3234203d3e20323637323138.roa
Signing time:             Thu 06 Mar 2025 08:27:14 +0000
ROA not before:           Thu 06 Mar 2025 08:22:14 +0000
ROA not after:            Thu 05 Mar 2026 08:27:14 +0000
asID:                     267218
IP address blocks:        45.231.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:28:c4:3b:df:87:d3:6b:1e:50:08:8b:ec:dd:49:57:f5:a7:e0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Mar  6 08:22:14 2025 GMT
            Not After : Mar  5 08:27:14 2026 GMT
        Subject: CN=EDD89D1FF2463D27CB1C1590AF6F4A87A3598105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:34:c1:85:8b:a9:ac:5e:b7:69:c4:83:22:
                    5b:dc:25:ee:df:d3:7c:15:af:ca:5c:56:3f:d2:db:
                    61:b1:5b:05:ca:23:14:50:c8:24:08:27:55:f9:4c:
                    f6:0c:c2:25:21:1f:d3:5b:57:9b:88:a2:7e:18:d5:
                    fd:c0:12:7b:aa:a9:f9:d0:ae:dd:03:ed:b5:a2:e1:
                    d4:8e:44:96:e4:5c:04:a6:d2:58:fc:68:d0:d2:1c:
                    92:c2:b2:9f:e7:8a:c6:a8:3e:78:92:ed:85:cb:93:
                    6d:a8:be:04:4a:98:9e:a1:12:9c:e1:2d:91:15:c4:
                    3f:94:c7:2a:09:43:20:b9:47:47:9a:4b:2f:3c:15:
                    e5:89:91:d9:41:da:4e:9d:f3:15:0a:dc:74:cd:9b:
                    f4:f7:93:cc:60:29:8c:26:5d:d1:39:06:77:fc:f3:
                    28:bb:19:df:66:46:4b:bb:74:af:d4:8a:fa:21:73:
                    40:fd:2f:7e:62:26:81:89:0c:1d:68:95:b3:c7:97:
                    34:66:a4:ce:54:74:e3:75:ab:3f:71:ed:38:24:5e:
                    99:18:aa:c1:46:e9:e0:94:f9:c5:47:c1:00:88:3b:
                    40:72:ed:70:e4:32:b9:eb:40:56:e0:68:f3:ab:f2:
                    7c:b8:65:9a:66:58:19:5d:bb:71:40:2c:ab:cd:71:
                    40:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D8:9D:1F:F2:46:3D:27:CB:1C:15:90:AF:6F:4A:87:A3:59:81:05
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/34352e3233312e3139392e302f32342d3234203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:dc:21:c5:03:01:8d:3b:7e:d7:c6:53:b0:c9:c6:cd:45:5a:
         b1:50:73:6f:fe:58:8b:d5:01:29:83:fc:67:c8:f1:9d:7b:bb:
         d7:64:75:4e:6f:9c:13:b9:8e:1b:e0:cb:16:4d:44:21:1c:19:
         eb:81:ab:fc:7b:ae:a3:3f:f1:64:00:16:32:ba:98:b5:96:85:
         03:34:ce:2c:8b:bc:88:d1:71:6a:f4:3b:5c:10:77:0f:97:d0:
         0b:9a:36:2b:9b:dc:59:86:ad:b7:72:cb:b1:6c:19:69:f0:db:
         cf:0f:41:51:8a:27:02:d1:33:c4:7d:66:bf:7b:75:b2:35:03:
         d6:b5:c2:da:53:16:33:0b:03:40:cb:25:24:3d:f7:f9:3c:c0:
         38:10:34:a9:3c:4f:a9:69:d3:09:35:8f:06:07:91:18:fb:44:
         68:69:8c:b5:d9:d4:4e:96:f4:0a:90:f6:42:90:bd:88:c6:f9:
         e4:54:f0:c6:93:b2:58:2d:e5:83:64:92:18:b0:0a:b3:e6:d2:
         d2:4e:44:29:b9:e6:2b:26:34:eb:11:50:8e:66:34:3d:3a:bd:
         a7:c7:ae:3e:81:50:a4:ef:17:54:f3:20:27:d8:d4:a3:52:1a:
         ed:e2:0d:50:2c:59:e7:6d:fe:0d:89:56:3f:2a:c7:23:2b:b1:
         95:1b:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:24 2025 by rpki-client