Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36362e302f32342d3234203d3e20323639363730.roa
File:                     34352e3139312e36362e302f32342d3234203d3e20323639363730.roa (raw, json)
Hash identifier:          XliBItMVJqUpGd2PGu0OmcyhpHkSRxxumnwQGb35Hz4=
Subject key identifier:   F1:94:1A:87:87:47:85:E4:43:3E:6D:C3:0A:00:91:D6:7A:28:18:D2
Certificate issuer:       /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial:       14FC59B3B6A1650D4D58544DB7F4EC9F09AC802D
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36362e302f32342d3234203d3e20323639363730.roa
Signing time:             Wed 05 Mar 2025 20:00:24 +0000
ROA not before:           Wed 05 Mar 2025 19:55:24 +0000
ROA not after:            Wed 04 Mar 2026 20:00:24 +0000
asID:                     269670
IP address blocks:        45.191.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fc:59:b3:b6:a1:65:0d:4d:58:54:4d:b7:f4:ec:9f:09:ac:80:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
        Validity
            Not Before: Mar  5 19:55:24 2025 GMT
            Not After : Mar  4 20:00:24 2026 GMT
        Subject: CN=F1941A87874785E4433E6DC30A0091D67A2818D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:3d:53:bd:c9:1d:d6:9d:68:f5:a7:67:c8:
                    08:ab:90:3b:92:5a:35:2c:cc:41:d7:9a:02:cd:c1:
                    b9:6c:56:c7:20:4f:06:f0:10:05:19:58:c7:b2:a4:
                    cf:51:25:4c:8a:3f:80:ee:27:5c:4c:27:c3:41:aa:
                    d2:ec:7b:0d:3e:b1:24:98:84:a7:3d:ab:94:52:80:
                    38:fc:3a:a3:e8:cc:30:74:a8:7d:41:9a:4f:2d:c4:
                    79:b8:fc:77:ad:84:1d:b4:c1:d1:8e:c5:cb:34:71:
                    21:0a:64:d8:ca:02:5a:4d:c5:78:a0:72:52:81:9d:
                    1f:53:16:d9:b6:51:40:ef:5c:8a:e8:15:4b:30:b1:
                    cf:27:f1:ce:dc:ba:60:d7:9f:b5:33:d9:c4:ca:75:
                    1f:93:21:72:3c:db:18:b3:41:9a:3c:1d:ce:89:ee:
                    03:cc:79:de:8c:12:7d:39:d2:2a:d9:4c:f8:2f:a7:
                    7f:1f:6c:f9:94:73:b1:75:60:91:9d:e2:3c:ef:2d:
                    62:c4:73:cb:eb:d7:8b:c3:34:d0:3d:73:5a:54:4e:
                    aa:35:2e:4f:b2:e0:ef:13:02:5e:48:a6:af:73:df:
                    2d:43:c7:2f:73:46:7a:dd:b1:f3:54:62:6e:63:be:
                    ea:f0:c4:5e:92:f4:fe:e5:77:18:09:5d:f3:bc:f1:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:94:1A:87:87:47:85:E4:43:3E:6D:C3:0A:00:91:D6:7A:28:18:D2
            X509v3 Authority Key Identifier:
                keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36362e302f32342d3234203d3e20323639363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:74:c6:08:ab:c8:ad:07:c2:51:2c:59:0e:99:a4:f5:a1:e4:
         76:37:c3:aa:be:0d:77:ee:64:9c:ef:07:d4:b3:e7:a5:8a:e7:
         bd:49:db:d7:a9:19:6d:c3:11:0d:50:20:91:b0:da:0d:cc:50:
         5a:99:3d:29:15:8a:a7:2b:ca:8d:32:9f:c7:67:c5:1d:cc:6a:
         ee:f0:3a:03:e7:6d:5e:a6:1f:f8:ba:c8:4d:ec:e7:76:d2:3c:
         f0:6d:41:60:ac:65:4d:83:de:25:14:e0:06:03:b3:01:03:ab:
         4b:7e:31:f4:25:58:df:b8:9c:81:96:9c:24:8b:ee:01:8c:1f:
         e3:df:a8:c2:00:16:d0:65:c1:2e:cd:63:97:a3:fb:36:5e:f7:
         70:87:b0:c9:38:d8:42:bc:31:ef:88:62:e0:80:d2:7b:83:88:
         c7:e5:f9:0f:81:89:29:bc:1a:6b:d4:d7:e6:fc:f4:6e:6c:86:
         57:91:48:97:65:e5:32:59:b7:c5:b7:cb:53:2f:4d:d3:dd:1b:
         67:5e:96:9b:ee:25:64:8c:e3:c4:fa:41:21:73:e6:8b:8e:4c:
         f9:f2:53:ac:80:3a:2e:28:af:13:2a:7e:2d:44:6c:de:bf:f7:
         1c:c2:df:f0:67:48:ab:4c:62:db:99:69:a9:92:14:c6:70:a5:
         20:50:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:43:15 2025 by rpki-client