Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32332d3233203d3e20323637363336.roa
File:                     34352e3232342e32342e302f32332d3233203d3e20323637363336.roa (raw, json)
Hash identifier:          wCHI1EP5lyVg9j2OQa7Iu0zR4VUgSq01EEwkifSxWV8=
Subject key identifier:   3A:29:4E:01:09:49:E6:0A:FD:FB:48:81:F8:7B:0A:AC:10:8D:24:18
Certificate issuer:       /CN=38D9697A2330FB616A4B50BDB942F33C06977A53
Certificate serial:       594ABF560528CD90E8A3CA3CB7F9A3246874E263
Authority key identifier: 38:D9:69:7A:23:30:FB:61:6A:4B:50:BD:B9:42:F3:3C:06:97:7A:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D9697A2330FB616A4B50BDB942F33C06977A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32332d3233203d3e20323637363336.roa
Signing time:             Mon 06 Mar 2023 20:28:02 +0000
ROA not before:           Mon 06 Mar 2023 20:23:02 +0000
ROA not after:            Mon 04 Mar 2024 20:28:02 +0000
asID:                     267636
IP address blocks:        45.224.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4a:bf:56:05:28:cd:90:e8:a3:ca:3c:b7:f9:a3:24:68:74:e2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38D9697A2330FB616A4B50BDB942F33C06977A53
        Validity
            Not Before: Mar  6 20:23:02 2023 GMT
            Not After : Mar  4 20:28:02 2024 GMT
        Subject: CN=3A294E010949E60AFDFB4881F87B0AAC108D2418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:fc:fd:10:da:f3:9f:30:24:6e:80:45:84:
                    67:42:02:fb:2f:78:a4:e6:d2:6b:5c:b3:c1:88:ad:
                    52:64:38:9a:39:48:7a:03:f2:33:4d:6b:55:b8:8a:
                    d0:d5:c2:5e:4c:91:f4:1d:07:5c:ef:f6:68:09:0d:
                    4d:65:ef:16:79:98:b8:83:28:da:77:a8:fe:23:0e:
                    16:92:d4:14:7c:bf:6b:0a:5a:c6:5d:fa:2b:c8:b1:
                    82:0a:ee:06:f8:f7:13:d0:bc:b1:4a:74:68:13:f0:
                    a6:65:49:8e:30:21:8d:42:f7:00:67:a3:55:a3:12:
                    30:b9:bb:39:b2:62:6d:64:69:55:5b:66:5c:3f:a2:
                    e9:8e:a7:16:c5:39:1d:2b:a7:79:5e:48:50:cc:83:
                    55:b5:69:61:3f:4a:cc:59:15:91:e7:3f:db:b4:aa:
                    a3:f3:63:76:89:eb:3c:4d:bc:54:f7:65:5c:f4:6c:
                    59:f4:d5:7a:01:30:88:95:cf:63:1a:df:96:9d:bd:
                    a7:a0:56:39:62:7e:9d:db:e2:92:39:02:e2:36:27:
                    2b:be:05:57:2e:e6:81:ac:db:74:e1:de:e5:89:17:
                    b7:20:0d:a9:8b:bb:11:2a:32:99:bb:9d:3e:e1:de:
                    e1:18:29:ac:d6:84:78:d0:9f:c5:33:2b:13:64:f6:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:29:4E:01:09:49:E6:0A:FD:FB:48:81:F8:7B:0A:AC:10:8D:24:18
            X509v3 Authority Key Identifier:
                keyid:38:D9:69:7A:23:30:FB:61:6A:4B:50:BD:B9:42:F3:3C:06:97:7A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/38D9697A2330FB616A4B50BDB942F33C06977A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D9697A2330FB616A4B50BDB942F33C06977A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32332d3233203d3e20323637363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:7c:73:4a:25:d9:55:03:34:8d:6b:d8:1c:ee:91:02:04:5a:
         e8:6b:a6:20:17:c2:ce:69:77:69:d2:4b:a7:43:af:76:05:af:
         e6:81:0c:47:7b:db:d0:fa:89:63:31:ae:9a:c2:bb:f7:5b:5d:
         28:44:40:f6:4b:9c:79:d5:56:b5:bb:bd:3b:f5:97:09:a0:24:
         a8:fa:ec:d2:b9:ee:cd:5c:b8:4e:e7:c1:29:8e:c3:30:6c:75:
         29:a2:e2:ed:cf:ff:9d:27:0b:2a:da:46:9d:1c:c1:61:1f:6a:
         fb:0d:c0:4c:1d:f0:ac:a6:a7:68:5a:0f:4e:1e:85:03:d0:56:
         cc:91:a6:59:03:bf:3a:47:fe:a3:f8:83:fb:ec:0c:39:04:76:
         13:57:02:9a:15:47:91:08:39:4c:20:c2:f1:78:f2:8f:1e:d2:
         e9:ab:db:63:0a:32:9d:fd:71:5e:f0:e9:be:45:1e:e3:73:e8:
         25:64:4d:6a:3d:33:65:1e:86:22:f1:6b:8c:38:78:7a:03:cf:
         74:6e:50:60:d6:a7:28:d6:71:33:ff:57:dd:b6:52:71:3d:82:
         2a:62:99:3b:60:df:77:22:f3:b1:29:57:2a:50:17:bb:40:d9:
         c4:b9:e7:51:4e:3f:36:d4:ff:2f:4b:32:b5:11:12:62:0b:88:
         4a:69:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:13 2025 by rpki-client