Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32362e302f32342d3234203d3e20323637303936.roa
File:                     34352e3232392e32362e302f32342d3234203d3e20323637303936.roa (raw, json)
Hash identifier:          qVLVFA4bsG02rfAZg0W+xnfcpOeFpH4UBHgE2qNXYU8=
Subject key identifier:   73:AB:50:86:E4:7C:FB:44:5C:44:03:3A:0D:36:CE:01:2B:44:5A:D6
Certificate issuer:       /CN=801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7
Certificate serial:       10A6C75635653D42AC3B9D39642446C5926785D2
Authority key identifier: 80:1F:F8:CE:80:8C:FA:AA:DB:7C:04:20:FD:EA:11:0B:55:C4:F7:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32362e302f32342d3234203d3e20323637303936.roa
Signing time:             Wed 11 Sep 2024 12:50:38 +0000
ROA not before:           Wed 11 Sep 2024 12:45:38 +0000
ROA not after:            Wed 10 Sep 2025 12:50:38 +0000
asID:                     267096
IP address blocks:        45.229.26.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a6:c7:56:35:65:3d:42:ac:3b:9d:39:64:24:46:c5:92:67:85:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7
        Validity
            Not Before: Sep 11 12:45:38 2024 GMT
            Not After : Sep 10 12:50:38 2025 GMT
        Subject: CN=73AB5086E47CFB445C44033A0D36CE012B445AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:54:7e:1f:dc:8b:91:92:6b:35:25:95:4d:
                    a8:f2:5f:46:9f:3e:f3:97:2d:3d:46:03:a2:ec:c9:
                    ce:95:b0:5a:a1:48:ba:3b:1e:ce:a1:82:47:e9:40:
                    a1:30:f3:f3:ec:48:7b:d6:8a:7d:1d:96:7d:61:00:
                    86:7e:77:a2:83:ca:90:f9:e9:13:d6:6c:2f:8c:cc:
                    7a:f1:84:18:4d:90:ca:ab:ab:af:45:6f:68:17:8a:
                    75:29:c1:a9:97:e7:e4:a0:b3:51:8f:4a:42:24:ed:
                    f5:01:49:8f:e9:93:fb:04:48:bf:8e:66:46:f7:be:
                    0d:7a:ee:d9:21:0d:2a:cd:1a:e7:86:36:3a:84:d8:
                    a2:7d:fa:d3:a6:93:9e:1c:45:88:31:8f:1b:57:1b:
                    43:25:0c:09:db:82:73:2b:e1:81:ed:f0:b7:d7:31:
                    b6:e2:e0:1e:41:e2:9c:2b:ac:b2:10:03:67:eb:ea:
                    80:1f:7b:a7:8b:87:87:3b:16:f5:23:84:2d:d2:e2:
                    83:78:4a:37:9a:aa:45:66:02:e3:e7:53:1e:ee:d0:
                    1a:06:fc:26:55:46:e2:d6:02:32:a7:5d:3c:6c:c8:
                    dd:d5:a1:7d:11:71:0c:36:fa:d3:91:63:fe:f1:eb:
                    d6:62:c2:ff:d6:ba:c9:44:a1:01:42:26:af:30:83:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:50:86:E4:7C:FB:44:5C:44:03:3A:0D:36:CE:01:2B:44:5A:D6
            X509v3 Authority Key Identifier:
                keyid:80:1F:F8:CE:80:8C:FA:AA:DB:7C:04:20:FD:EA:11:0B:55:C4:F7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/801FF8CE808CFAAADB7C0420FDEA110B55C4F7D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/34352e3232392e32362e302f32342d3234203d3e20323637303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:ab:5d:3c:62:04:6a:03:91:75:97:0c:dc:1c:90:fb:54:48:
         9a:35:9d:e4:dd:90:1c:94:2f:97:a2:7c:84:e6:2f:e9:3a:5f:
         f5:89:9e:c7:07:20:18:55:01:c1:e1:bb:fc:2b:eb:ac:ad:db:
         1a:5d:ac:f6:6d:58:c3:d7:08:85:72:6f:c2:d3:64:9d:1c:a0:
         00:2d:ea:49:cb:9f:bf:98:32:a1:f8:20:e0:1c:fa:71:f6:42:
         78:8f:2f:91:8d:7e:43:3f:1c:35:56:4a:ca:81:98:c5:d3:d3:
         eb:92:20:0f:62:b3:b4:7e:34:77:aa:a7:33:9b:a6:60:51:6c:
         40:d2:af:ec:f9:c3:4f:f3:e1:96:b6:a7:8c:f1:3e:1e:28:4d:
         48:52:4a:35:2a:58:e5:12:fa:3f:a1:50:36:e4:ec:0d:2e:f8:
         db:34:dd:42:0e:94:6d:d0:00:0e:b7:5d:9c:62:2b:a3:6b:8b:
         45:f4:61:50:3b:62:ca:fb:bf:1d:c0:96:d9:79:0f:d9:51:2a:
         69:f7:4a:09:48:a6:e7:0e:58:78:76:44:c5:eb:ec:11:1d:04:
         7e:a8:12:e5:15:59:a6:e8:31:5a:34:b8:fd:06:b7:16:90:0b:
         15:3c:54:a9:d9:c6:cf:c8:d7:1c:87:94:be:3f:0a:6d:48:68:
         a6:9f:cb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:19:07 2025 by rpki-client