Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/34352e3137372e3134382e302f32322d3332203d3e20323638393938.roa
File:                     34352e3137372e3134382e302f32322d3332203d3e20323638393938.roa (raw, json)
Hash identifier:          vrAc7Qk9v2rhGDltN9edlxNgbJpwz4C2C8vuRsyPcIQ=
Subject key identifier:   F0:D8:FE:7C:CC:02:4B:D4:9B:B5:A4:F2:ED:CB:FA:D9:0C:F9:B0:1C
Certificate issuer:       /CN=63B0E3CA66D44E26679E4B62E4AA160AC0F42B66
Certificate serial:       3323D95E01A1C882C415D16B530A6510795C20A2
Authority key identifier: 63:B0:E3:CA:66:D4:4E:26:67:9E:4B:62:E4:AA:16:0A:C0:F4:2B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/34352e3137372e3134382e302f32322d3332203d3e20323638393938.roa
Signing time:             Tue 26 Dec 2023 23:24:04 +0000
ROA not before:           Tue 26 Dec 2023 23:19:04 +0000
ROA not after:            Tue 24 Dec 2024 23:24:04 +0000
asID:                     268998
IP address blocks:        45.177.148.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:23:d9:5e:01:a1:c8:82:c4:15:d1:6b:53:0a:65:10:79:5c:20:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B0E3CA66D44E26679E4B62E4AA160AC0F42B66
        Validity
            Not Before: Dec 26 23:19:04 2023 GMT
            Not After : Dec 24 23:24:04 2024 GMT
        Subject: CN=F0D8FE7CCC024BD49BB5A4F2EDCBFAD90CF9B01C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:15:38:03:c9:4b:e4:d3:f0:2c:72:c9:49:
                    71:59:de:99:93:50:25:0a:85:50:aa:1e:aa:95:7d:
                    71:c5:5a:0a:8a:c7:9c:9a:19:3c:a6:d7:4c:f9:6a:
                    b7:6b:82:2e:1c:dd:60:33:16:0b:09:ec:8c:9f:13:
                    21:1f:cb:b6:65:3e:e1:e7:1f:4c:76:de:85:98:52:
                    3a:45:d5:f2:30:96:bb:37:e0:10:2c:5b:e9:7c:d7:
                    09:f2:4c:a6:b2:b1:a3:6f:7b:b7:81:34:1d:cd:22:
                    e0:7f:86:5d:4d:61:1a:19:2f:93:45:f4:17:85:8d:
                    83:7c:4e:09:6b:1b:40:19:2d:21:59:18:8a:ad:71:
                    9c:9e:c4:6d:5a:59:f2:0d:45:03:7e:e4:e1:e2:39:
                    4a:7d:8c:6c:c1:35:4c:a8:8b:a1:f0:59:30:e4:e5:
                    78:f4:c1:4c:6e:a0:8e:bc:75:9a:13:67:d9:60:bc:
                    90:0e:0a:6d:b8:55:09:1b:02:fd:b0:0b:41:9a:93:
                    fb:71:1c:a1:7f:17:a4:c8:11:c3:9e:ab:80:1b:f4:
                    02:36:ed:be:04:08:a6:94:4a:c5:6b:7e:27:18:02:
                    f5:2c:33:8e:e8:95:19:ac:cc:16:46:54:57:b9:43:
                    1f:14:1f:64:22:f7:43:1a:5d:97:da:87:ba:a2:d6:
                    f2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D8:FE:7C:CC:02:4B:D4:9B:B5:A4:F2:ED:CB:FA:D9:0C:F9:B0:1C
            X509v3 Authority Key Identifier:
                keyid:63:B0:E3:CA:66:D4:4E:26:67:9E:4B:62:E4:AA:16:0A:C0:F4:2B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/34352e3137372e3134382e302f32322d3332203d3e20323638393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:23:8c:11:c1:7b:2a:c9:27:d2:e0:43:f7:d1:a9:12:b3:fb:
         0b:99:4c:09:c3:88:19:2a:21:78:90:3a:26:0d:6a:0d:72:62:
         31:47:99:a7:b5:e7:5a:f3:66:f7:97:f8:27:78:db:83:a7:1e:
         69:b0:17:06:1d:a0:bb:1a:e2:24:9c:09:bb:60:b6:b7:3f:29:
         b2:7f:cf:b4:13:1f:d6:af:04:c3:e0:6d:2d:34:0c:8c:28:ea:
         24:2d:86:fc:6a:3c:f2:2e:21:a2:5d:99:b5:b1:db:fe:e9:49:
         7f:e3:b0:c1:89:46:f3:ae:3f:07:00:91:45:9f:11:29:64:f7:
         ca:9e:c1:92:f4:ef:5e:7d:3c:8f:72:03:7a:b2:3f:31:ce:70:
         02:b9:dc:a9:c5:b3:8a:f7:91:07:64:ec:35:74:1b:3f:ff:84:
         f0:bc:f2:18:3d:ac:c8:6c:95:9a:e6:81:29:c3:bd:8f:01:2a:
         2c:58:1e:56:18:db:b9:b7:e5:c9:66:8c:86:63:cd:93:48:f2:
         88:52:35:c4:c8:18:44:a2:49:76:5f:74:eb:b2:6c:ae:72:39:
         05:57:d1:5d:20:bc:2c:a6:69:0e:48:dd:19:02:23:89:67:56:
         2d:50:98:32:a0:f7:3c:38:59:31:33:d7:82:07:fd:f3:46:a0:
         f4:20:53:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:02 2025 by rpki-client