Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/34352e3232392e3134352e302f32342d3234203d3e20323637313535.roa
File:                     34352e3232392e3134352e302f32342d3234203d3e20323637313535.roa (raw, json)
Hash identifier:          RmsUD14lRaaxUFAujEByFsjWUuVSIW5SABhDPjgt/tU=
Subject key identifier:   EA:7E:BA:A2:20:12:15:A9:E6:07:36:15:2E:E2:E5:91:87:46:9A:24
Certificate issuer:       /CN=A18EADDA564A5AFA58919635BE82B33C43174020
Certificate serial:       6423B007F3148F34CF9B00565D98FF0E73071CFC
Authority key identifier: A1:8E:AD:DA:56:4A:5A:FA:58:91:96:35:BE:82:B3:3C:43:17:40:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18EADDA564A5AFA58919635BE82B33C43174020.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/34352e3232392e3134352e302f32342d3234203d3e20323637313535.roa
Signing time:             Mon 07 Oct 2024 17:02:55 +0000
ROA not before:           Mon 07 Oct 2024 16:57:55 +0000
ROA not after:            Mon 06 Oct 2025 17:02:55 +0000
asID:                     267155
IP address blocks:        45.229.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:23:b0:07:f3:14:8f:34:cf:9b:00:56:5d:98:ff:0e:73:07:1c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18EADDA564A5AFA58919635BE82B33C43174020
        Validity
            Not Before: Oct  7 16:57:55 2024 GMT
            Not After : Oct  6 17:02:55 2025 GMT
        Subject: CN=EA7EBAA2201215A9E60736152EE2E59187469A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:d6:01:1b:d2:82:2d:7b:6c:1c:ef:80:52:
                    94:ae:52:97:54:2c:4c:2f:a3:b2:91:5e:dc:f5:f4:
                    f8:f8:80:7e:ef:13:bd:3c:dc:db:d8:8c:01:f8:63:
                    de:04:32:bb:df:54:2b:a7:5f:a7:3d:6d:b8:c1:18:
                    99:6c:b8:31:4b:0e:17:98:5c:80:9c:ec:b4:2e:95:
                    e5:e8:b8:42:94:de:8e:ea:1b:4a:36:ec:e1:6f:51:
                    b2:39:51:2e:9b:ca:d6:cc:49:16:9e:e0:59:a1:e3:
                    86:24:88:fe:5e:de:d3:75:ea:94:fe:fe:eb:d4:20:
                    eb:bf:3b:d5:b0:c5:ce:31:24:49:f7:38:a3:6a:57:
                    96:44:71:e5:94:3a:1d:43:cb:a8:ce:66:fd:0e:32:
                    11:cf:71:3f:c5:02:c3:09:bb:5e:fd:a2:55:7c:9c:
                    7e:45:20:78:eb:a4:6b:fb:9b:24:a0:19:4a:20:b1:
                    72:05:f1:bf:4a:ae:bf:fb:1f:cf:bb:0f:96:5b:0b:
                    f9:2b:1b:5e:f6:46:52:f1:04:30:03:10:04:41:fb:
                    5a:2d:a5:f9:02:2b:93:da:02:58:59:eb:1a:b3:e4:
                    21:0a:14:88:37:20:3a:3e:b8:96:06:81:4b:f2:79:
                    5a:75:db:5c:87:25:a5:dd:83:ca:34:bb:28:c3:64:
                    db:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7E:BA:A2:20:12:15:A9:E6:07:36:15:2E:E2:E5:91:87:46:9A:24
            X509v3 Authority Key Identifier:
                keyid:A1:8E:AD:DA:56:4A:5A:FA:58:91:96:35:BE:82:B3:3C:43:17:40:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/A18EADDA564A5AFA58919635BE82B33C43174020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18EADDA564A5AFA58919635BE82B33C43174020.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/34352e3232392e3134352e302f32342d3234203d3e20323637313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f9:24:97:23:91:c0:49:36:a8:71:9d:53:27:89:d8:9f:8b:
         cc:8c:1c:d8:67:fd:0b:f7:66:5d:15:8b:c8:8c:93:ba:68:d5:
         69:c8:9d:93:39:c2:7f:76:e7:6e:17:88:d8:b1:c6:10:1b:5d:
         c6:b2:33:4e:62:00:b4:b4:7a:ef:b0:ab:73:d3:2c:99:bc:00:
         2f:a2:7c:3e:8f:22:8f:a8:4f:96:66:55:b4:fc:a8:b4:75:81:
         4f:63:a0:ce:16:f4:45:e2:08:8b:b0:ab:0f:5a:5e:ec:e3:29:
         e7:e1:96:d9:82:bf:95:e8:eb:e8:a0:26:1c:88:f5:b6:4d:87:
         5b:c2:54:d6:7b:56:66:df:f7:18:82:21:15:9e:a1:02:69:2b:
         a1:ed:cb:a0:41:43:c1:a6:3b:de:d8:ea:18:e9:ba:ea:fa:91:
         cb:76:48:03:8c:14:95:eb:66:c5:6d:34:77:ec:c5:b9:3e:31:
         d8:c2:1a:dc:d4:dc:e8:a8:3e:f8:ff:08:72:50:a9:47:37:bb:
         5c:43:24:36:ef:2b:b7:8a:35:d6:80:bb:f2:d3:a9:62:80:73:
         6b:75:45:a3:13:ca:71:d2:ef:19:40:f3:26:95:4e:4c:fd:5a:
         3f:36:39:b4:04:88:3f:ea:d2:53:1b:60:08:52:da:5b:4b:62:
         6c:cb:d3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:50:07 2025 by rpki-client