Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/34352e3232392e3233332e302f32342d3234203d3e20323637313336.roa
File:                     34352e3232392e3233332e302f32342d3234203d3e20323637313336.roa (raw, json)
Hash identifier:          soq27ZLRwg/4MGG57zOF32Vp9IcPUSTrguC7Bbv0NLk=
Subject key identifier:   15:4C:73:93:A8:BB:D3:D8:F6:CA:78:6F:0F:A7:FD:65:B7:DA:C6:75
Certificate issuer:       /CN=2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51
Certificate serial:       09D84D075733EE90BCB2B2072CD73B465D6A48BC
Authority key identifier: 2A:5D:4D:DF:4F:A4:1D:02:0B:22:B8:CD:6A:CF:66:FB:AB:A3:1A:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/34352e3232392e3233332e302f32342d3234203d3e20323637313336.roa
Signing time:             Sun 27 Aug 2023 15:46:52 +0000
ROA not before:           Sun 27 Aug 2023 15:41:52 +0000
ROA not after:            Sun 25 Aug 2024 15:46:52 +0000
asID:                     267136
IP address blocks:        45.229.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d8:4d:07:57:33:ee:90:bc:b2:b2:07:2c:d7:3b:46:5d:6a:48:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51
        Validity
            Not Before: Aug 27 15:41:52 2023 GMT
            Not After : Aug 25 15:46:52 2024 GMT
        Subject: CN=154C7393A8BBD3D8F6CA786F0FA7FD65B7DAC675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bf:5c:2e:43:a3:b5:7f:aa:75:d1:c0:6b:bf:
                    b3:9e:7f:c1:46:3c:48:ac:3c:ae:38:ab:9b:6c:1b:
                    39:3c:2e:a6:72:99:46:5d:28:2c:96:1e:e1:57:c9:
                    7e:15:9a:f4:17:1d:96:f1:dd:7e:ce:3b:8e:c1:f3:
                    23:fb:33:84:16:4d:32:db:d2:4e:46:08:15:e0:ee:
                    08:94:02:46:e3:02:03:21:25:e4:10:6d:7e:a3:1b:
                    4f:bf:4b:d1:5c:f3:79:ed:1e:a3:aa:79:04:45:99:
                    fd:c0:db:e2:2f:f4:11:45:7b:5c:bd:39:c0:2f:59:
                    b4:a4:68:fe:04:af:f7:4a:ff:6f:28:dd:a8:b0:10:
                    1f:23:75:53:8d:d8:ea:63:3f:82:ff:84:e6:b4:91:
                    31:08:8c:1e:72:a2:b2:99:53:ec:39:bf:00:c0:4b:
                    01:52:26:7e:d5:12:f5:aa:75:06:cb:67:66:49:b9:
                    44:bf:6c:82:dc:e2:42:39:de:f3:aa:75:60:b4:50:
                    fc:11:9a:80:54:78:d9:69:64:a6:08:5a:e2:d9:05:
                    dc:92:15:fc:a5:75:28:6a:79:10:1c:dc:ff:3f:46:
                    f8:c8:88:38:db:c5:6f:cd:89:41:93:ed:7b:a5:00:
                    ac:22:7c:23:c8:94:15:df:c7:46:75:23:e1:d4:07:
                    10:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4C:73:93:A8:BB:D3:D8:F6:CA:78:6F:0F:A7:FD:65:B7:DA:C6:75
            X509v3 Authority Key Identifier:
                keyid:2A:5D:4D:DF:4F:A4:1D:02:0B:22:B8:CD:6A:CF:66:FB:AB:A3:1A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/34352e3232392e3233332e302f32342d3234203d3e20323637313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:53:4a:27:d0:2d:69:b6:5a:e5:5b:9a:33:a2:35:49:98:
         16:bc:39:a2:48:bc:e4:21:90:b4:5b:ec:c7:02:60:e6:e7:46:
         be:14:15:e6:9a:b1:11:51:5e:f6:df:dc:46:94:de:84:37:5b:
         f2:8d:cb:a6:be:ba:fd:01:c4:b4:d6:af:0f:50:4d:02:a1:c7:
         91:96:33:86:e5:f9:3b:06:f2:b9:d8:20:b6:6f:01:07:ae:9e:
         be:69:b8:52:11:13:8b:67:5d:02:de:0d:f1:5a:0f:03:96:2b:
         f9:69:dd:55:09:77:03:de:a3:8b:12:56:c5:44:9d:90:35:90:
         b2:76:a2:a5:12:f8:2d:44:6e:82:97:93:21:fb:80:23:a8:f2:
         05:66:f7:46:7b:f2:3a:87:f8:b6:16:86:37:28:84:6b:f5:17:
         c0:33:c9:b1:85:42:44:c5:6b:3c:64:85:53:90:e8:db:c0:20:
         0a:71:c9:11:8d:e5:ff:49:06:90:0c:48:1d:7e:da:b7:e5:69:
         a3:8a:b4:f6:1c:e4:99:02:6e:d7:e8:df:bb:8c:27:81:93:ac:
         e0:e0:5a:0f:09:7c:09:0c:5c:a8:c7:41:57:c4:47:2e:3a:7c:
         e4:41:74:08:94:b8:d4:f1:fa:3c:9b:5b:0a:49:a2:a5:df:75:
         55:ea:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:46 2025 by rpki-client