Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233392e302f32342d3234203d3e20323639313032.roa
File:                     34352e3137382e3233392e302f32342d3234203d3e20323639313032.roa (raw, json)
Hash identifier:          nCkN5B2BuINxqajmZ9I2Ad3/Iii/cao2Ji3EBWABQrk=
Subject key identifier:   7F:30:18:66:12:93:2E:25:44:C3:5C:76:27:5E:98:D8:21:5E:DE:E9
Certificate issuer:       /CN=CB460E2365040598EFBCA2885EBA996AE5111964
Certificate serial:       781FF6A28149FDD62EFC538B8F0890075F7F2B2D
Authority key identifier: CB:46:0E:23:65:04:05:98:EF:BC:A2:88:5E:BA:99:6A:E5:11:19:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB460E2365040598EFBCA2885EBA996AE5111964.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233392e302f32342d3234203d3e20323639313032.roa
Signing time:             Fri 08 Nov 2024 13:23:22 +0000
ROA not before:           Fri 08 Nov 2024 13:18:22 +0000
ROA not after:            Fri 07 Nov 2025 13:23:22 +0000
asID:                     269102
IP address blocks:        45.178.239.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1f:f6:a2:81:49:fd:d6:2e:fc:53:8b:8f:08:90:07:5f:7f:2b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB460E2365040598EFBCA2885EBA996AE5111964
        Validity
            Not Before: Nov  8 13:18:22 2024 GMT
            Not After : Nov  7 13:23:22 2025 GMT
        Subject: CN=7F30186612932E2544C35C76275E98D8215EDEE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:f2:7f:98:d8:30:87:d8:d2:67:d7:77:8a:36:
                    b9:ff:0a:e7:bd:c9:21:73:5c:cd:6b:2d:71:ad:e5:
                    24:67:2e:26:7b:43:b3:a3:ce:4f:84:d2:05:b3:00:
                    d6:55:4b:17:86:08:d2:14:b7:5e:34:73:12:96:52:
                    42:c5:ce:26:73:96:ad:ca:f0:a5:3d:46:88:27:ae:
                    9b:ea:14:82:04:74:64:b7:7c:49:68:18:49:a7:0b:
                    3c:06:69:41:cf:5e:c2:ee:be:26:d1:41:6b:fc:0b:
                    e6:ae:95:9e:5e:93:66:83:dc:2f:be:68:cb:90:bd:
                    ac:ec:b6:1c:6f:fe:28:76:3b:3e:ee:d7:4c:21:8b:
                    2c:cb:02:57:15:6e:98:92:31:5a:cf:01:29:e1:d6:
                    77:07:09:ad:8d:02:f5:de:f9:06:02:1a:ad:49:9a:
                    81:b0:d3:41:81:c4:b1:5c:4c:f6:bd:59:b8:d6:12:
                    9d:fb:2b:f1:8a:e8:22:ad:c6:a5:e6:b2:30:bf:29:
                    41:a6:de:a6:d7:61:ae:b1:b5:90:1b:c1:1f:66:dd:
                    ec:b0:c7:69:c4:66:4b:3f:6a:cb:2e:f1:d8:d5:23:
                    74:29:a1:be:b2:5b:58:25:d0:45:af:3a:3a:5f:e9:
                    85:de:59:21:62:af:78:2e:9c:22:ca:15:c9:d6:3d:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:30:18:66:12:93:2E:25:44:C3:5C:76:27:5E:98:D8:21:5E:DE:E9
            X509v3 Authority Key Identifier:
                keyid:CB:46:0E:23:65:04:05:98:EF:BC:A2:88:5E:BA:99:6A:E5:11:19:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/CB460E2365040598EFBCA2885EBA996AE5111964.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB460E2365040598EFBCA2885EBA996AE5111964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233392e302f32342d3234203d3e20323639313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:0f:fe:72:24:39:d4:ae:5a:6a:5a:ab:0d:e8:fe:f7:a2:ef:
         b5:39:3e:a7:b5:b7:1a:4d:1c:e9:53:af:10:74:b6:76:8c:be:
         71:a7:59:38:d6:aa:e1:1f:0f:60:17:de:a1:2e:13:d4:3a:da:
         11:68:d6:20:b4:03:cd:6b:04:fe:69:93:59:05:86:05:40:ff:
         c2:5a:0b:e2:9a:4f:be:58:79:0b:30:97:ed:2c:7a:cb:79:ff:
         41:56:42:25:07:0c:ab:3a:d0:db:6d:88:04:7c:a1:99:05:98:
         6e:7c:1d:fe:c9:e7:b2:cb:a3:7d:17:e9:24:df:76:11:64:60:
         57:57:5b:5f:ae:c6:db:a1:2a:ff:1b:1f:59:23:88:9d:0a:66:
         81:c5:52:cf:a1:d5:a4:3e:b5:b4:d1:a8:92:c8:3f:e9:6d:9a:
         e9:10:65:10:97:49:e8:b6:0f:98:2a:22:a1:9e:78:74:c0:0e:
         fa:cc:94:2e:69:81:cb:7a:72:cb:ad:bc:e7:9f:df:e5:8e:30:
         0f:05:a4:9a:ba:c4:08:17:3f:04:1b:7a:6e:ac:8a:40:c9:57:
         7a:97:80:2c:48:40:4e:55:6e:09:6b:33:24:cd:9a:16:29:b7:
         1c:49:af:85:97:26:61:0b:b3:f6:cf:0a:86:5c:1e:70:9f:e4:
         04:42:f7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:53:01 2025 by rpki-client