Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3130392e302f32342d3234203d3e20323632343831.roa
File:                     34352e3233372e3130392e302f32342d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          GJda5HJkECdXv2xJjjpm/kC7PJHcRxj69f82Bh0AMc0=
Subject key identifier:   A7:BD:27:61:E2:33:9D:FA:7F:46:0A:65:0C:3A:F1:93:61:D1:B6:38
Certificate issuer:       /CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
Certificate serial:       5C5C1B2BBEA5A740D03CF414CAB23B1BE887AAD1
Authority key identifier: E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3130392e302f32342d3234203d3e20323632343831.roa
Signing time:             Tue 21 Jun 2022 12:56:00 +0000
ROA not before:           Tue 21 Jun 2022 12:51:00 +0000
ROA not after:            Tue 20 Jun 2023 12:56:00 +0000
asID:                     262481
IP address blocks:        45.237.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5c:1b:2b:be:a5:a7:40:d0:3c:f4:14:ca:b2:3b:1b:e8:87:aa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Validity
            Not Before: Jun 21 12:51:00 2022 GMT
            Not After : Jun 20 12:56:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:8e:c4:e7:92:7d:b1:1a:3a:7a:ae:dc:60:
                    18:5a:96:2a:43:b1:35:b4:0f:4a:c6:02:9a:81:41:
                    ea:38:3d:51:0b:c7:66:ab:ba:3c:12:93:53:95:44:
                    2a:6d:79:22:3c:a7:9d:2a:ad:87:fa:08:9d:97:98:
                    d0:e4:fa:bc:d5:03:b9:04:15:4d:bf:5a:55:c4:4d:
                    70:a8:e1:08:a1:77:84:ea:fc:ed:c2:53:15:33:eb:
                    c3:af:6b:d8:2b:d4:d2:63:36:03:45:b0:83:72:72:
                    74:96:d1:36:cb:03:83:61:91:28:8d:ff:e2:3a:67:
                    9e:ee:5a:d4:45:5d:6d:6d:4a:60:50:74:fc:cf:61:
                    00:78:ad:2c:4f:fa:f8:36:04:0e:a2:d9:e2:ca:a3:
                    b0:c1:f6:e9:97:04:c5:85:5c:d6:ec:2f:b6:5f:60:
                    12:af:8a:81:79:b4:c5:75:31:a6:10:aa:bc:a7:7d:
                    ee:8d:81:fb:3b:48:09:23:f3:6c:c9:52:17:bd:7e:
                    8d:55:ad:c4:20:b0:54:29:e4:44:90:28:16:05:ad:
                    3b:30:f3:30:4e:74:7b:04:d9:d9:99:f1:15:09:65:
                    7e:19:12:7c:69:df:07:de:d1:c6:7b:38:dd:d4:23:
                    10:d7:7e:0a:53:46:44:53:91:8e:80:90:cf:f2:81:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BD:27:61:E2:33:9D:FA:7F:46:0A:65:0C:3A:F1:93:61:D1:B6:38
            X509v3 Authority Key Identifier:
                keyid:E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3233372e3130392e302f32342d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:a0:05:d2:1b:ea:47:1a:b2:11:57:64:14:56:98:07:69:6b:
         8e:18:36:61:16:58:97:73:1b:6b:9a:c9:92:2f:a1:ad:f0:32:
         2d:02:15:6a:d7:58:22:e9:8f:7a:38:64:6a:52:f3:b2:ed:2b:
         1e:32:2c:e7:c5:d1:9d:22:cb:1c:60:1d:03:10:fc:fe:a0:17:
         e4:90:c9:d1:d2:7d:65:5e:8b:81:4b:7e:ec:05:40:26:bf:23:
         90:25:19:4c:e2:b3:9c:8a:d1:dc:cc:ce:db:0c:61:b3:11:4c:
         07:47:ba:d4:90:12:02:70:00:e9:d9:c3:66:36:04:c0:14:41:
         cc:5b:70:4b:bd:7d:24:c5:4c:d8:e4:10:2e:e2:c0:f5:01:8e:
         d3:bb:e4:3b:1a:ff:19:6e:20:f9:4c:3c:4b:59:65:06:20:18:
         0e:57:cf:7d:72:a3:58:3f:31:14:1f:72:cc:ce:65:fa:45:b9:
         75:be:3c:9c:7b:83:88:3e:31:dc:fe:6b:79:6c:d1:c2:f5:1d:
         4e:86:1e:9b:8c:55:3a:ca:c0:21:7e:0e:e5:bc:c0:a2:2d:9a:
         9f:37:20:d1:08:54:e0:ed:1a:b0:ed:17:8e:8b:8c:f2:84:52:
         4a:9a:7c:6c:00:2e:6c:4f:de:28:59:26:98:e3:03:66:68:c1:
         7c:db:ff:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:32:03 2025 by rpki-client