Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/0/34352e3136332e34302e302f32322d3234203d3e20323638353438.roa
File:                     34352e3136332e34302e302f32322d3234203d3e20323638353438.roa (raw, json)
Hash identifier:          nbv0Hy4ZGpnIs7a/+DbJtzBBgpf9Sg96e+a9jqh1z8c=
Subject key identifier:   D1:B0:D6:5E:0A:DB:DC:F3:2D:1A:84:31:CF:0F:B6:82:76:3A:9B:F3
Certificate issuer:       /CN=EE5EDE39AD4E5EE8EE8F3E0783506994F2B27AAB
Certificate serial:       252990D9B394BC25C081D0C4281499DAFB71586F
Authority key identifier: EE:5E:DE:39:AD:4E:5E:E8:EE:8F:3E:07:83:50:69:94:F2:B2:7A:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE5EDE39AD4E5EE8EE8F3E0783506994F2B27AAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/0/34352e3136332e34302e302f32322d3234203d3e20323638353438.roa
Signing time:             Sun 18 Jun 2023 22:00:00 +0000
ROA not before:           Sun 18 Jun 2023 21:55:00 +0000
ROA not after:            Tue 18 Jun 2024 22:00:00 +0000
asID:                     268548
IP address blocks:        45.163.40.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:29:90:d9:b3:94:bc:25:c0:81:d0:c4:28:14:99:da:fb:71:58:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5EDE39AD4E5EE8EE8F3E0783506994F2B27AAB
        Validity
            Not Before: Jun 18 21:55:00 2023 GMT
            Not After : Jun 18 22:00:00 2024 GMT
        Subject: CN=3082010A0282010100AAD4E735D54C18498B328B6DB67EE0488ECFFC56BD5D9992A8C9968310163BFA3FCCDA243A4CEDEF3240CA7CC0B7C94671815C2B406B9D202DD88A62219ED1BA812DABC0AA179F62E173CEF3B4DB916074D1778B73ECE43E7558EC3CF2C93705B82D5F5B90824BF21C6DEDA959B60166C44A5C47E5BB4462A40046103A06C01C50F0A42439E10305C82D204FE06133301049138C9C49A4ECEA9AFC90E17506CEFC41E66FEA67D982D29F1B2BDB6A303FB928D822882BBA2F94ED83D2BEF0F4D7212BE4BC7AFD0BF5344C760D5785C23D2CABE36ED59661739B0CE520516689C614AC2EA81C5CCC52B9CD32DDF5C1EFADC84E23A7B93DC7834EEB2926BD7EA7210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:e7:35:d5:4c:18:49:8b:32:8b:6d:b6:7e:
                    e0:48:8e:cf:fc:56:bd:5d:99:92:a8:c9:96:83:10:
                    16:3b:fa:3f:cc:da:24:3a:4c:ed:ef:32:40:ca:7c:
                    c0:b7:c9:46:71:81:5c:2b:40:6b:9d:20:2d:d8:8a:
                    62:21:9e:d1:ba:81:2d:ab:c0:aa:17:9f:62:e1:73:
                    ce:f3:b4:db:91:60:74:d1:77:8b:73:ec:e4:3e:75:
                    58:ec:3c:f2:c9:37:05:b8:2d:5f:5b:90:82:4b:f2:
                    1c:6d:ed:a9:59:b6:01:66:c4:4a:5c:47:e5:bb:44:
                    62:a4:00:46:10:3a:06:c0:1c:50:f0:a4:24:39:e1:
                    03:05:c8:2d:20:4f:e0:61:33:30:10:49:13:8c:9c:
                    49:a4:ec:ea:9a:fc:90:e1:75:06:ce:fc:41:e6:6f:
                    ea:67:d9:82:d2:9f:1b:2b:db:6a:30:3f:b9:28:d8:
                    22:88:2b:ba:2f:94:ed:83:d2:be:f0:f4:d7:21:2b:
                    e4:bc:7a:fd:0b:f5:34:4c:76:0d:57:85:c2:3d:2c:
                    ab:e3:6e:d5:96:61:73:9b:0c:e5:20:51:66:89:c6:
                    14:ac:2e:a8:1c:5c:cc:52:b9:cd:32:dd:f5:c1:ef:
                    ad:c8:4e:23:a7:b9:3d:c7:83:4e:eb:29:26:bd:7e:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:D6:5E:0A:DB:DC:F3:2D:1A:84:31:CF:0F:B6:82:76:3A:9B:F3
            X509v3 Authority Key Identifier:
                keyid:EE:5E:DE:39:AD:4E:5E:E8:EE:8F:3E:07:83:50:69:94:F2:B2:7A:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/0/EE5EDE39AD4E5EE8EE8F3E0783506994F2B27AAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE5EDE39AD4E5EE8EE8F3E0783506994F2B27AAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/0/34352e3136332e34302e302f32322d3234203d3e20323638353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:64:63:1b:92:00:2e:b5:65:eb:5c:29:14:e7:22:34:55:84:
         05:0a:34:c6:59:21:ca:a1:8f:8e:1c:8e:8f:e5:c7:71:a0:07:
         d8:4a:1b:1b:31:1c:64:54:34:29:e8:26:a2:17:5b:d1:08:94:
         74:22:4a:a6:2d:1e:e2:b7:c5:df:3f:af:74:cc:3c:28:e6:f8:
         a9:af:89:da:23:30:90:2d:ee:94:a2:b2:d6:2a:af:3e:4d:ad:
         83:7d:2d:56:cb:b3:39:db:f3:7b:e9:1f:5a:32:18:a9:f1:3a:
         23:ce:00:8c:78:87:6f:b4:34:ac:f5:91:da:9b:2b:2d:31:2a:
         61:3e:3b:3f:44:aa:10:50:ce:08:8a:18:76:e7:91:93:51:3b:
         f4:61:5a:58:1b:88:15:36:75:99:84:50:6f:28:e8:14:a9:ce:
         ae:bd:9d:0f:7b:1c:89:85:c6:9e:8f:94:10:80:16:92:37:f4:
         45:ce:20:1d:fc:53:e8:14:44:87:48:47:93:83:29:94:53:f0:
         70:0f:54:48:4d:a1:9c:7e:4e:bc:91:08:69:78:c9:37:c3:39:
         34:14:81:e9:02:bf:44:e6:a0:32:a3:cd:62:5a:27:2a:7b:bd:
         8b:44:86:c4:3e:60:01:47:6c:86:e5:26:a2:29:e4:ab:1c:ae:
         14:c0:cb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:49 2025 by rpki-client