Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135372e302f32342d3234203d3e20323637333838.roa
File:                     34352e342e3135372e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          tas94JfTOTodlWvLluRHI5gllXgAorJ2DNeqywUfDes=
Subject key identifier:   16:57:A2:DA:8F:7E:30:76:64:57:28:D7:6E:23:D5:48:72:4C:70:09
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       075A44213C3912A1DA960E362C965CE99653EEF6
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135372e302f32342d3234203d3e20323637333838.roa
Signing time:             Mon 28 Oct 2024 14:40:57 +0000
ROA not before:           Mon 28 Oct 2024 14:35:57 +0000
ROA not after:            Mon 27 Oct 2025 14:40:57 +0000
asID:                     267388
IP address blocks:        45.4.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5a:44:21:3c:39:12:a1:da:96:0e:36:2c:96:5c:e9:96:53:ee:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Oct 28 14:35:57 2024 GMT
            Not After : Oct 27 14:40:57 2025 GMT
        Subject: CN=1657A2DA8F7E3076645728D76E23D548724C7009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:cb:e4:38:92:17:af:1f:0f:b6:9f:dc:bd:
                    5a:66:0d:fb:17:c6:ef:7a:d1:31:a2:ea:f2:80:71:
                    86:64:a9:6f:6a:f0:a6:f9:91:9a:a2:6d:f8:f8:fa:
                    79:c6:0e:8c:d8:bb:18:d9:f6:4f:4c:28:68:03:da:
                    98:0c:6b:d3:c1:5a:cd:78:95:6d:d5:58:ac:43:e8:
                    fb:0f:f2:da:cb:ad:53:1d:a0:38:46:3a:b7:91:47:
                    b4:42:fe:39:5b:ea:7c:6a:40:e7:13:8c:0b:3f:af:
                    ee:7e:f1:7e:f4:95:9d:1b:b5:7f:8a:c0:81:55:71:
                    6b:ed:df:a0:51:14:ce:78:67:be:b9:68:9c:89:66:
                    e6:eb:1a:22:fd:e0:6e:c9:32:46:eb:63:e5:bb:d9:
                    d9:af:8d:fa:4e:a7:29:92:4f:7c:58:6e:68:13:6c:
                    06:66:95:43:30:25:f4:8e:3e:ec:7e:e7:ce:bd:24:
                    e1:c8:53:79:39:01:75:3a:ac:b9:55:2c:ed:d8:33:
                    58:a6:ea:b7:e1:c5:fa:22:61:fc:6c:0d:c7:54:bb:
                    c5:fc:dd:25:ba:43:da:cd:c6:8d:3f:ab:30:9c:b6:
                    7b:64:58:dd:1a:b7:41:ee:b1:b2:e1:8c:00:63:59:
                    e9:a3:c2:0b:2d:b1:a3:40:c5:ab:44:99:a0:65:a5:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:57:A2:DA:8F:7E:30:76:64:57:28:D7:6E:23:D5:48:72:4C:70:09
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135372e302f32342d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:38:c8:3b:21:b2:e7:2e:a3:3c:89:3f:d1:c3:58:78:a7:ec:
         bb:4d:37:fa:ce:c2:22:04:ca:da:be:c2:92:14:08:3b:2a:04:
         44:c3:0d:22:f8:af:24:4c:00:6f:8e:c2:60:50:43:ed:66:61:
         9d:55:84:75:e5:a2:15:2d:eb:0f:36:fe:e3:0a:13:65:9e:cb:
         f9:90:f1:ca:df:c2:7d:e5:a2:76:5c:29:4f:a3:da:30:ee:53:
         0b:32:d3:b3:dd:b1:74:b0:0c:33:b1:f9:52:3d:68:12:6c:fe:
         db:98:7d:61:e3:72:0e:1d:69:f4:ba:27:c8:66:56:7a:c4:3b:
         78:31:dd:d4:e1:e2:58:3f:4c:12:44:f5:4e:51:ba:7f:48:0a:
         bb:25:91:aa:89:40:02:d2:e4:00:68:04:7b:22:a8:4e:92:00:
         31:17:f2:50:5c:dd:9e:86:9a:80:1d:5b:55:c1:bb:31:56:7f:
         02:bb:de:7d:e2:4e:7f:6b:2f:1d:21:4b:b6:2b:57:c1:3a:9d:
         5a:81:ab:3b:5a:0b:7b:42:7a:75:ac:07:68:77:d0:54:d3:40:
         e8:57:69:47:5b:bb:1b:a0:2e:64:14:1e:45:a0:9f:98:b9:f9:
         f8:95:66:a6:c4:b3:f4:31:73:31:3d:a1:8b:a7:ce:8d:f3:64:
         86:b3:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:18 2025 by rpki-client