Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/34352e3138342e342e302f32322d3234203d3e20323639343338.roa
File:                     34352e3138342e342e302f32322d3234203d3e20323639343338.roa (raw, json)
Hash identifier:          pzDOg3Lj6XpNLf3581UpbtckFPfKHE84ahwMLNj7dMc=
Subject key identifier:   59:13:83:AD:50:B4:66:BC:F9:4E:30:4B:D2:DB:FB:0B:64:1D:37:21
Certificate issuer:       /CN=DFAD4430E103F584B4F38EA4C2E1788C436A9021
Certificate serial:       3E595D2C04DC2165FD0D9E395D3D91F6EFB9D1B3
Authority key identifier: DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/34352e3138342e342e302f32322d3234203d3e20323639343338.roa
Signing time:             Thu 06 Mar 2025 20:28:03 +0000
ROA not before:           Thu 06 Mar 2025 20:23:03 +0000
ROA not after:            Thu 05 Mar 2026 20:28:03 +0000
asID:                     269438
IP address blocks:        45.184.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:59:5d:2c:04:dc:21:65:fd:0d:9e:39:5d:3d:91:f6:ef:b9:d1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD4430E103F584B4F38EA4C2E1788C436A9021
        Validity
            Not Before: Mar  6 20:23:03 2025 GMT
            Not After : Mar  5 20:28:03 2026 GMT
        Subject: CN=591383AD50B466BCF94E304BD2DBFB0B641D3721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:f4:ca:4e:22:f1:da:70:d3:c8:62:79:de:
                    e8:1c:12:a5:cf:c8:06:6a:1a:85:4a:51:a5:84:49:
                    69:bb:04:4c:4f:02:8a:0c:53:eb:75:5c:5c:5a:32:
                    ed:b7:ae:2a:ad:c5:23:e0:89:05:b5:ca:87:b2:27:
                    e6:73:bb:65:06:ee:12:59:e0:ac:cf:69:28:31:13:
                    04:5a:8f:01:11:0a:e7:ea:d5:48:0a:97:89:19:e5:
                    57:c1:08:0e:ec:2d:9a:b7:e9:ba:91:34:51:82:cd:
                    66:f5:43:c8:de:8e:f6:a7:6d:bb:3f:12:3c:a7:32:
                    ef:47:22:45:c6:fe:fc:5c:79:d6:e1:fe:60:fd:76:
                    fe:1e:9f:bd:17:db:cb:00:44:eb:9a:b3:eb:39:a6:
                    c0:89:5b:9a:a8:35:2c:67:c6:24:fb:a8:48:81:91:
                    d8:18:18:7e:7e:69:8a:f4:69:e4:66:dd:1e:2f:26:
                    85:7a:75:b0:5a:3c:6f:4c:e7:69:28:18:7c:3c:4c:
                    16:7d:02:0e:ed:b5:cf:d2:cf:5b:67:ee:8e:b0:08:
                    52:a1:b0:04:63:90:c1:ad:9c:f9:0a:f3:18:49:10:
                    c3:1c:4f:5b:ff:e4:b4:1d:77:8d:b6:0f:f0:1d:24:
                    2e:01:95:10:8a:ad:13:cc:59:dd:d1:9b:57:97:56:
                    d5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:13:83:AD:50:B4:66:BC:F9:4E:30:4B:D2:DB:FB:0B:64:1D:37:21
            X509v3 Authority Key Identifier:
                keyid:DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/34352e3138342e342e302f32322d3234203d3e20323639343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:4e:5a:3d:d2:b7:58:3e:21:ff:e0:0b:52:6b:1f:90:b6:c2:
         66:32:bf:bf:d5:08:75:d1:28:6e:34:99:b7:94:e7:f9:de:4e:
         2a:b4:97:3f:c3:e8:82:52:9f:42:85:50:41:20:80:fc:c2:08:
         6f:bb:0a:36:49:b8:c2:fb:94:9f:9a:61:00:9d:fe:6a:e2:24:
         8c:a3:87:35:b2:0c:8c:ff:ff:f8:f8:a3:56:24:5b:98:bb:94:
         2c:4a:2f:91:39:2a:3f:08:d9:93:2c:23:f2:66:a1:fd:f4:30:
         28:01:0c:cb:b1:ee:f5:74:bb:9d:ee:74:c2:da:8a:94:a3:80:
         0f:b4:cd:5b:7f:87:53:ab:e0:93:f1:22:16:78:03:20:5a:9f:
         bd:70:aa:0c:87:a1:43:0a:8d:43:76:0c:b2:4a:99:f5:2f:a2:
         a5:7f:af:29:7e:5e:08:d6:0c:99:c8:94:0e:a4:8e:d5:7b:a8:
         42:7d:10:40:b1:12:07:a5:87:d1:57:b5:91:50:e5:dc:c7:eb:
         11:d1:69:d6:86:62:27:36:3c:54:bb:a8:37:8b:32:a9:6f:21:
         8f:42:a8:85:f8:e0:16:9c:e5:4a:ec:d2:46:cf:0b:84:ec:26:
         a6:97:ba:18:2a:bf:6e:48:b3:4c:65:32:7e:ac:86:17:29:50:
         cf:dc:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:48 2025 by rpki-client