Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa
File:                     34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa (raw, json)
Hash identifier:          iswk5t9dB85tkwTbZ5hvO+Sccs/AVW6i3PYKjbPLT00=
Subject key identifier:   A0:44:FF:4E:6E:32:1C:65:1A:D0:00:16:E4:C7:95:EA:37:89:E6:36
Certificate issuer:       /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial:       01B077D1D01CAAC7960F636F49A00B49A6D61825
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     268011
IP address blocks:        45.167.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b0:77:d1:d0:1c:aa:c7:96:0f:63:6f:49:a0:0b:49:a6:d6:18:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject: CN=A044FF4E6E321C651AD00016E4C795EA3789E636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:1b:5c:09:b4:fb:81:53:90:53:b5:bd:b9:
                    24:d5:74:9d:b7:b8:ab:de:c7:1a:13:2a:5f:e6:2f:
                    5e:47:d7:84:f6:88:96:f0:01:8b:c1:8a:b6:d7:5e:
                    f0:b4:3b:19:da:c7:fb:82:88:35:67:14:bb:37:ec:
                    0a:31:f7:72:25:b0:0f:ce:db:c1:45:d2:72:62:36:
                    6e:c7:fd:9d:3a:9a:84:57:9b:26:b1:04:cb:9c:e9:
                    0c:15:06:f1:7b:e0:7c:e2:07:5b:7a:f4:44:19:ae:
                    f4:e4:ab:c0:70:99:77:35:2f:cb:5c:5f:4c:a6:45:
                    7a:41:8d:fd:80:e6:57:67:93:d2:2e:d7:00:0b:ae:
                    50:b6:02:b3:c3:83:39:b9:36:e2:10:8f:56:76:c0:
                    fd:96:a7:8d:4e:45:39:9c:68:fc:0e:ac:9c:d2:53:
                    86:26:df:5a:17:e8:9b:3b:23:0f:b4:b3:c5:23:03:
                    37:a8:43:8a:d3:31:96:20:f1:c5:1b:62:64:24:b6:
                    f0:98:a6:f3:69:8b:7e:bd:d5:98:31:dc:6a:b4:bf:
                    d6:b9:29:90:39:1f:90:a5:28:91:aa:37:bb:dd:c5:
                    c8:f5:e1:22:c1:4e:30:ea:48:b3:cc:7d:90:76:c4:
                    a0:5a:c7:9b:4a:e1:8a:5f:fd:fa:f7:8a:ba:68:ce:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:44:FF:4E:6E:32:1C:65:1A:D0:00:16:E4:C7:95:EA:37:89:E6:36
            X509v3 Authority Key Identifier:
                keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:15:42:98:8b:c6:30:8b:f4:90:d9:a6:00:0a:32:86:f8:e1:
         1d:95:66:07:30:8f:89:42:44:11:b4:4a:f1:e8:7a:e9:5e:2b:
         c8:55:7a:35:ec:64:59:2a:64:39:d7:c4:84:6b:8b:4d:04:eb:
         4d:86:b9:91:df:e7:f1:af:28:49:9e:22:88:1a:4a:d4:61:f2:
         c2:75:44:72:71:17:2f:25:d9:23:34:97:ab:07:24:43:4b:a8:
         d5:1d:6a:87:9a:8c:ad:37:c4:fb:c6:51:7f:71:16:59:8a:1e:
         3a:0b:1d:25:58:92:ab:84:34:39:68:da:a9:d9:cb:aa:dd:2d:
         2a:01:07:ba:c7:25:5d:89:0c:e5:7d:5d:90:e4:ad:ca:e9:28:
         09:da:8f:7b:fa:c7:bd:47:73:e4:ff:20:0a:04:91:79:a3:94:
         db:ce:e1:2a:48:be:45:2f:bf:28:10:a4:6b:04:4f:e9:b4:45:
         0d:48:f5:a3:cd:63:aa:29:fc:62:8f:87:e8:72:dd:d0:d9:ec:
         bd:42:74:d6:a5:22:66:bc:83:39:7f:a6:2d:93:61:c2:e9:b0:
         1e:d2:ca:ff:08:bf:13:e8:d5:f4:f2:4f:20:ed:aa:92:6d:39:
         30:45:c4:28:2d:ec:da:c0:7a:b5:59:e8:81:62:c1:a1:d6:ee:
         0f:a2:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:41:27 2025 by rpki-client