Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          pqO0uQ6/B/dvgSx5i9wt8219MUNcFAIAgTKtkM9uOpo=
Subject key identifier:   E9:83:6B:50:74:93:57:A9:C7:1B:9B:D3:E6:85:DB:6F:9E:CA:A7:72
Certificate issuer:       /CN=A5A5E563B461C001EA666874188010075B6CA70D
Certificate serial:       7C266D3FE0B7A5C504C96B1071FB87177E3A9B58
Authority key identifier: A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa
Signing time:             Sun 05 Jan 2025 18:58:44 +0000
ROA not before:           Sun 05 Jan 2025 18:53:44 +0000
ROA not after:            Sun 04 Jan 2026 18:58:44 +0000
asID:                     262503
IP address blocks:        45.181.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:26:6d:3f:e0:b7:a5:c5:04:c9:6b:10:71:fb:87:17:7e:3a:9b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A5E563B461C001EA666874188010075B6CA70D
        Validity
            Not Before: Jan  5 18:53:44 2025 GMT
            Not After : Jan  4 18:58:44 2026 GMT
        Subject: CN=E9836B50749357A9C71B9BD3E685DB6F9ECAA772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:58:be:7b:f3:d2:12:0b:7b:43:b2:f8:c6:
                    3c:c8:d4:46:8c:28:6f:7b:2e:e8:9e:44:93:30:65:
                    9f:6a:9f:ac:a8:5d:95:90:9d:a1:3b:1a:98:c0:c3:
                    04:61:0a:22:d0:5c:49:c5:10:96:2c:25:fc:39:5c:
                    17:f4:51:22:72:25:33:68:ca:c3:b7:35:51:75:dc:
                    e4:29:06:fa:50:06:4a:62:88:0b:28:d5:f8:95:49:
                    7d:16:45:4f:09:ac:6b:8b:cf:ff:ad:42:b9:a0:75:
                    72:3a:6a:f3:e9:87:a0:26:96:3e:ac:d9:77:b5:c9:
                    c9:db:ee:18:70:76:0a:1a:2a:53:8e:c8:69:ce:d9:
                    de:b8:85:d7:d3:62:3b:9b:93:38:41:8a:87:fc:27:
                    5b:3f:6e:46:bb:6b:ce:02:8a:77:3a:e5:d5:9f:81:
                    5b:c6:02:b6:35:cf:92:79:62:6a:72:fe:ab:10:01:
                    03:b6:95:da:d0:d6:7d:3c:3a:12:3a:15:29:a5:94:
                    fb:97:3c:f1:a7:f4:7b:27:02:8f:f4:5f:9c:86:45:
                    84:65:76:a3:1c:fa:fb:17:a7:5a:37:a9:1a:de:a2:
                    80:32:7a:9c:5d:f9:b2:bc:9f:ca:37:88:00:cf:79:
                    0d:54:93:db:a2:85:e4:ee:e6:2d:7b:75:c9:f9:e1:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:83:6B:50:74:93:57:A9:C7:1B:9B:D3:E6:85:DB:6F:9E:CA:A7:72
            X509v3 Authority Key Identifier:
                keyid:A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/A5A5E563B461C001EA666874188010075B6CA70D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:28:2f:0c:19:86:1e:9d:d0:cb:96:42:d5:4c:b4:96:a9:96:
         8f:30:f2:95:e2:d3:2c:cf:72:84:91:c3:32:9d:06:63:95:9d:
         11:d3:df:e0:b6:78:66:56:03:68:1a:0d:76:b8:f8:60:0d:5d:
         3b:c0:63:6f:01:1b:19:94:af:57:c2:1e:78:8c:0d:40:8f:99:
         de:33:a6:b7:6f:18:dd:8c:41:f2:5e:ee:72:28:a9:11:f3:17:
         c5:a4:ee:ea:13:63:68:c0:8d:b5:2a:90:08:fa:82:a7:b5:1a:
         57:a9:ef:e1:9f:6a:d3:4d:d3:24:de:3a:82:08:5b:33:ea:c4:
         b9:2f:d2:cd:35:27:9a:96:77:4c:e9:37:43:c1:d1:08:64:27:
         1d:a4:9f:64:c1:ef:72:c2:3b:e8:9d:45:de:c5:8c:d5:7c:48:
         23:27:f5:c6:29:7a:31:69:02:e5:d3:57:3d:52:6e:c0:cb:b7:
         2b:94:e8:ed:30:23:6b:10:35:48:b5:42:92:87:88:6f:e2:1b:
         cc:87:de:a0:65:f9:4e:48:61:5e:f7:c1:ad:c0:43:0b:60:6f:
         8b:ee:0d:48:0e:19:42:0f:95:ba:ac:81:cb:c1:5f:9d:54:b0:
         10:bd:26:ce:75:ff:98:c1:38:9c:59:23:30:2f:85:26:c4:eb:
         85:d6:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:55:34 2025 by rpki-client