Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32342d3234203d3e20323637303737.roa
File:                     34352e3232382e3130342e302f32342d3234203d3e20323637303737.roa (raw, json)
Hash identifier:          0BtZy/kzxFq3+9GOVBmZPkPmXgKiWNFD3m8kcRUqq2U=
Subject key identifier:   AB:03:86:0A:46:FC:04:5C:4D:93:E1:11:C5:E7:A4:00:77:91:95:89
Certificate issuer:       /CN=84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C
Certificate serial:       0EBF78658861A2483E5AB70935951ECB3E37AF1C
Authority key identifier: 84:FB:0F:EA:8A:D3:6C:C1:0F:FE:15:6A:76:3D:4E:FA:5A:6F:3A:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32342d3234203d3e20323637303737.roa
Signing time:             Mon 27 Nov 2023 01:18:32 +0000
ROA not before:           Mon 27 Nov 2023 01:13:32 +0000
ROA not after:            Mon 25 Nov 2024 01:18:32 +0000
asID:                     267077
IP address blocks:        45.228.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bf:78:65:88:61:a2:48:3e:5a:b7:09:35:95:1e:cb:3e:37:af:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C
        Validity
            Not Before: Nov 27 01:13:32 2023 GMT
            Not After : Nov 25 01:18:32 2024 GMT
        Subject: CN=AB03860A46FC045C4D93E111C5E7A40077919589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:ea:5c:3d:a0:2f:95:d7:45:5b:0f:3e:89:
                    1d:e5:5f:99:6f:11:a9:41:c2:9d:0d:96:a8:b8:6f:
                    ca:f3:6f:f4:e6:4f:2f:87:63:6c:ea:1f:cc:d1:1d:
                    ed:37:8c:c0:84:73:1d:35:f8:cf:9c:2a:ee:be:75:
                    9c:73:17:ce:a8:0e:32:a2:87:86:1d:4c:da:e6:f3:
                    ad:ed:53:e4:d6:29:73:56:ff:6e:54:a3:ec:a3:04:
                    4f:22:c0:95:35:cd:c1:a8:3d:30:40:db:4f:c3:0a:
                    3f:1c:b4:d6:ff:38:ec:5c:00:82:27:e0:ac:a5:f7:
                    f1:b7:c2:33:6f:7b:8e:e8:0e:96:ec:8d:7a:95:de:
                    99:31:4f:39:9f:18:a6:b1:83:0c:73:8d:55:36:ca:
                    bc:41:6f:48:bb:47:e5:d7:fc:da:73:8b:9b:0f:79:
                    b3:21:07:1a:13:06:88:ab:d0:38:4c:3c:cb:79:c0:
                    c5:4f:4b:72:ee:d6:86:5f:93:85:aa:fb:23:6d:90:
                    0e:a9:98:65:64:13:d8:72:80:4b:bf:08:83:4c:65:
                    d4:1a:10:fe:73:e7:29:15:42:f4:8c:04:8a:b1:ff:
                    35:24:92:fc:d2:f4:ca:32:76:0b:2c:89:8a:5f:ed:
                    e4:6c:ed:3e:f8:4d:17:fe:d0:6b:15:1a:3e:35:42:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:03:86:0A:46:FC:04:5C:4D:93:E1:11:C5:E7:A4:00:77:91:95:89
            X509v3 Authority Key Identifier:
                keyid:84:FB:0F:EA:8A:D3:6C:C1:0F:FE:15:6A:76:3D:4E:FA:5A:6F:3A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32342d3234203d3e20323637303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:13:f7:6a:54:aa:25:40:40:76:ce:cd:94:6a:63:ce:cf:7c:
         d7:ff:76:32:c2:17:d7:38:f1:99:e9:e2:91:53:a0:60:ef:75:
         72:77:a9:65:7e:c3:3a:15:4a:88:d2:32:e5:77:ed:68:29:90:
         9b:f0:62:e2:b1:08:b0:f5:ad:b9:39:5d:fb:34:5d:df:ea:76:
         1c:d8:6d:d1:f7:ac:69:d3:0f:ba:15:92:b8:e7:73:b5:3c:bd:
         fe:29:cd:ae:99:b3:3f:17:b1:46:d1:7e:8e:24:2d:5b:a7:04:
         cc:75:02:83:c1:bb:99:85:35:e7:15:4e:cf:72:4f:38:68:41:
         8f:55:d5:9d:80:0d:2c:7d:b3:67:f3:02:49:c9:b2:7d:d6:27:
         a6:77:10:92:e7:e6:cf:49:34:e9:fb:d6:c4:77:89:51:07:de:
         b6:71:c6:dc:88:55:76:e9:1f:3b:31:ea:57:1c:0d:52:9e:27:
         d7:f6:91:de:b3:97:02:2f:f6:e0:b3:b6:dc:20:e4:aa:08:00:
         a9:73:a3:6a:09:b7:df:2e:e3:96:eb:e5:84:4c:3d:86:67:7a:
         49:2a:0f:ad:2e:99:af:98:c0:a6:4a:5c:65:d6:1b:1e:98:28:
         43:ff:02:28:38:9d:a3:7a:7d:35:e6:2d:85:55:d0:9b:6a:34:
         78:dd:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:18 2025 by rpki-client