Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          IiWTfynWM50LpepyIw8j8pqsskISL1ZHH3eOx/VwrTo=
Subject key identifier:   73:57:49:6D:7C:0C:14:60:E3:D1:C8:A3:A8:73:18:E1:5B:BE:44:E7
Certificate issuer:       /CN=68896B9A803F401F71FCF845C4E94131201E4D39
Certificate serial:       4BCCCBC6CB2266B4F5F22F14D3082D8C82949C73
Authority key identifier: 68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa
Signing time:             Thu 13 Feb 2025 18:27:50 +0000
ROA not before:           Thu 13 Feb 2025 18:22:50 +0000
ROA not after:            Thu 12 Feb 2026 18:27:50 +0000
asID:                     262899
IP address blocks:        45.165.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cc:cb:c6:cb:22:66:b4:f5:f2:2f:14:d3:08:2d:8c:82:94:9c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68896B9A803F401F71FCF845C4E94131201E4D39
        Validity
            Not Before: Feb 13 18:22:50 2025 GMT
            Not After : Feb 12 18:27:50 2026 GMT
        Subject: CN=7357496D7C0C1460E3D1C8A3A87318E15BBE44E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:86:18:69:fa:54:3c:99:20:b5:9c:78:46:
                    07:54:16:b5:40:02:44:cb:3a:85:40:aa:be:60:c3:
                    2e:e4:70:89:72:53:46:6b:46:cd:3c:95:f9:03:03:
                    13:5d:80:57:f9:7a:07:53:2a:15:cc:5e:94:b2:ea:
                    de:03:c0:3c:37:85:e2:31:79:7f:21:4b:e0:70:07:
                    8f:b8:42:e1:ed:85:f6:01:bb:cd:57:49:96:cc:b0:
                    41:73:9a:8b:22:9f:33:f1:70:a5:5c:d5:8a:88:26:
                    22:c7:6f:75:33:85:ac:13:11:a6:a4:ad:6f:00:3e:
                    a9:5e:c4:36:eb:7b:66:9b:88:35:5d:26:cd:fc:79:
                    a1:8b:ec:fd:99:af:e9:30:fd:28:c4:b9:59:e7:28:
                    f7:ff:39:d9:5b:8e:da:b0:2a:c9:c0:00:b6:2c:f5:
                    c8:38:db:09:fb:4f:d1:30:e4:43:a0:84:a1:aa:ee:
                    6d:16:6b:03:93:76:6e:4a:78:d5:0b:86:f6:4a:bd:
                    fe:42:28:b5:47:60:d1:6e:2d:dc:09:ef:76:0a:47:
                    ea:d5:be:bd:a2:e1:5d:e5:5a:43:2a:07:fd:35:c8:
                    f7:b5:e8:04:7f:d5:ca:46:a3:f2:a6:c4:46:7b:9f:
                    7c:4d:dc:0a:f1:6e:09:c3:4c:54:b0:e3:ef:52:01:
                    a3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:57:49:6D:7C:0C:14:60:E3:D1:C8:A3:A8:73:18:E1:5B:BE:44:E7
            X509v3 Authority Key Identifier:
                keyid:68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/68896B9A803F401F71FCF845C4E94131201E4D39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:0b:9b:c0:2d:9a:e0:6f:52:77:a2:c9:d5:41:16:14:ea:92:
         73:87:3e:4d:6c:d5:94:cd:cd:d7:ab:f3:65:c8:e2:37:4c:3c:
         30:6d:f3:a5:c7:c2:07:80:98:75:d9:de:ab:74:c3:26:ec:75:
         b7:4e:3e:88:20:41:6e:99:d8:76:1d:64:a7:10:d8:0b:12:1f:
         30:ea:e4:0b:18:4e:8b:b7:38:89:69:8e:8d:76:1d:c4:e3:d4:
         7d:83:df:b6:5e:d9:f7:02:0a:1e:1c:2c:75:f6:af:16:5d:5e:
         27:16:e9:da:0c:bb:2b:aa:4e:fd:d5:5a:01:d1:7c:e1:2c:87:
         09:dd:07:63:dd:80:5b:b0:53:73:59:61:5f:53:5d:8b:c0:58:
         ca:e0:23:41:a1:38:cd:9d:b8:de:3a:7a:a3:6d:fb:e6:f1:fb:
         f9:fa:f8:12:a8:57:43:ea:e4:1c:d3:86:69:19:5c:47:27:bb:
         94:41:1c:53:bb:14:15:5e:b6:89:0f:44:61:15:38:d4:63:1c:
         cd:f4:f1:22:1c:18:20:2e:a9:2e:d9:99:e4:f0:ce:7a:12:45:
         2c:1f:6a:f2:ba:07:43:c5:77:cc:f6:d9:f6:ee:6f:28:21:cb:
         48:78:da:ef:ce:84:ff:c0:61:aa:61:75:d3:48:c3:e2:9b:b9:
         52:85:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:51:05 2025 by rpki-client