Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35342e302f32342d3234203d3e20323638373038.roa
File:                     34352e3137312e35342e302f32342d3234203d3e20323638373038.roa (raw, json)
Hash identifier:          chkZkBSGlr9z9QXV8Sc7XHiXVVDb49D9/KPoRXiQYio=
Subject key identifier:   83:7C:E6:60:EC:EB:6D:C2:78:62:87:CB:8C:BF:24:E7:D5:E8:F2:52
Certificate issuer:       /CN=0F2CCFC527502386B95CBF037663832D454D8363
Certificate serial:       3AE5F309E1C885078CD6F41AFEDB8403AF240DEC
Authority key identifier: 0F:2C:CF:C5:27:50:23:86:B9:5C:BF:03:76:63:83:2D:45:4D:83:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F2CCFC527502386B95CBF037663832D454D8363.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35342e302f32342d3234203d3e20323638373038.roa
Signing time:             Mon 04 Dec 2023 18:03:01 +0000
ROA not before:           Mon 04 Dec 2023 17:58:01 +0000
ROA not after:            Mon 02 Dec 2024 18:03:01 +0000
asID:                     268708
IP address blocks:        45.171.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e5:f3:09:e1:c8:85:07:8c:d6:f4:1a:fe:db:84:03:af:24:0d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F2CCFC527502386B95CBF037663832D454D8363
        Validity
            Not Before: Dec  4 17:58:01 2023 GMT
            Not After : Dec  2 18:03:01 2024 GMT
        Subject: CN=837CE660ECEB6DC2786287CB8CBF24E7D5E8F252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:0e:24:4e:e6:7b:eb:c3:64:b2:b7:eb:0e:
                    7a:59:e2:7b:fa:cc:94:99:c5:f1:2f:d8:04:30:d4:
                    07:31:e8:09:8f:e9:c9:9a:40:b0:a8:4d:80:a3:af:
                    26:56:02:b0:13:c1:c8:37:52:a9:5e:55:61:6f:47:
                    7a:02:be:78:d5:41:4d:92:3e:49:19:1a:d6:32:5e:
                    75:b6:2d:cc:4a:3f:c8:cb:26:cf:2d:e3:1c:d6:f8:
                    95:e0:41:e5:d4:d1:0e:5c:d1:03:90:1b:28:7e:98:
                    db:7a:2e:b2:11:3d:d0:84:1e:61:e2:95:f7:24:2e:
                    d5:83:df:16:d9:8a:14:bb:93:13:87:84:d5:34:48:
                    83:41:2b:02:48:fe:f7:eb:53:14:71:9b:a2:60:ad:
                    57:3b:42:27:a0:4b:3b:8d:83:f3:cd:63:0a:f9:72:
                    be:e2:06:bf:7b:c8:ee:36:99:f4:ec:0d:96:b6:07:
                    60:7c:ef:30:68:1b:36:41:c7:ca:0e:92:2e:6c:ec:
                    85:da:48:e3:8d:db:30:01:a2:be:15:2c:b4:83:eb:
                    73:e2:7d:e6:02:e3:d6:0a:28:38:0e:26:0b:88:9d:
                    30:f5:90:f5:9b:f8:77:a8:6d:34:f1:9f:bb:b5:d3:
                    1d:15:05:0f:1d:c1:6a:7a:44:9e:24:88:44:2a:df:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7C:E6:60:EC:EB:6D:C2:78:62:87:CB:8C:BF:24:E7:D5:E8:F2:52
            X509v3 Authority Key Identifier:
                keyid:0F:2C:CF:C5:27:50:23:86:B9:5C:BF:03:76:63:83:2D:45:4D:83:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/0F2CCFC527502386B95CBF037663832D454D8363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F2CCFC527502386B95CBF037663832D454D8363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35342e302f32342d3234203d3e20323638373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ca:8e:87:61:45:63:77:7e:69:8f:82:7c:c8:44:68:40:72:
         e9:2c:c1:d4:94:9c:b0:e0:17:67:b6:27:c5:68:3e:74:76:a1:
         30:4d:f5:a7:a3:a2:73:2b:e7:30:2c:b2:f5:71:d0:53:db:40:
         8d:7b:22:fd:e5:ec:82:10:ae:a9:a2:11:4c:84:af:4b:20:58:
         76:4a:fe:9b:36:c2:61:8b:c6:0e:6c:04:59:5f:f1:cc:6b:06:
         23:42:0b:f1:03:81:f7:29:04:2c:95:d2:5e:e4:3d:1c:c2:9a:
         e7:40:0b:7f:0d:19:92:cc:50:93:eb:a9:d5:d0:07:26:30:e9:
         73:e7:82:29:a0:6f:97:c9:ea:33:27:6c:a1:ab:59:16:b1:71:
         55:01:fe:56:ef:a0:7a:39:e9:41:a0:18:42:2c:48:f9:a2:3b:
         d3:a7:a6:25:05:f3:ee:e5:7c:6a:c3:8f:f7:f1:78:b2:a1:72:
         de:3e:bb:9f:53:31:d6:5b:76:88:26:01:0e:21:b1:ad:88:04:
         4d:a1:48:21:19:eb:74:c2:24:44:0b:ea:88:90:f0:87:e8:2d:
         01:98:a4:b0:a9:01:99:b6:96:43:84:11:2a:e0:63:27:71:01:
         e0:d0:57:79:b3:18:60:9b:50:34:35:1b:f9:4d:d2:76:10:b9:
         3e:b5:88:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:47:53 2025 by rpki-client