Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa
File:                     34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa (raw, json)
Hash identifier:          CGcZx0TeATvPufu3BdnBvTR+wCuKUOzvR0Vw7EviEl8=
Subject key identifier:   F6:B4:D4:A4:7A:21:EA:28:E7:5B:D8:E4:F0:D5:D5:CD:31:FD:AC:A3
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       349E86A56896B380482D5EF334CDC43CF1DE931A
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     269195
IP address blocks:        45.179.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9e:86:a5:68:96:b3:80:48:2d:5e:f3:34:cd:c4:3c:f1:de:93:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=F6B4D4A47A21EA28E75BD8E4F0D5D5CD31FDACA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:04:99:4e:b2:c2:42:29:32:18:32:06:74:a7:
                    0d:fa:99:fb:0c:a7:36:4e:e4:f7:44:fa:61:e5:42:
                    06:20:14:74:b2:b2:45:2e:70:24:01:e1:d7:09:2a:
                    14:7e:54:8d:1e:f9:88:a8:bc:2e:80:f9:8a:10:9e:
                    73:c6:f1:91:f5:2d:df:13:46:dd:ac:60:d0:14:43:
                    9e:d7:fb:3e:27:cd:12:2b:03:6c:6f:7f:14:e1:ca:
                    9c:8d:50:bf:d7:6f:2a:e2:3d:68:7b:86:69:53:f6:
                    89:b7:f4:19:e6:b7:3e:53:09:c5:e7:d1:8f:b0:dd:
                    ff:be:ed:3c:98:51:fd:0f:ef:f0:1b:5f:74:20:68:
                    b6:e2:0b:d0:c2:17:97:d3:4c:2d:68:bc:44:1a:b6:
                    eb:8a:76:b3:61:fa:16:d1:2b:db:0c:6a:75:c0:d8:
                    1d:9e:f7:52:04:0f:9d:0f:e4:32:fe:d2:63:25:7b:
                    05:59:a8:8a:8f:44:0d:da:48:10:58:ce:08:3a:24:
                    9a:da:03:60:60:b0:09:a1:08:3a:57:de:65:8e:36:
                    d9:3c:9e:0e:5f:2f:ab:ba:62:fe:d9:2e:7d:18:59:
                    48:2c:12:39:ff:9f:2d:a6:81:be:06:40:f0:49:85:
                    c1:21:2d:03:c8:c1:1a:74:4a:00:75:b5:2e:06:7e:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B4:D4:A4:7A:21:EA:28:E7:5B:D8:E4:F0:D5:D5:CD:31:FD:AC:A3
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:6a:6c:86:81:0c:f9:34:1f:c5:17:09:fd:45:46:19:f8:a4:
         57:ef:4d:d8:3e:9f:68:6f:36:e1:25:bc:9d:0c:bf:6a:5b:22:
         25:fe:b8:58:07:9e:8f:24:88:d3:70:d5:2e:85:9f:c3:99:f3:
         3c:1e:3a:1c:21:33:2d:02:6c:43:5a:db:ea:21:e3:35:10:30:
         1d:19:84:84:06:df:d9:c0:ec:32:84:ef:80:49:cd:e0:3e:b7:
         11:37:8e:1f:15:e2:93:8d:92:b5:58:62:33:48:29:21:72:ab:
         f7:be:9e:1b:e1:78:b5:23:3e:46:fa:42:20:cd:2f:69:cd:0a:
         85:38:88:8d:ad:f2:9d:ba:71:7a:b6:1f:0c:bd:98:78:fc:8a:
         57:04:60:ec:98:fe:43:cf:01:38:9c:34:7f:75:45:dc:d5:1a:
         67:d6:14:be:ed:21:80:1a:59:46:0a:57:58:b7:e4:b8:fb:9c:
         22:4e:7e:b3:14:95:92:38:36:3e:d6:7e:0c:f8:7c:69:fa:f9:
         b1:34:6b:6c:4b:09:0a:90:54:0d:06:0e:da:f4:c0:fc:e7:ca:
         e3:ba:e4:ba:6e:3d:72:3b:1e:f5:02:a3:76:ad:a2:88:08:38:
         73:fd:46:54:8a:b6:52:12:2c:62:65:e0:af:84:09:ed:22:52:
         77:3b:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:27:50 2025 by rpki-client