Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa
File:                     34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa (raw, json)
Hash identifier:          QDy3XCDQ2iu7GONa49dejNSJAHp/qjADqEotIyDaBgY=
Subject key identifier:   03:39:10:1C:76:22:8D:F4:1A:3C:23:F4:D7:70:B4:86:79:75:FB:CA
Certificate issuer:       /CN=0480C093E98E907CBEAC592394DE5FB72A439B24
Certificate serial:       155B36C877B7C383589108A439D3B213A10C5E4D
Authority key identifier: 04:80:C0:93:E9:8E:90:7C:BE:AC:59:23:94:DE:5F:B7:2A:43:9B:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0480C093E98E907CBEAC592394DE5FB72A439B24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa
Signing time:             Thu 06 Mar 2025 12:07:45 +0000
ROA not before:           Thu 06 Mar 2025 12:02:45 +0000
ROA not after:            Thu 05 Mar 2026 12:07:45 +0000
asID:                     268465
IP address blocks:        45.161.124.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5b:36:c8:77:b7:c3:83:58:91:08:a4:39:d3:b2:13:a1:0c:5e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0480C093E98E907CBEAC592394DE5FB72A439B24
        Validity
            Not Before: Mar  6 12:02:45 2025 GMT
            Not After : Mar  5 12:07:45 2026 GMT
        Subject: CN=0339101C76228DF41A3C23F4D770B4867975FBCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:db:ce:29:51:22:8f:e4:d6:5a:64:68:bc:
                    36:34:f7:db:ec:3f:e4:39:25:3b:6c:57:6a:c7:c4:
                    7c:88:63:04:7e:ed:40:e0:68:8e:58:2b:0a:a2:62:
                    3e:70:e5:f6:fe:2c:53:c2:c9:2d:c2:1d:a3:2e:46:
                    1a:b1:f2:7b:e6:d4:4c:09:ea:de:5e:e0:24:8e:cf:
                    80:1d:60:83:9d:f4:a4:34:47:53:7d:25:36:51:a1:
                    b3:d6:d5:41:c2:13:bb:2d:e2:8f:b3:c3:6e:c4:cc:
                    fe:ec:84:fc:f3:96:41:bb:63:29:b4:69:cd:95:73:
                    16:91:45:f6:84:1a:5f:d9:e7:a4:13:f7:02:f0:21:
                    58:1c:87:9f:54:6d:0d:c8:31:0b:43:8f:95:b2:19:
                    c0:6b:23:bf:be:27:20:59:d6:cb:3d:29:7d:74:51:
                    17:a5:57:83:1e:5b:27:a8:f6:69:db:d2:10:b7:d2:
                    e2:80:35:ec:d1:be:3b:c4:41:29:5c:61:bf:a7:6e:
                    a3:eb:09:fd:82:72:58:5f:92:65:77:ce:b6:a9:d7:
                    83:45:8d:26:16:82:24:85:8f:d1:b9:e8:18:77:59:
                    3e:d5:85:5f:ee:94:f8:ab:7a:f8:b4:5e:f2:7a:ef:
                    51:e0:5c:31:90:ea:c1:c7:ce:0a:63:39:86:ae:f1:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:39:10:1C:76:22:8D:F4:1A:3C:23:F4:D7:70:B4:86:79:75:FB:CA
            X509v3 Authority Key Identifier:
                keyid:04:80:C0:93:E9:8E:90:7C:BE:AC:59:23:94:DE:5F:B7:2A:43:9B:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/0480C093E98E907CBEAC592394DE5FB72A439B24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0480C093E98E907CBEAC592394DE5FB72A439B24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/1/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:0a:21:a8:76:76:7a:25:5a:95:ed:78:3a:29:3c:8b:9e:67:
         c5:38:51:33:f6:b7:78:ff:55:7a:00:25:77:a1:6d:db:e3:fc:
         cd:e5:13:2c:5f:eb:c3:b8:42:53:b1:f3:1d:a6:cd:41:45:3d:
         5a:11:89:5d:cf:cd:f3:12:6f:6b:d0:b2:da:28:1c:40:0d:7e:
         0c:0f:0f:07:60:96:e4:32:b2:8f:8c:53:00:e7:77:0b:8e:d8:
         f9:21:5a:38:0e:ba:63:db:4a:0a:3b:91:52:53:1e:4b:38:cf:
         5e:1a:10:9c:18:a3:6d:1d:51:ae:63:dd:1e:ad:20:51:57:56:
         61:71:fa:fb:bb:3b:dd:c3:50:48:ef:fb:b5:32:91:84:80:d8:
         03:cb:35:38:95:1a:18:73:7c:86:df:5e:bc:60:50:25:3d:e4:
         51:21:76:62:b0:9b:83:9a:b0:3e:0b:da:f6:64:52:26:76:49:
         40:93:2b:91:84:1e:18:30:94:bb:18:02:46:c1:68:d6:b6:0f:
         5e:0e:d4:40:4f:3d:e0:ba:d0:9f:87:26:94:90:82:69:f8:d3:
         b1:a1:33:90:7b:5b:3a:cb:88:a6:4b:88:9d:7c:d7:65:1a:fc:
         14:73:40:07:8a:b5:4d:65:92:86:0a:de:57:47:1b:d1:16:82:
         66:05:e4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:54:33 2025 by rpki-client