Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3136382e302f32332d3233203d3e20323638353633.roa
File:                     34352e3136332e3136382e302f32332d3233203d3e20323638353633.roa (raw, json)
Hash identifier:          bmLgxWj2PvoOskBPlYkOF6XNtoP4b7JezcAc5/SAVjM=
Subject key identifier:   A4:C0:D9:C5:B2:C9:02:4B:E7:26:0E:BA:C0:AF:AB:3A:FD:CF:27:BE
Certificate issuer:       /CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
Certificate serial:       2056821C662A054B57019080AC8160CC3D3FF597
Authority key identifier: 34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3136382e302f32332d3233203d3e20323638353633.roa
Signing time:             Thu 11 Jul 2024 13:15:56 +0000
ROA not before:           Thu 11 Jul 2024 13:10:56 +0000
ROA not after:            Thu 10 Jul 2025 13:15:56 +0000
asID:                     268563
IP address blocks:        45.163.168.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:56:82:1c:66:2a:05:4b:57:01:90:80:ac:81:60:cc:3d:3f:f5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
        Validity
            Not Before: Jul 11 13:10:56 2024 GMT
            Not After : Jul 10 13:15:56 2025 GMT
        Subject: CN=A4C0D9C5B2C9024BE7260EBAC0AFAB3AFDCF27BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:59:2d:03:28:fc:d6:97:a0:36:b0:ee:e6:
                    bf:ca:70:07:31:7c:54:a2:40:d7:b2:8f:42:d8:41:
                    c0:a9:b9:ef:f9:7f:5e:2b:4e:09:ed:c6:96:7b:64:
                    0e:ee:45:fd:62:c4:bf:c2:c8:ce:64:2e:55:40:ab:
                    6b:3f:7e:7a:97:f9:7c:9d:ea:18:75:08:f8:1f:7d:
                    a9:62:69:3b:6b:d6:b1:be:ff:44:66:25:8d:06:0a:
                    ef:56:0d:4c:b9:43:e3:79:85:8c:f6:ed:3f:65:96:
                    24:d1:9c:5e:77:a9:04:c9:30:80:67:e9:f5:e9:83:
                    75:5f:bc:bc:f8:3e:62:9b:7f:d8:a3:e2:3c:ce:bd:
                    01:c5:30:bc:1e:d7:00:a0:2a:9f:99:a2:ae:95:b8:
                    7b:ac:9d:59:05:5f:2e:0a:b7:dd:3c:d7:22:ca:a7:
                    af:65:d1:9c:cf:33:77:ad:85:e3:27:67:b7:cb:19:
                    4b:52:13:fe:e5:76:02:c7:47:b1:9f:8e:92:22:df:
                    aa:71:2b:85:0c:4e:92:66:b1:35:5c:5c:05:00:26:
                    25:e4:23:c5:7e:ad:2c:5f:da:89:74:10:07:a1:47:
                    eb:aa:5f:5d:94:3f:ed:60:d1:8f:57:ea:d5:b0:f4:
                    95:41:3c:a4:ae:7d:6b:6d:40:09:da:eb:a9:0d:a6:
                    18:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C0:D9:C5:B2:C9:02:4B:E7:26:0E:BA:C0:AF:AB:3A:FD:CF:27:BE
            X509v3 Authority Key Identifier:
                keyid:34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3136382e302f32332d3233203d3e20323638353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:77:ef:cc:67:e8:dd:57:8b:1d:50:fc:05:83:49:7b:a6:bd:
         89:5c:25:09:71:e7:82:c2:a9:f4:c6:a5:5a:46:4d:eb:0b:38:
         33:61:59:75:99:43:17:e0:8d:d2:67:00:9c:37:50:6d:82:b3:
         0a:1d:d9:c9:8c:dd:6a:7f:a9:0f:c2:30:3b:62:4e:72:2d:5b:
         dd:35:fc:bc:cc:5e:b4:65:19:ef:0b:66:53:42:81:3f:2a:0f:
         69:61:9d:ae:25:65:ff:08:4d:01:0b:62:80:97:d3:81:26:11:
         fc:18:47:f8:0d:41:df:f6:fd:b8:e2:92:61:bf:91:92:ad:27:
         f2:fd:94:8a:bd:71:3b:f7:6b:ca:6a:f2:93:06:74:86:4d:ce:
         6a:36:af:bb:af:6e:fd:14:22:9f:96:6b:72:e0:83:24:4e:6a:
         d5:1c:22:28:e1:ac:35:f2:10:4e:c2:ba:86:73:80:fc:0a:3b:
         85:de:50:3d:f8:46:89:a2:fe:0f:1f:80:31:3e:aa:4b:0f:c7:
         75:29:17:63:ec:e7:5a:5e:97:62:b3:36:d3:f9:94:32:0e:0c:
         95:a7:22:2d:65:0a:1e:2c:13:42:53:3c:a0:bc:93:20:70:22:
         60:1c:bb:50:d5:07:1b:ad:15:cf:a9:db:b7:40:da:be:cf:d4:
         e2:08:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:53 2025 by rpki-client