Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33362e302f32342d3234203d3e20323636393735.roa
File:                     34352e3232362e33362e302f32342d3234203d3e20323636393735.roa (raw, json)
Hash identifier:          LkycYlfLfhux/co3SmDPdT8a0lABGr8+dgfsXx6NSE0=
Subject key identifier:   45:6A:2E:0C:97:62:1A:34:79:36:42:06:10:07:65:24:4F:38:21:5D
Certificate issuer:       /CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
Certificate serial:       2004B7D1F98DF85DE52D2A575B4C67C434F8E065
Authority key identifier: F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33362e302f32342d3234203d3e20323636393735.roa
Signing time:             Tue 04 Feb 2025 14:20:43 +0000
ROA not before:           Tue 04 Feb 2025 14:15:43 +0000
ROA not after:            Tue 03 Feb 2026 14:20:43 +0000
asID:                     266975
IP address blocks:        45.226.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:04:b7:d1:f9:8d:f8:5d:e5:2d:2a:57:5b:4c:67:c4:34:f8:e0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
        Validity
            Not Before: Feb  4 14:15:43 2025 GMT
            Not After : Feb  3 14:20:43 2026 GMT
        Subject: CN=456A2E0C97621A3479364206100765244F38215D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bc:fa:df:6a:4d:13:36:b9:02:31:aa:cc:7c:
                    76:ae:26:91:6f:34:df:a0:38:4d:9c:67:fd:5c:d2:
                    ad:94:fa:f5:fa:33:be:41:3c:43:aa:8a:0a:0e:21:
                    b2:7a:81:0d:4c:50:24:89:08:f8:39:25:62:b9:1d:
                    c9:63:19:74:75:57:33:5f:48:f0:4b:b8:47:82:6f:
                    f2:d8:33:33:70:a2:bf:98:54:0d:b2:9f:3e:44:ca:
                    12:d1:6d:41:96:0b:6e:87:92:c2:60:21:d1:a7:1f:
                    aa:97:54:57:4d:12:03:df:2f:71:6c:d4:7d:14:37:
                    e8:ce:9a:2b:e6:56:21:e2:d4:2f:1b:0c:c6:d1:72:
                    1e:7a:b7:8e:d6:f0:1a:6e:3e:ca:b0:78:30:ee:e8:
                    6f:ee:07:a4:bf:53:20:d9:66:4c:dd:21:35:9a:43:
                    98:42:5c:9c:ea:da:32:fd:63:35:90:64:5d:fc:6f:
                    5c:a5:6c:5e:04:61:56:dc:1c:f1:dd:73:db:b3:cd:
                    b6:6f:9c:60:e7:1d:94:02:4e:8f:59:53:2d:ef:87:
                    54:83:97:60:c7:99:ce:45:36:f0:c9:f7:44:16:e0:
                    2c:f5:22:4a:b2:b2:0a:67:b7:d4:35:dd:08:2a:27:
                    35:33:88:4f:0b:08:50:37:1d:b0:5c:7f:27:bf:9e:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6A:2E:0C:97:62:1A:34:79:36:42:06:10:07:65:24:4F:38:21:5D
            X509v3 Authority Key Identifier:
                keyid:F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33362e302f32342d3234203d3e20323636393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:de:a2:3c:7a:72:28:10:07:00:8b:05:53:a4:5f:e4:3c:
         26:bd:a2:04:81:c4:1b:5a:b1:0a:14:e2:1e:78:f2:96:7f:7d:
         3a:11:ac:fb:54:74:9c:bc:b1:22:86:44:17:4f:d4:6e:03:84:
         23:03:6d:59:13:7f:b8:b3:97:d1:9e:95:78:46:c7:8f:fc:18:
         55:6b:b5:68:ed:68:b2:2e:2c:62:63:c0:3a:ee:8c:a1:bb:56:
         90:68:40:59:e8:10:5c:c1:45:ee:a8:c9:98:6a:f3:73:bf:41:
         56:d9:c1:14:6c:d0:17:bd:12:35:7a:e7:5c:db:a0:9d:25:0a:
         f9:9b:c5:69:f1:bd:7c:1a:d9:e1:58:b8:08:ec:fd:da:a6:02:
         c4:3e:62:d1:07:04:0c:96:c1:21:1e:83:bb:f4:31:06:a6:b0:
         e3:fb:40:92:6f:64:a3:b0:c9:0b:84:38:6a:08:f9:b3:bf:0d:
         4b:3e:bd:52:23:f2:07:06:16:fe:bb:41:e5:be:27:6c:cd:60:
         91:bd:b2:e8:24:c8:2b:64:58:df:2c:31:f0:77:cb:97:8c:5d:
         b2:72:df:e9:fc:d5:29:cf:a1:b9:9b:3f:54:cd:0f:3d:04:cd:
         ae:18:67:bd:d9:08:a0:e8:80:dd:d0:ba:45:44:de:70:bb:e9:
         5f:84:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:11:48 2025 by rpki-client