Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/34352e3136362e32302e302f32322d3234203d3e20323634313035.roa
File:                     34352e3136362e32302e302f32322d3234203d3e20323634313035.roa (raw, json)
Hash identifier:          5+1+y79pgMWUzh97CuX8MVKn2n/uu74dutuATbJkXqE=
Subject key identifier:   30:E3:BD:FE:A9:BE:21:30:4F:56:5C:5E:B6:3B:96:E6:F2:A9:37:3A
Certificate issuer:       /CN=E9FFB74BC6E77853BA3620D32D32557B2927C70A
Certificate serial:       4F9626D06BDAB40C6AAEB9F830CE90BC366B0D95
Authority key identifier: E9:FF:B7:4B:C6:E7:78:53:BA:36:20:D3:2D:32:55:7B:29:27:C7:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/34352e3136362e32302e302f32322d3234203d3e20323634313035.roa
Signing time:             Thu 06 Mar 2025 13:01:32 +0000
ROA not before:           Thu 06 Mar 2025 12:56:32 +0000
ROA not after:            Thu 05 Mar 2026 13:01:32 +0000
asID:                     264105
IP address blocks:        45.166.20.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:96:26:d0:6b:da:b4:0c:6a:ae:b9:f8:30:ce:90:bc:36:6b:0d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FFB74BC6E77853BA3620D32D32557B2927C70A
        Validity
            Not Before: Mar  6 12:56:32 2025 GMT
            Not After : Mar  5 13:01:32 2026 GMT
        Subject: CN=30E3BDFEA9BE21304F565C5EB63B96E6F2A9373A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:71:4a:7b:f8:eb:41:91:b8:fb:55:ea:fc:e0:
                    c6:3f:48:74:67:24:d8:f3:b1:7b:35:2b:95:49:09:
                    74:99:ab:3c:49:cd:db:44:75:ed:c5:b3:49:95:e6:
                    28:e0:1a:87:0a:d4:33:99:64:2c:ad:1c:b2:e7:cc:
                    e1:79:c7:3f:fe:cb:f8:0d:2c:d3:bd:40:07:66:4f:
                    c7:62:e9:22:b6:a8:01:bd:a8:ac:cc:92:a4:55:0f:
                    51:83:f1:78:e0:c9:cf:f0:f1:e5:b7:93:b1:e6:63:
                    ed:8a:4a:54:47:55:f1:84:ea:02:d9:a8:d3:05:9b:
                    a9:83:15:47:35:c6:88:54:87:08:3f:d3:5d:b4:16:
                    7d:68:5c:6e:9c:94:f9:ff:47:67:9c:d1:77:a6:04:
                    6a:dc:b8:9a:d7:57:a0:7f:14:15:51:05:1b:ea:52:
                    53:f6:c1:54:dd:2a:27:67:62:49:bb:75:25:e7:64:
                    3f:e9:88:7f:0a:93:4b:58:72:4e:83:a7:4b:4e:25:
                    c0:be:5d:81:8f:c2:52:30:83:f4:1f:65:6e:6d:cb:
                    5c:b9:c4:9d:52:5f:7c:31:ac:8d:fd:6e:73:15:48:
                    4e:66:f7:83:e7:6d:48:46:6f:73:b3:bb:16:4b:bb:
                    ea:08:18:b4:64:c6:3f:d4:fc:cc:da:4e:1a:89:25:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E3:BD:FE:A9:BE:21:30:4F:56:5C:5E:B6:3B:96:E6:F2:A9:37:3A
            X509v3 Authority Key Identifier:
                keyid:E9:FF:B7:4B:C6:E7:78:53:BA:36:20:D3:2D:32:55:7B:29:27:C7:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/34352e3136362e32302e302f32322d3234203d3e20323634313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:03:86:eb:15:f1:0d:fd:e5:62:d9:1f:85:b6:00:df:c1:8b:
         7b:94:86:5a:0f:57:9f:eb:c7:da:1f:6f:c1:71:19:74:f8:a2:
         99:54:3c:e2:d1:06:9d:bb:08:47:1d:a3:6b:f7:9c:21:bd:48:
         72:4e:6b:98:82:a3:da:ea:63:28:58:1f:a9:bb:dd:9b:72:36:
         00:93:5f:58:87:33:74:02:e8:16:9c:d3:0d:59:85:48:24:cd:
         aa:91:f9:7a:17:ce:bd:a9:01:9c:a3:af:71:c2:c1:62:56:6c:
         97:cc:4b:25:f4:dd:19:1c:1a:7a:0b:a4:23:0b:f6:5a:ba:a2:
         22:4f:fd:4d:62:7c:54:65:5c:24:e8:e2:4f:8b:ad:e7:fb:c2:
         fb:5d:15:d4:ad:86:e2:75:9a:39:88:89:d0:e8:a3:ca:21:f3:
         da:a2:03:f8:16:84:40:09:47:df:5d:30:c4:01:2a:a5:08:d0:
         14:ab:4d:ef:38:dd:4d:4e:81:ed:80:e5:37:0e:82:5e:91:82:
         e5:3b:82:8b:70:6e:7d:ad:4b:b0:c8:df:6b:8e:68:6c:62:b7:
         e0:44:f4:c3:f1:11:53:14:a7:98:14:c7:53:2b:cb:47:8a:5b:
         f0:b7:95:7d:07:7a:78:da:c6:15:b6:f6:1d:42:ac:a8:d0:18:
         a6:79:44:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:29 2025 by rpki-client