Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3138362e39342e302f32342d3234203d3e20323638313833.roa
File:                     34352e3138362e39342e302f32342d3234203d3e20323638313833.roa (raw, json)
Hash identifier:          xi4s71zhVLMbkziv0IQ6vjqCD/BP+TPeksLcBBsPCpE=
Subject key identifier:   25:FE:E9:B9:AF:ED:06:B6:E5:3E:1F:D2:F0:77:BB:8C:1F:2F:47:D2
Certificate issuer:       /CN=86806D9BD12A677347ED32D286F9803B86B05A33
Certificate serial:       7AEAE7BCF9D87E35A567762B9FA54DF12D6CDA37
Authority key identifier: 86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3138362e39342e302f32342d3234203d3e20323638313833.roa
Signing time:             Mon 04 Mar 2024 22:25:50 +0000
ROA not before:           Mon 04 Mar 2024 22:20:50 +0000
ROA not after:            Mon 03 Mar 2025 22:25:50 +0000
asID:                     268183
IP address blocks:        45.186.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ea:e7:bc:f9:d8:7e:35:a5:67:76:2b:9f:a5:4d:f1:2d:6c:da:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86806D9BD12A677347ED32D286F9803B86B05A33
        Validity
            Not Before: Mar  4 22:20:50 2024 GMT
            Not After : Mar  3 22:25:50 2025 GMT
        Subject: CN=25FEE9B9AFED06B6E53E1FD2F077BB8C1F2F47D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:28:c7:bf:58:61:98:e9:19:0e:d1:6c:8e:
                    3a:e2:9c:1a:e8:02:60:7d:a8:80:7a:17:50:3c:c6:
                    10:09:b6:f1:ff:a1:11:ea:88:56:1c:70:a2:ff:c6:
                    65:2f:d6:11:3b:ca:8d:bf:82:c0:6a:d4:a3:d6:82:
                    bd:7f:3d:8b:98:c3:b9:90:3b:69:7f:2c:44:de:77:
                    d1:d5:3c:0c:86:0f:90:ec:62:0d:01:fa:5f:54:2f:
                    74:69:d0:6e:21:75:27:cd:63:ff:6b:13:59:db:05:
                    7b:62:b9:a9:45:6e:b3:2f:b2:cf:b4:e0:a5:86:66:
                    cc:4b:22:76:ef:c2:fc:60:29:cf:a8:10:2a:98:9f:
                    ce:6f:c5:c7:5b:4f:04:7e:30:f0:c3:73:b1:b5:5b:
                    8b:38:0e:24:fa:a3:fd:98:e1:67:fe:ef:3b:a0:9a:
                    e9:d1:41:7b:13:f5:c5:03:f9:09:f7:67:d4:40:20:
                    d9:28:c4:a3:28:60:0b:9d:96:3d:6f:65:c0:fa:a7:
                    11:fe:52:c6:8a:9d:38:7f:b2:38:e8:9a:7e:dd:f4:
                    23:a2:da:2f:66:56:52:b4:72:27:4d:53:b2:23:70:
                    4e:00:f4:b3:a8:a3:ac:f2:73:5e:3d:c2:1b:0f:6c:
                    2b:10:78:89:da:31:ea:5f:6e:86:2b:23:68:bf:03:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FE:E9:B9:AF:ED:06:B6:E5:3E:1F:D2:F0:77:BB:8C:1F:2F:47:D2
            X509v3 Authority Key Identifier:
                keyid:86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/86806D9BD12A677347ED32D286F9803B86B05A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3138362e39342e302f32342d3234203d3e20323638313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:23:d3:3f:d3:d8:76:50:fb:97:5b:25:9a:0a:a7:e8:01:78:
         9b:7f:cd:5d:74:83:d3:93:8c:6f:92:8b:24:e4:99:56:08:6c:
         6d:94:1c:27:c8:cb:f1:29:6f:50:74:d2:d6:15:d4:fc:7a:e0:
         9a:b7:13:2e:20:db:45:b7:5a:d4:c5:7e:2a:cc:80:56:3b:6d:
         60:a7:5a:90:b1:f8:5d:ad:7a:f7:96:96:6b:6d:66:29:20:d0:
         a3:4f:68:f3:76:b3:fa:d0:31:b0:32:1f:be:36:38:c0:60:b2:
         27:98:72:04:a4:f9:27:18:5a:49:fe:80:bd:57:a9:f5:aa:c9:
         65:3a:1a:a4:60:c3:af:0a:8f:ed:32:b2:27:e4:7e:40:83:6d:
         ae:62:23:8b:dc:0e:11:88:7d:71:32:53:9b:d0:66:38:07:94:
         ac:b9:51:86:8f:0e:4e:bf:52:ae:25:63:8e:31:03:8b:1e:23:
         61:40:41:37:0f:13:39:6a:be:a5:40:04:34:bb:b6:b3:07:fb:
         d6:a1:70:33:65:d3:3d:84:ca:11:93:b7:90:cc:84:dd:3b:07:
         e4:91:c1:8b:a9:96:af:f4:35:2c:ad:e4:2b:14:20:77:2a:e1:
         2a:b0:2a:ec:8f:fe:95:ce:fa:87:33:2d:19:8f:af:a5:39:6d:
         b8:ec:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:55 2025 by rpki-client