Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138312e302f32342d3234203d3e20323638303638.roa
File:                     34352e3136382e3138312e302f32342d3234203d3e20323638303638.roa (raw, json)
Hash identifier:          abafNPKxwihiWHcj+NJ/3NmGND9ZG3TPk4/RXF2u8Fk=
Subject key identifier:   FF:46:D2:77:5D:B5:FC:11:15:D9:69:1F:9E:48:2A:9E:D9:36:0E:8A
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       1BE06DACE52660FA83187FA875682D288AF78DEB
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138312e302f32342d3234203d3e20323638303638.roa
Signing time:             Thu 06 Mar 2025 06:00:19 +0000
ROA not before:           Thu 06 Mar 2025 05:55:19 +0000
ROA not after:            Thu 05 Mar 2026 06:00:19 +0000
asID:                     268068
IP address blocks:        45.168.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e0:6d:ac:e5:26:60:fa:83:18:7f:a8:75:68:2d:28:8a:f7:8d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Mar  6 05:55:19 2025 GMT
            Not After : Mar  5 06:00:19 2026 GMT
        Subject: CN=FF46D2775DB5FC1115D9691F9E482A9ED9360E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:35:9c:51:75:c1:1c:c3:13:01:48:f4:24:
                    24:89:31:8a:8b:4e:9a:93:5a:9e:1e:84:b2:12:f7:
                    36:72:84:5f:22:33:51:ca:8a:52:b3:9c:cd:2b:d5:
                    06:e7:f8:a0:31:00:6f:07:6b:63:5b:c7:16:a8:49:
                    58:2f:8c:60:81:ba:13:7e:cb:b9:1a:55:1e:03:62:
                    6a:6c:f3:4c:76:c8:57:e1:16:9d:50:54:31:f3:40:
                    fd:1e:6e:b2:16:9b:be:bb:49:49:91:08:29:d9:6e:
                    c9:07:36:97:eb:66:31:12:68:f7:d0:b9:f9:c1:b6:
                    01:91:94:0f:9e:b7:79:bd:6c:65:be:f5:7a:36:c1:
                    a3:69:4c:d3:c6:4e:95:c9:31:52:a3:56:a2:9b:75:
                    d7:e7:e0:1a:de:ed:00:e9:00:f6:57:64:37:b1:02:
                    e5:17:27:71:a6:6f:23:cc:cd:8c:58:06:63:a1:9f:
                    54:67:c6:a2:e3:30:07:a1:72:62:ba:10:80:de:a0:
                    6f:d1:e1:9f:ba:4c:b5:ee:a7:0b:08:9f:22:3a:eb:
                    2c:aa:78:79:93:96:d1:9e:4c:ea:c6:54:ca:54:cd:
                    1b:2f:68:16:9b:c0:90:e2:d0:05:60:6e:64:5f:b2:
                    f8:a8:4c:65:bd:93:c9:5d:4d:7b:7d:cd:0d:ea:75:
                    1a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:46:D2:77:5D:B5:FC:11:15:D9:69:1F:9E:48:2A:9E:D9:36:0E:8A
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/34352e3136382e3138312e302f32342d3234203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:bd:0c:1b:a7:33:6c:c4:37:60:6a:6f:89:bd:d4:f5:3d:75:
         33:c4:c8:be:8b:a2:f1:f1:13:68:c9:41:79:e0:5a:2f:20:73:
         3d:76:1d:4a:6e:10:3a:0f:a2:5d:8c:a2:42:10:d2:4e:11:0d:
         bf:0f:83:e2:9b:18:2a:59:5c:53:86:11:ef:5f:87:1c:d1:35:
         0e:9c:58:26:f3:e2:45:7f:34:f7:ac:dd:8f:59:2f:db:0d:62:
         6e:e1:f9:54:c1:5c:7d:e1:30:0f:41:93:c6:25:c0:a7:1f:d3:
         51:7e:12:54:71:24:ed:a9:64:90:29:0b:94:f2:b3:e6:f0:4f:
         00:aa:88:c4:bc:3d:d2:0d:b8:8c:6f:81:dd:9e:88:f6:fd:76:
         2e:9f:5a:ad:62:a3:f0:3a:4c:03:54:25:9e:25:98:fd:42:7a:
         f5:10:16:e9:15:7e:14:02:cc:88:cf:d7:48:52:93:f9:5b:e3:
         e7:c4:56:c6:40:b9:fc:07:f4:7f:e9:3d:94:bf:08:08:2e:15:
         7d:66:1c:ae:79:00:73:b8:7d:a8:7d:3d:51:50:0d:3f:38:9d:
         9a:05:57:b1:3d:9b:ca:29:16:a1:cb:c1:a3:c5:43:2e:d2:e4:
         b4:da:9b:bc:95:c6:58:63:e7:05:97:72:0c:61:82:77:b9:f5:
         ff:0f:ee:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:05:32 2025 by rpki-client