Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/1/34352e3136302e31362e302f32322d3234203d3e20323638343032.roa
File:                     34352e3136302e31362e302f32322d3234203d3e20323638343032.roa (raw, json)
Hash identifier:          X0dYHyuFKLsLuJxit01Ve747AB2kbzQyVaQ0P6n+L4M=
Subject key identifier:   25:87:59:FA:AF:A4:8E:55:E3:89:2C:3F:A4:CF:3F:73:2E:CF:74:B9
Certificate issuer:       /CN=8F7E8857A29A30F9D4640C59F873A9474CBD445B
Certificate serial:       038426F34EF3291E6E3AC0E650F2A58BD84AF4A7
Authority key identifier: 8F:7E:88:57:A2:9A:30:F9:D4:64:0C:59:F8:73:A9:47:4C:BD:44:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7E8857A29A30F9D4640C59F873A9474CBD445B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/1/34352e3136302e31362e302f32322d3234203d3e20323638343032.roa
Signing time:             Tue 09 Jul 2024 21:04:47 +0000
ROA not before:           Tue 09 Jul 2024 20:59:47 +0000
ROA not after:            Tue 08 Jul 2025 21:04:47 +0000
asID:                     268402
IP address blocks:        45.160.16.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:84:26:f3:4e:f3:29:1e:6e:3a:c0:e6:50:f2:a5:8b:d8:4a:f4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F7E8857A29A30F9D4640C59F873A9474CBD445B
        Validity
            Not Before: Jul  9 20:59:47 2024 GMT
            Not After : Jul  8 21:04:47 2025 GMT
        Subject: CN=258759FAAFA48E55E3892C3FA4CF3F732ECF74B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fc:8f:1e:63:a5:99:2c:15:de:40:56:05:9c:
                    0c:75:55:c8:be:bc:b8:7a:83:49:3a:47:cc:17:a5:
                    28:f7:a1:6e:cf:8d:49:b4:37:8f:7a:59:0c:7f:fb:
                    be:cc:50:9d:2c:52:3c:4c:8c:59:37:a9:06:53:17:
                    1e:fa:a2:3a:1d:a0:47:9a:95:54:45:bf:3b:4f:a1:
                    88:53:7e:d2:3e:9f:02:ce:ae:e0:d7:c3:bd:75:01:
                    8c:4d:12:8f:bb:08:1d:44:7a:8b:60:bd:b5:f1:86:
                    9c:46:32:7b:80:8d:69:fc:d1:bc:9c:ad:5d:af:19:
                    08:16:04:86:7c:f5:37:4d:c7:06:4f:d2:4d:16:1e:
                    e1:44:8e:7d:52:5b:5c:a6:bf:0d:72:56:b0:04:e4:
                    ec:12:ec:27:63:e7:0b:94:96:13:f7:f8:e5:35:c7:
                    2d:3d:3d:19:66:55:fc:ee:f5:5c:07:d9:00:47:52:
                    aa:33:b9:f4:0f:b5:03:db:df:6c:d0:d7:f8:34:25:
                    f1:1b:06:e9:ab:07:35:b3:10:f4:7e:c5:30:6a:d6:
                    57:d6:1e:6f:7a:26:d6:6b:82:4e:f7:00:a8:19:69:
                    e4:7b:d2:b6:9f:ab:75:f3:61:09:a1:55:7b:1b:88:
                    b1:ed:9f:fd:6d:b6:5c:69:9d:c7:92:c9:c2:9a:5d:
                    0c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:87:59:FA:AF:A4:8E:55:E3:89:2C:3F:A4:CF:3F:73:2E:CF:74:B9
            X509v3 Authority Key Identifier:
                keyid:8F:7E:88:57:A2:9A:30:F9:D4:64:0C:59:F8:73:A9:47:4C:BD:44:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/1/8F7E8857A29A30F9D4640C59F873A9474CBD445B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7E8857A29A30F9D4640C59F873A9474CBD445B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/1/34352e3136302e31362e302f32322d3234203d3e20323638343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:71:77:94:ad:3a:52:8a:41:1c:39:53:45:b5:f3:c1:69:37:
         8f:bf:6f:23:0a:e7:90:a0:ba:d3:de:01:61:5d:4d:9d:a2:38:
         b3:df:bc:32:c0:c4:9d:7c:92:5a:32:a4:45:d7:9e:44:fa:48:
         73:ab:ff:1a:f6:d2:fb:80:f2:99:ee:63:96:b9:7c:b1:f9:3e:
         5c:b2:29:35:7f:24:03:64:c1:6b:d7:3f:bc:29:1a:7e:fd:9f:
         ce:e0:bc:bb:6e:88:c4:64:37:81:01:46:47:4c:09:fc:e4:ca:
         5b:62:b9:79:0e:2a:78:0b:cc:ea:d1:04:02:07:9a:7d:3f:37:
         8e:4a:d4:d3:50:9d:c3:2b:6f:01:cc:55:0a:d7:bd:b4:6a:7d:
         8b:0f:0e:9f:ba:95:ef:37:2f:96:67:3f:20:d0:ae:60:d4:2b:
         a3:de:bd:3f:89:a7:d1:bb:6d:f8:82:9a:3b:4f:d3:2d:e6:ee:
         7f:4f:24:d5:6d:20:f0:18:fb:a3:43:d6:67:60:db:d1:f9:86:
         83:27:41:e2:d0:37:19:05:9d:d3:fa:e9:b0:9c:b3:f9:ec:29:
         45:8b:32:7b:45:e1:95:f2:80:3c:fa:e3:29:93:bc:08:e5:6a:
         ac:7a:b7:13:53:a6:8c:76:37:c0:02:d9:3f:82:95:38:af:82:
         bd:aa:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:06:11 2025 by rpki-client