Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32322d3236203d3e20323638313036.roa
File:                     34352e3136392e3130382e302f32322d3236203d3e20323638313036.roa (raw, json)
Hash identifier:          RgmsxIVfE4bAzBXYFacXPR+7LxAwzTa7hnTOxntJ91s=
Subject key identifier:   2B:83:26:D0:08:D0:F5:30:FE:79:C8:08:9C:12:59:01:0A:50:6B:B4
Certificate issuer:       /CN=A66DDA8A5EEDDF69630CFBB6B041152978397596
Certificate serial:       3AFAD181FAB7AC703AB2E19F24FC38EE5CCFEF6D
Authority key identifier: A6:6D:DA:8A:5E:ED:DF:69:63:0C:FB:B6:B0:41:15:29:78:39:75:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32322d3236203d3e20323638313036.roa
Signing time:             Tue 08 Aug 2023 13:52:36 +0000
ROA not before:           Tue 08 Aug 2023 13:47:36 +0000
ROA not after:            Tue 06 Aug 2024 13:52:36 +0000
asID:                     268106
IP address blocks:        45.169.108.0/22 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fa:d1:81:fa:b7:ac:70:3a:b2:e1:9f:24:fc:38:ee:5c:cf:ef:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A66DDA8A5EEDDF69630CFBB6B041152978397596
        Validity
            Not Before: Aug  8 13:47:36 2023 GMT
            Not After : Aug  6 13:52:36 2024 GMT
        Subject: CN=2B8326D008D0F530FE79C8089C1259010A506BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:09:8a:a7:d9:d7:95:02:67:56:ee:25:c8:
                    54:a2:ac:06:39:e3:ea:7e:13:61:d0:65:d4:e7:45:
                    ce:ab:b9:43:ad:d3:ee:7c:e0:44:08:bc:94:50:86:
                    aa:99:8c:ca:d7:08:5c:0a:22:19:91:0a:ec:f0:55:
                    0d:6c:ae:08:96:2a:96:15:73:92:e9:4b:a8:67:ef:
                    82:82:50:e2:75:b8:59:69:60:6d:a4:d5:a4:ca:7a:
                    d1:71:ff:05:67:82:48:8b:b9:a9:2a:84:06:43:52:
                    9e:33:65:3a:6a:17:75:9d:dd:a4:b2:f2:7e:f2:54:
                    6b:69:96:d9:25:64:b9:14:e6:77:01:2f:f1:8b:30:
                    e6:b5:40:10:b8:73:11:0e:98:28:a5:12:44:de:1c:
                    de:1f:e2:a6:52:9c:66:7e:e3:8b:8a:af:d4:17:c8:
                    4d:a4:2e:65:86:23:64:a2:8a:ec:c6:f3:32:f3:27:
                    df:62:78:ec:03:ea:03:60:dd:14:42:0b:84:df:e1:
                    41:f6:2c:4b:e4:03:7c:56:3a:52:20:cc:f9:45:aa:
                    39:78:f0:fd:25:55:9a:5e:a9:ff:00:fc:92:e5:90:
                    a6:cc:01:2d:30:63:49:a7:7c:6c:df:b7:01:27:ca:
                    49:a9:b8:b1:c0:1b:fc:25:f1:90:8a:1b:6f:1f:b2:
                    99:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:83:26:D0:08:D0:F5:30:FE:79:C8:08:9C:12:59:01:0A:50:6B:B4
            X509v3 Authority Key Identifier:
                keyid:A6:6D:DA:8A:5E:ED:DF:69:63:0C:FB:B6:B0:41:15:29:78:39:75:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A66DDA8A5EEDDF69630CFBB6B041152978397596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130382e302f32322d3236203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:b5:24:73:dd:e3:9a:01:9c:1f:3f:55:60:e0:c7:f9:bd:f5:
         e4:f0:f9:86:c9:05:b6:4c:73:b8:4e:0d:e0:1f:0b:36:65:dc:
         1c:7c:3b:09:98:8a:0f:f6:24:23:d3:13:e2:ea:7d:1c:57:66:
         ee:28:74:67:4e:9b:86:f9:13:d0:50:b3:f7:53:9b:1f:c4:c3:
         6a:ce:f5:1c:1d:36:ac:fc:38:6f:8c:50:a1:26:41:4d:e0:d6:
         c6:b1:53:ae:16:5c:fc:f6:b8:ec:ab:06:c1:63:f7:69:01:dd:
         db:e1:dc:5a:84:ff:96:58:e2:f1:4c:c4:a1:83:43:6a:90:9d:
         ac:df:29:9e:66:c9:92:56:7a:4a:ff:11:0c:ca:9b:85:30:ce:
         bd:cf:2b:a6:92:8b:ab:3c:d7:d7:57:40:f9:8d:88:80:2d:22:
         3c:7b:da:f3:f9:52:73:10:e7:a0:28:1f:4c:77:fa:b1:e2:33:
         a6:31:17:1f:f3:66:5b:86:8f:0b:8c:6e:1a:2c:37:e5:94:3c:
         f1:cf:a4:88:73:df:73:79:48:07:67:a5:87:ab:34:73:bb:d7:
         22:76:30:f4:a5:ed:1a:75:69:82:83:9e:58:10:36:e3:ac:bb:
         89:bf:73:fd:49:86:64:4f:e5:97:b4:f6:a3:fd:c9:b0:9f:82:
         4a:0b:99:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:24 2025 by rpki-client