Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32342d3234203d3e203631333137.roa
File:                     34352e3138362e322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          TxUKZw8aWfoiYQEU8zEJ/oHSAce3/L/HHZfx6vR0txI=
Subject key identifier:   D2:F9:C9:9A:3A:FA:6A:75:98:F7:B5:09:EF:FB:7B:D1:14:8D:C8:2A
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       4B83785298DFBE59490753D30CDBB0202F64C080
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 23 Aug 2023 18:41:18 +0000
ROA not before:           Wed 23 Aug 2023 18:36:18 +0000
ROA not after:            Wed 21 Aug 2024 18:41:18 +0000
asID:                     61317
IP address blocks:        45.186.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:83:78:52:98:df:be:59:49:07:53:d3:0c:db:b0:20:2f:64:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Aug 23 18:36:18 2023 GMT
            Not After : Aug 21 18:41:18 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:a5:d7:6e:59:30:34:08:86:0b:ea:5a:26:
                    f1:30:c1:c6:9b:ce:d6:26:2b:33:0f:35:e5:df:db:
                    d8:e4:d2:29:c8:7e:71:d1:82:f1:ba:75:eb:51:b8:
                    98:be:65:3b:3a:0b:cd:6d:ba:57:8d:42:9c:fd:95:
                    55:d6:a3:bf:e7:58:a8:3c:88:3c:e4:e9:ad:87:c4:
                    6e:64:01:b3:eb:91:18:30:52:71:47:d6:34:3a:d1:
                    35:dc:81:a5:12:7d:0c:f6:a4:ae:13:df:8d:00:ff:
                    05:33:a1:48:f6:03:dd:cb:f7:64:a1:27:c1:35:f6:
                    3e:39:35:5d:d5:5a:30:0f:04:a7:6b:27:9e:15:ff:
                    a1:6d:c2:70:86:bf:0f:ce:4b:f3:0a:1a:57:b3:1e:
                    48:ef:91:a6:8e:3e:80:0d:f5:94:89:a7:e8:54:e0:
                    cd:08:35:43:77:e0:75:ad:8e:a7:e0:9c:48:89:12:
                    b5:1c:40:aa:2f:47:3b:75:66:e2:bc:6f:21:2d:bf:
                    7e:5b:0b:bf:9d:5f:5d:6e:22:3f:ed:4c:53:89:d6:
                    72:b3:3b:bd:62:87:91:84:3f:72:ef:be:ba:8e:1b:
                    87:36:2b:a6:1b:a4:e8:5c:f2:46:14:11:87:e9:ca:
                    51:d8:a4:e0:f6:42:b0:ab:ea:3a:01:b6:06:31:77:
                    b6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F9:C9:9A:3A:FA:6A:75:98:F7:B5:09:EF:FB:7B:D1:14:8D:C8:2A
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:b4:5d:0d:a4:28:e8:70:65:2f:32:58:d7:75:5f:4d:7a:
         8d:ed:66:7b:f9:3a:6a:e9:9f:fe:dd:24:cf:27:4c:a5:bc:3f:
         75:5d:63:e6:f6:a3:ca:b6:48:28:5e:6e:05:b8:e2:19:31:bd:
         77:9f:6a:a7:22:fc:9d:4d:c0:43:f7:bf:39:6e:70:42:aa:85:
         e3:02:9c:60:05:93:f9:1a:bf:84:84:ce:32:04:34:36:53:d2:
         dd:b0:7b:51:1d:62:54:08:a9:25:0f:07:24:a7:7b:d7:07:c8:
         a3:6c:20:c4:44:2a:dc:51:22:7d:d6:a2:9b:74:91:4e:ea:a1:
         cb:da:1c:aa:f5:97:56:f7:08:14:2e:33:83:b2:4f:87:92:67:
         33:89:48:db:0a:fc:0b:37:8e:d6:92:61:e2:a8:64:2d:81:c9:
         a5:9f:04:4a:06:09:05:7e:4a:d6:5e:27:11:1a:64:db:78:a4:
         61:e8:d9:1f:de:db:00:09:85:d0:bc:d4:27:8b:8d:28:ea:a6:
         0f:d7:95:c4:0c:ce:75:be:99:6a:bb:33:64:67:3b:3d:83:2f:
         8b:a6:7a:96:84:f0:c0:94:26:f3:81:55:c5:b2:12:16:55:34:
         eb:30:4f:74:3f:de:ae:af:d3:ee:b2:fa:ce:bf:c3:ae:29:ba:
         b8:03:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:11 2025 by rpki-client