Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131362e302f32342d3234203d3e20323731353131.roa
File:                     34352e3138352e3131362e302f32342d3234203d3e20323731353131.roa (raw, json)
Hash identifier:          jhrm3/HpM4xwbjvR2SV2QhHyIGmcDunUkdbkaat3shk=
Subject key identifier:   50:30:83:9A:51:E0:0C:46:33:FC:E8:D7:58:8B:DC:EA:3F:16:C5:48
Certificate issuer:       /CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
Certificate serial:       42F87EE2574F336F2FB38F23D064244BA57B8BE3
Authority key identifier: 5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131362e302f32342d3234203d3e20323731353131.roa
Signing time:             Thu 16 Nov 2023 22:24:00 +0000
ROA not before:           Thu 16 Nov 2023 22:19:00 +0000
ROA not after:            Thu 14 Nov 2024 22:24:00 +0000
asID:                     271511
IP address blocks:        45.185.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f8:7e:e2:57:4f:33:6f:2f:b3:8f:23:d0:64:24:4b:a5:7b:8b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
        Validity
            Not Before: Nov 16 22:19:00 2023 GMT
            Not After : Nov 14 22:24:00 2024 GMT
        Subject: CN=5030839A51E00C4633FCE8D7588BDCEA3F16C548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:96:7c:c8:8a:6c:63:b8:86:7c:79:f3:c6:a7:
                    2d:dc:db:52:7a:17:54:9b:0c:a4:3b:13:3f:99:bd:
                    a0:a1:fd:05:dd:70:1f:36:a8:4b:23:93:62:62:aa:
                    5f:c8:0d:2d:e0:49:d8:c7:13:bb:52:88:8a:d7:02:
                    e0:2d:42:ed:87:c9:11:fa:f9:43:7f:55:26:af:db:
                    29:20:85:fa:ea:d8:b0:f0:2b:8c:8c:d6:70:ec:95:
                    ba:de:2b:44:74:a3:34:a7:67:af:8d:16:00:ee:ab:
                    97:f0:a7:34:fb:8b:c3:c4:5a:ae:8c:36:b2:ce:b0:
                    1f:51:5a:7c:e9:8a:01:40:88:56:a5:a8:1c:a0:c5:
                    f6:f1:4a:cc:2b:60:d0:a7:55:29:b8:c3:33:17:1d:
                    29:12:f2:0f:ff:a2:f7:6f:64:01:8c:27:6b:f3:88:
                    90:3a:c9:1c:77:1d:d9:cb:c1:cb:38:4a:ca:15:6f:
                    c6:cc:a4:d3:9e:36:d7:c0:6e:b7:ed:27:8d:34:06:
                    4f:39:ba:b2:03:48:23:db:f1:3d:e1:0e:83:fb:8c:
                    99:23:f9:70:fc:cf:e9:1e:98:1b:50:44:09:10:46:
                    5c:8e:9d:50:1e:8a:3b:95:b2:f1:2c:69:f3:02:39:
                    b3:ff:5a:3b:ff:3a:00:24:dd:16:d0:fe:6a:39:e4:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:30:83:9A:51:E0:0C:46:33:FC:E8:D7:58:8B:DC:EA:3F:16:C5:48
            X509v3 Authority Key Identifier:
                keyid:5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131362e302f32342d3234203d3e20323731353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ee:09:e3:0a:93:c7:8d:b6:fc:8d:dd:76:28:1d:5d:3e:bd:
         ae:72:c4:af:a5:e8:77:66:77:fb:58:7b:3d:cf:26:8f:07:1a:
         2c:c6:9f:49:cc:40:b0:9f:52:e2:de:c8:00:4a:31:3e:bd:2f:
         31:bd:bb:61:37:00:0f:94:17:78:80:83:66:f4:c2:4e:bc:db:
         a3:2f:0a:d8:ee:b3:ab:84:fd:6e:2b:03:df:e8:a5:93:54:84:
         a0:30:5e:7d:52:7e:16:ec:b7:0e:76:f4:73:5d:1d:d5:c0:89:
         46:04:83:33:bb:8a:1c:14:52:3e:f3:07:85:a3:ae:1c:5c:64:
         ce:15:db:2e:73:3e:b0:68:63:69:e0:c3:db:19:52:2b:08:a6:
         73:50:bb:da:11:67:0d:11:0f:92:ad:f4:17:3c:77:69:14:9f:
         d4:eb:63:36:6b:02:41:3a:03:5f:fb:a5:6f:0c:c1:28:46:76:
         00:ba:2a:ab:82:98:e8:7f:53:25:5e:3b:bc:9c:bb:5d:d6:34:
         69:7f:e3:b1:12:27:a3:0a:3d:0b:b2:f3:92:2f:06:90:ca:31:
         5a:71:6d:54:63:9e:95:da:51:1b:b1:7e:e7:1a:ce:b2:34:e3:
         8f:94:7e:25:6f:69:3d:3f:67:d3:64:b0:de:7d:12:34:e6:d8:
         7f:ae:e5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:47 2025 by rpki-client