Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235352e302f32342d3234203d3e20323638383437.roa
File:                     34352e3137332e3235352e302f32342d3234203d3e20323638383437.roa (raw, json)
Hash identifier:          hM1ukLz3pbQembEBANtxZBUsyMheNLrDE3THJMnONZU=
Subject key identifier:   3F:0A:87:0F:13:07:9A:ED:34:1F:A9:1A:E7:48:82:B7:4D:5A:17:64
Certificate issuer:       /CN=AB42D964E5098F72C8A0F7319CB3924F4BE2B03A
Certificate serial:       0D31A83FA02D23E16CBBF44A9C1C1EAF40BEA46A
Authority key identifier: AB:42:D9:64:E5:09:8F:72:C8:A0:F7:31:9C:B3:92:4F:4B:E2:B0:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB42D964E5098F72C8A0F7319CB3924F4BE2B03A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235352e302f32342d3234203d3e20323638383437.roa
Signing time:             Tue 19 Jul 2022 18:34:49 +0000
ROA not before:           Tue 19 Jul 2022 18:29:49 +0000
ROA not after:            Tue 18 Jul 2023 18:34:49 +0000
asID:                     268847
IP address blocks:        45.173.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:31:a8:3f:a0:2d:23:e1:6c:bb:f4:4a:9c:1c:1e:af:40:be:a4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB42D964E5098F72C8A0F7319CB3924F4BE2B03A
        Validity
            Not Before: Jul 19 18:29:49 2022 GMT
            Not After : Jul 18 18:34:49 2023 GMT
        Subject: CN=3F0A870F13079AED341FA91AE74882B74D5A1764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:b4:0b:43:37:9e:24:bf:c4:4e:7a:2d:27:
                    b3:b1:11:61:11:00:4e:6c:41:66:d9:34:27:67:a8:
                    8a:32:7c:c5:8e:26:fd:54:73:52:c0:df:23:44:4b:
                    9d:78:bd:71:4f:92:8c:ec:b1:6a:14:e4:57:8d:9c:
                    c2:f6:6a:17:4b:77:95:38:0a:53:0a:67:1e:93:51:
                    1f:78:b1:c9:e4:d9:31:d0:cd:31:e1:11:95:8d:50:
                    41:5a:ed:ed:c6:43:c7:e7:9f:da:a4:5f:f4:c5:ab:
                    5f:fd:3f:1f:59:70:93:e0:60:78:2f:70:c8:77:2e:
                    01:1f:f1:e2:1f:87:3c:31:f0:ff:47:9e:2c:06:bf:
                    30:0e:b7:0d:f9:88:b0:8d:f0:24:7d:f6:e0:9e:a5:
                    14:aa:43:b3:10:b9:6f:14:f4:a3:91:b9:c6:9c:76:
                    7c:87:86:d7:8b:8f:5d:2a:74:1f:43:d5:6b:91:5d:
                    d2:b9:be:84:43:07:e5:f1:a4:ff:34:61:ad:44:3a:
                    ec:66:bb:0e:6c:fe:cc:1b:16:c8:89:10:87:fd:a6:
                    e4:43:db:ce:d1:02:02:26:11:42:91:54:20:38:ba:
                    8f:a9:90:39:04:9c:1e:00:a9:3a:d1:4d:d4:2c:62:
                    be:a2:b4:94:f6:2d:b5:1b:19:97:10:41:8f:a0:9b:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0A:87:0F:13:07:9A:ED:34:1F:A9:1A:E7:48:82:B7:4D:5A:17:64
            X509v3 Authority Key Identifier:
                keyid:AB:42:D9:64:E5:09:8F:72:C8:A0:F7:31:9C:B3:92:4F:4B:E2:B0:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/AB42D964E5098F72C8A0F7319CB3924F4BE2B03A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB42D964E5098F72C8A0F7319CB3924F4BE2B03A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235352e302f32342d3234203d3e20323638383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:f6:27:2b:1a:5a:1b:ff:ad:cb:52:ef:78:1d:28:4a:a7:ab:
         3c:4a:f9:76:22:c2:c7:33:2e:dc:55:ec:77:65:07:3b:10:a4:
         56:24:9c:57:50:4b:0c:7a:4e:b6:49:2c:d3:37:9c:36:da:ce:
         0a:71:85:61:1e:fb:47:8f:9a:49:e8:b5:7f:4c:8d:ae:aa:96:
         55:20:0c:fb:f3:36:08:3e:e3:d7:b1:bb:dd:4e:6d:40:2e:b5:
         b4:e7:59:62:41:a9:dd:f8:21:1d:c3:0c:e2:5c:22:3a:1f:b3:
         cd:b3:f4:28:59:ae:e6:ca:83:e9:1e:c5:c7:d2:c1:ba:1f:dc:
         24:1f:f9:66:39:bd:05:21:bf:e6:d2:f3:ae:66:1a:70:d6:3e:
         41:2b:8a:ba:f8:89:7e:2d:c8:21:9f:a6:d6:5f:f3:7b:90:a5:
         8c:d3:93:58:50:8b:43:e5:aa:bf:91:9c:14:34:c5:54:3e:4e:
         47:86:95:c4:e8:55:bf:26:53:14:39:b0:ec:ac:87:a8:34:c8:
         09:5f:ec:92:34:39:01:a5:8f:23:df:96:ee:58:7b:d1:26:62:
         07:c1:a7:e0:ab:40:10:41:57:c7:0a:ec:56:8e:12:cf:7f:18:
         c1:f8:d8:b2:98:87:d5:7e:bc:03:d9:8a:8a:6e:c4:b7:38:55:
         45:a5:0b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:47 2025 by rpki-client