Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32322d3234203d3e20323636323332.roa
File:                     34352e362e3138302e302f32322d3234203d3e20323636323332.roa (raw, json)
Hash identifier:          FdSYwu0mXjeuOWyr4nXdoHTiiXohUi6dC+6IA4obYQw=
Subject key identifier:   C6:8F:0D:89:1E:86:6A:D5:0D:94:AE:12:61:E5:91:AF:78:AB:DB:1D
Certificate issuer:       /CN=DEC7D95EABAC6E27B59D47C1F7198CE2294C1289
Certificate serial:       180C8A89D291F67E5EC0F0508A7AAF38B046DC1A
Authority key identifier: DE:C7:D9:5E:AB:AC:6E:27:B5:9D:47:C1:F7:19:8C:E2:29:4C:12:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEC7D95EABAC6E27B59D47C1F7198CE2294C1289.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32322d3234203d3e20323636323332.roa
Signing time:             Fri 10 Jun 2022 18:11:44 +0000
ROA not before:           Fri 10 Jun 2022 18:06:44 +0000
ROA not after:            Fri 09 Jun 2023 18:11:44 +0000
asID:                     266232
IP address blocks:        45.6.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0c:8a:89:d2:91:f6:7e:5e:c0:f0:50:8a:7a:af:38:b0:46:dc:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEC7D95EABAC6E27B59D47C1F7198CE2294C1289
        Validity
            Not Before: Jun 10 18:06:44 2022 GMT
            Not After : Jun  9 18:11:44 2023 GMT
        Subject: CN=C68F0D891E866AD50D94AE1261E591AF78ABDB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:de:2f:12:47:7d:b4:c9:85:2a:d0:cd:eb:
                    a4:8c:d5:b4:38:cb:f3:24:8c:9b:70:06:c4:24:7d:
                    58:0a:76:a1:11:af:27:a2:ce:c1:e0:cc:5b:dc:e5:
                    0a:96:02:95:a4:8b:ea:7d:47:6b:01:4d:79:04:66:
                    89:19:42:7a:b7:a4:a1:bd:11:ea:61:27:9f:6b:75:
                    d5:6b:9f:8d:94:a7:aa:6f:84:3d:38:a1:0c:c1:d8:
                    ac:8c:16:08:b2:f0:8f:73:db:43:49:6b:d1:e0:fb:
                    f1:15:b6:81:7d:93:83:64:b1:da:58:21:b6:63:51:
                    f3:3c:a0:74:f4:18:fe:bf:6c:49:d9:a7:fe:25:61:
                    71:d2:95:e9:41:39:10:92:73:6e:24:3a:7a:cb:00:
                    c1:1b:94:6e:f8:d4:a6:a8:cc:9d:f3:d3:99:0b:0c:
                    33:6d:1b:4c:22:35:21:af:4c:0a:5e:66:13:6a:25:
                    41:1e:3e:70:da:1b:51:4d:59:0f:d8:cb:5c:2d:3d:
                    35:a4:d8:2c:a0:10:80:a2:f8:af:40:4e:41:06:32:
                    c3:9c:c5:16:02:af:4c:b9:2e:8c:2a:3b:8e:75:70:
                    a8:54:84:e3:ea:8d:a3:17:56:0c:3d:6e:50:88:9d:
                    60:ff:68:bd:5d:49:a8:84:e1:7e:27:1e:73:7d:e6:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8F:0D:89:1E:86:6A:D5:0D:94:AE:12:61:E5:91:AF:78:AB:DB:1D
            X509v3 Authority Key Identifier:
                keyid:DE:C7:D9:5E:AB:AC:6E:27:B5:9D:47:C1:F7:19:8C:E2:29:4C:12:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/DEC7D95EABAC6E27B59D47C1F7198CE2294C1289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEC7D95EABAC6E27B59D47C1F7198CE2294C1289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32322d3234203d3e20323636323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:f2:f0:1f:9d:6a:e5:55:0a:bb:cb:86:67:28:cc:25:dc:
         d4:d4:bd:35:39:00:2a:a9:5e:f5:c6:31:cb:d7:91:e1:f8:89:
         9e:d7:c6:72:5d:ad:dd:d9:05:e1:d5:c8:dd:09:42:f5:19:18:
         29:1e:ba:64:0b:8b:d7:d6:26:eb:4e:38:7d:a8:be:30:70:49:
         b7:45:d7:c2:a3:72:56:e7:1b:ea:8d:75:b3:6f:08:96:8b:3d:
         fb:25:36:08:8c:87:8f:ed:e5:1f:a1:9b:3f:2f:e5:39:c2:10:
         0f:e1:ef:87:c0:da:ae:bb:52:88:21:19:37:ae:d7:22:38:09:
         a8:97:8c:dc:cd:1a:1f:99:5d:61:a5:ff:06:62:a5:38:10:95:
         dd:ae:a2:ce:94:14:eb:02:8b:e5:b1:f2:a8:81:f6:ba:2b:4c:
         16:0c:63:e5:ba:37:56:90:04:41:0b:61:81:d6:6b:65:1a:4f:
         a0:2f:c9:08:97:9c:0e:1d:55:dc:cb:4a:78:ea:91:c3:82:2e:
         80:17:bb:18:8d:09:79:5a:65:df:3a:b3:93:55:ec:a2:4d:01:
         09:7d:2e:a7:9a:67:b5:2e:c5:3a:1a:e3:66:cf:85:1d:70:97:
         dd:23:34:22:58:41:58:58:c4:2e:10:ed:51:5e:0b:36:c8:cb:
         01:0a:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:52 2025 by rpki-client