Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138312e302f32342d3234203d3e20323636323332.roa
File:                     34352e362e3138312e302f32342d3234203d3e20323636323332.roa (raw, json)
Hash identifier:          NYR2noBL3QiZACymot3IJpbxM3q9bduXpyVE5k9wljM=
Subject key identifier:   A4:9E:8E:CC:52:18:9D:1B:3D:E6:6A:16:0A:5F:BA:23:DA:95:22:0B
Certificate issuer:       /CN=E850C4DA829AA4AD90F631DEF784C6044D89B7B6
Certificate serial:       30ECFC500267911BA6BAD3F20FAF3ED64F68A8D9
Authority key identifier: E8:50:C4:DA:82:9A:A4:AD:90:F6:31:DE:F7:84:C6:04:4D:89:B7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138312e302f32342d3234203d3e20323636323332.roa
Signing time:             Fri 06 Sep 2024 14:17:13 +0000
ROA not before:           Fri 06 Sep 2024 14:12:13 +0000
ROA not after:            Fri 05 Sep 2025 14:17:13 +0000
asID:                     266232
IP address blocks:        45.6.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ec:fc:50:02:67:91:1b:a6:ba:d3:f2:0f:af:3e:d6:4f:68:a8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E850C4DA829AA4AD90F631DEF784C6044D89B7B6
        Validity
            Not Before: Sep  6 14:12:13 2024 GMT
            Not After : Sep  5 14:17:13 2025 GMT
        Subject: CN=A49E8ECC52189D1B3DE66A160A5FBA23DA95220B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:97:3a:f3:2f:c3:9d:cf:e8:5f:10:63:f2:
                    57:a2:db:48:89:8a:be:8f:de:a3:11:d5:7a:27:54:
                    6a:61:98:e6:29:b1:9f:2e:0b:73:6a:ef:a1:08:b1:
                    ed:95:58:1f:56:dc:7f:b3:5f:13:f5:8e:1d:40:59:
                    01:02:c6:7a:7c:f6:19:3a:39:65:db:47:0d:9e:7d:
                    fe:20:7d:c8:0b:bb:2a:ec:92:93:0a:ad:be:41:51:
                    a7:5b:b2:32:02:f7:ce:d4:b8:56:9c:35:03:ab:a8:
                    d4:1c:48:33:8d:ac:da:1e:18:62:de:18:81:bf:78:
                    11:0c:07:96:8e:e4:9a:8d:3e:de:53:94:6d:9c:0a:
                    28:c3:4a:4c:4c:f4:f6:7d:a2:61:72:af:36:c8:03:
                    5a:c3:5c:02:3d:7d:69:39:61:68:35:82:73:b8:fd:
                    c4:17:6c:4c:81:71:00:e5:44:d9:8e:72:1f:ca:d9:
                    99:c5:8b:3c:d4:eb:7a:ac:88:15:57:99:6b:b7:2e:
                    6c:64:fe:aa:ba:e6:b3:e1:79:f0:72:88:93:1f:64:
                    f5:36:0a:54:66:26:04:41:dc:4f:00:90:ab:fe:2f:
                    4e:1b:fc:14:91:66:49:b6:21:4f:01:18:08:63:6a:
                    f1:c7:b6:21:15:51:5d:96:37:3f:29:02:3c:a5:06:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9E:8E:CC:52:18:9D:1B:3D:E6:6A:16:0A:5F:BA:23:DA:95:22:0B
            X509v3 Authority Key Identifier:
                keyid:E8:50:C4:DA:82:9A:A4:AD:90:F6:31:DE:F7:84:C6:04:4D:89:B7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138312e302f32342d3234203d3e20323636323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:f1:58:55:64:de:a0:0e:21:6d:a6:ec:94:13:70:46:00:60:
         ab:fd:40:53:3f:ed:a1:ac:b6:10:2b:29:dd:d3:43:03:e4:d7:
         e9:86:ce:b5:44:a6:6d:f4:31:1c:ee:6d:b0:46:2c:31:ee:48:
         6a:1c:11:17:c1:b5:07:be:61:d9:4e:4e:3f:2f:4f:4d:01:bb:
         b3:68:df:a0:1e:8a:e6:89:29:af:50:7c:0a:56:f5:10:34:6e:
         82:be:8a:1c:c2:cd:a7:82:be:43:1d:63:a2:97:22:46:8e:27:
         b4:12:03:31:d3:fd:5f:55:75:2e:5f:c8:73:f3:25:d3:2e:f6:
         f7:bd:40:00:35:e9:94:51:3f:c3:ed:de:3c:01:46:45:2c:1c:
         7e:46:c0:02:aa:5f:46:c3:6e:83:7b:b7:52:5d:1b:35:cd:93:
         9c:87:69:6b:fb:d7:63:c7:06:bd:4b:8a:e4:9d:44:e6:d0:fa:
         70:ed:a2:b8:32:c6:66:2d:a1:b9:1b:03:d6:72:da:fa:73:96:
         8f:25:f3:f9:c7:cd:57:d7:7d:b8:57:c1:08:25:1f:1f:0e:c1:
         83:52:cb:be:42:11:48:02:d9:92:79:f4:22:8a:a5:e2:48:ae:
         9e:1c:36:a4:dd:29:e5:e5:88:e8:7c:7f:f4:14:fa:91:42:2e:
         94:33:d7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:04:06 2025 by rpki-client