Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/34352e3138372e3139362e302f32322d3234203d3e20323639353536.roa
File:                     34352e3138372e3139362e302f32322d3234203d3e20323639353536.roa (raw, json)
Hash identifier:          v0S9iXU7msL0JgME1jHZvEmG1xkJeRD3OgxKYClLOZw=
Subject key identifier:   0B:04:4B:73:EA:C7:18:BB:74:A9:BD:EE:5B:79:7E:7F:D6:25:89:94
Certificate issuer:       /CN=FA4B516160EDFD77769FEBDC569D37C3D8828626
Certificate serial:       6E3D60D78D57513004C3C1F447738944A161E7F5
Authority key identifier: FA:4B:51:61:60:ED:FD:77:76:9F:EB:DC:56:9D:37:C3:D8:82:86:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/34352e3138372e3139362e302f32322d3234203d3e20323639353536.roa
Signing time:             Fri 17 Nov 2023 18:15:02 +0000
ROA not before:           Fri 17 Nov 2023 18:10:02 +0000
ROA not after:            Fri 15 Nov 2024 18:15:02 +0000
asID:                     269556
IP address blocks:        45.187.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3d:60:d7:8d:57:51:30:04:c3:c1:f4:47:73:89:44:a1:61:e7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA4B516160EDFD77769FEBDC569D37C3D8828626
        Validity
            Not Before: Nov 17 18:10:02 2023 GMT
            Not After : Nov 15 18:15:02 2024 GMT
        Subject: CN=0B044B73EAC718BB74A9BDEE5B797E7FD6258994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:04:6c:31:e9:d6:89:21:8f:9e:22:fd:85:
                    8e:76:76:7d:f5:45:ad:c8:e4:69:30:86:6e:fb:ed:
                    6c:41:e1:b3:ee:2f:0c:8e:6e:b6:df:98:02:78:dc:
                    96:46:02:2f:e0:d7:04:52:1c:c2:55:7e:d7:1a:57:
                    3a:d5:62:75:9c:e2:f2:17:0e:ac:aa:3d:55:04:05:
                    88:ee:56:47:e7:15:cc:07:bc:2b:45:26:ac:3f:3b:
                    f5:53:09:2f:c6:1b:e2:fd:17:bb:e9:22:cf:05:a9:
                    fc:fa:e3:bb:4e:24:dc:8e:8e:be:de:a9:bf:18:ab:
                    d7:dc:79:40:8d:6a:db:34:b0:71:2e:e4:48:e6:40:
                    11:34:46:2d:4a:3a:20:82:f9:56:10:f0:64:b0:0f:
                    77:d8:05:88:48:25:31:b3:cc:b6:04:8e:f8:2c:7e:
                    9f:30:f9:c0:a1:d1:6e:95:d0:aa:d4:d6:28:41:bb:
                    e0:30:fa:fa:bf:56:00:71:94:75:17:36:2a:e0:96:
                    f9:e8:fa:00:ed:10:ac:81:79:df:0a:29:7e:23:24:
                    32:e6:19:fa:04:61:ee:dc:d7:d2:16:43:57:a7:5f:
                    a7:2b:8e:27:de:9a:b8:4d:f7:80:04:bc:72:e1:01:
                    d0:38:3d:b7:47:9c:8a:db:94:c8:79:de:8c:2b:83:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:04:4B:73:EA:C7:18:BB:74:A9:BD:EE:5B:79:7E:7F:D6:25:89:94
            X509v3 Authority Key Identifier:
                keyid:FA:4B:51:61:60:ED:FD:77:76:9F:EB:DC:56:9D:37:C3:D8:82:86:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA4B516160EDFD77769FEBDC569D37C3D8828626.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/34352e3138372e3139362e302f32322d3234203d3e20323639353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:c7:db:7a:1d:af:78:8d:6e:ec:c3:f4:82:af:c9:11:c0:8c:
         d0:e7:0a:57:76:dc:40:27:7a:56:83:05:76:44:dd:48:5d:8e:
         cb:43:e1:6d:b3:9e:fc:d6:30:83:38:35:86:09:45:52:aa:4f:
         83:a5:0a:94:69:0d:8f:50:ea:c8:14:13:90:17:f3:6d:c5:22:
         7b:1d:b2:a2:5c:94:5a:aa:ca:bf:29:e5:85:fc:91:58:1b:ef:
         6b:bd:b8:00:34:ac:d5:ec:8c:a8:e8:a7:f3:c9:94:1f:b2:76:
         2a:e0:82:20:0a:1c:13:d2:6d:86:a3:08:5c:b9:14:59:b7:0f:
         df:9e:82:50:c9:05:e3:02:b3:e9:07:f9:56:9a:08:cb:64:2b:
         65:41:a3:14:a0:da:67:14:50:3c:f1:33:b3:80:1d:fa:ca:96:
         b7:b1:4b:fc:1c:8a:a5:a5:bb:48:60:d9:07:28:ec:4a:99:2d:
         32:a6:a3:1b:43:ae:92:69:58:67:b1:27:68:79:94:aa:a6:4f:
         cc:db:c5:84:e5:cc:ef:e3:68:9a:0a:44:72:65:41:8d:a5:ae:
         0a:ad:33:2b:38:be:3c:fd:e8:e3:87:4a:bc:bf:79:bd:02:ff:
         53:11:d2:91:4f:7b:90:ec:8b:f0:aa:66:13:7c:13:3e:8a:95:
         69:53:87:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:00 2025 by rpki-client