Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/34352e342e36342e302f32342d3234203d3e203533303539.roa
File:                     34352e342e36342e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          9MwHE+GwHE5kNU+CgoVHYqLydriDIOGJG/zHadG+zmQ=
Subject key identifier:   A0:C8:5E:6F:F8:68:04:DD:7D:B5:D1:02:94:CE:78:41:EB:7A:01:A9
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       644975387FBB8905187D36D3465FE99327021C46
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/34352e342e36342e302f32342d3234203d3e203533303539.roa
Signing time:             Tue 13 Sep 2022 09:05:27 +0000
ROA not before:           Tue 13 Sep 2022 09:00:27 +0000
ROA not after:            Tue 12 Sep 2023 09:05:27 +0000
asID:                     53059
IP address blocks:        45.4.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:49:75:38:7f:bb:89:05:18:7d:36:d3:46:5f:e9:93:27:02:1c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Sep 13 09:00:27 2022 GMT
            Not After : Sep 12 09:05:27 2023 GMT
        Subject: CN=A0C85E6FF86804DD7DB5D10294CE7841EB7A01A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:c0:ff:1c:c2:39:ea:86:fe:69:45:99:b6:
                    88:05:ea:7a:0a:b4:78:9c:71:e3:9b:7b:88:41:87:
                    96:f8:10:d7:4c:70:5e:13:03:32:7d:ab:ce:1d:8e:
                    12:52:f5:f8:fe:50:c5:eb:53:2c:c2:3f:fc:4f:85:
                    26:1f:18:bc:10:b0:58:57:58:17:75:0c:52:3e:0a:
                    fe:82:a3:28:ad:c0:f0:65:21:60:e5:4a:01:ed:56:
                    a3:27:30:17:64:80:77:9b:6e:67:39:cc:9e:a1:dd:
                    20:14:e8:fc:e0:69:a9:eb:f8:1a:62:61:a6:7a:3c:
                    40:aa:a8:c3:38:15:6f:26:50:15:66:00:2b:45:0d:
                    fd:0e:70:7c:da:b8:b9:fa:51:a6:fd:a4:0b:e2:59:
                    33:ae:1f:d8:e8:dd:b0:a5:77:6a:7d:b9:1a:04:7a:
                    7e:15:28:6d:02:72:f2:59:49:01:96:1e:38:be:62:
                    de:58:51:f3:11:d3:e4:05:a2:9e:76:db:a8:63:0e:
                    03:40:1a:96:93:f4:a9:eb:2c:26:a3:30:0f:e4:18:
                    39:c2:1a:9d:fc:2e:b3:b1:70:04:6f:db:6e:8c:a7:
                    79:2f:95:88:a5:e6:2e:9d:c5:6d:12:c9:96:f8:8c:
                    8e:78:89:1b:24:52:59:41:a1:70:ed:dd:b5:ba:2e:
                    23:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:5E:6F:F8:68:04:DD:7D:B5:D1:02:94:CE:78:41:EB:7A:01:A9
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/34352e342e36342e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:0c:b2:72:9e:c7:b8:4c:b4:35:e4:ea:37:eb:2f:75:bd:e8:
         15:f7:32:7a:c4:b7:43:d3:ad:77:7e:62:3c:47:e0:c5:98:ed:
         5d:a2:48:b5:58:f8:a9:77:ba:08:e2:8f:52:5b:c9:e8:bd:21:
         8d:31:e4:b1:b4:69:37:51:ea:70:66:1d:9c:a2:07:34:31:fd:
         2e:bb:1d:e1:0d:e0:76:6c:ea:c3:77:ea:93:39:51:03:3b:2a:
         01:46:55:27:dc:0b:77:de:9b:2a:70:8b:65:90:c5:02:1e:bf:
         17:40:f9:b9:3f:1c:1f:0d:b9:ba:a1:5a:09:05:a1:5f:e6:4e:
         03:fa:27:8f:66:c0:6f:e4:78:f5:03:bf:fd:82:fe:13:53:54:
         57:7d:18:ea:ed:f8:5b:92:68:12:20:0a:26:85:08:32:72:51:
         b7:d9:d2:83:e5:89:41:9d:d2:14:34:a9:6b:e4:a9:bb:5b:8f:
         e2:15:5d:d3:11:f7:6b:25:69:40:63:cf:8f:c5:ad:68:a0:ae:
         b9:70:76:38:df:56:58:46:5c:d1:d8:6a:d2:80:a5:ba:50:ce:
         84:04:0c:86:61:74:bb:aa:42:9b:7e:e1:ae:ce:48:6c:93:2c:
         00:52:1b:2b:f7:89:e0:f6:1b:7c:1e:ef:1c:bd:8d:fd:c7:b3:
         99:a4:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:13 2025 by rpki-client