Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137362e302f32322d3232203d3e20323636393138.roa
File:                     34352e3232342e3137362e302f32322d3232203d3e20323636393138.roa (raw, json)
Hash identifier:          GVzDeNI1k2x2UtpfGhPKFEkfy8GFXXQx1b+RzP2uJYk=
Subject key identifier:   86:55:24:86:14:32:A4:91:CA:4D:83:6F:79:C7:FE:E9:C5:82:27:EF
Certificate issuer:       /CN=44E04535A0B2769897B15757A3419A5A38572BBA
Certificate serial:       7F15A027914383586074C864459811445F549CBE
Authority key identifier: 44:E0:45:35:A0:B2:76:98:97:B1:57:57:A3:41:9A:5A:38:57:2B:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E04535A0B2769897B15757A3419A5A38572BBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137362e302f32322d3232203d3e20323636393138.roa
Signing time:             Wed 15 Jan 2025 11:59:37 +0000
ROA not before:           Wed 15 Jan 2025 11:54:37 +0000
ROA not after:            Wed 14 Jan 2026 11:59:37 +0000
asID:                     266918
IP address blocks:        45.224.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:15:a0:27:91:43:83:58:60:74:c8:64:45:98:11:44:5f:54:9c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44E04535A0B2769897B15757A3419A5A38572BBA
        Validity
            Not Before: Jan 15 11:54:37 2025 GMT
            Not After : Jan 14 11:59:37 2026 GMT
        Subject: CN=865524861432A491CA4D836F79C7FEE9C58227EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:9b:da:80:37:48:bf:e9:bc:e0:12:cd:33:
                    b8:4b:a3:4f:11:d2:25:59:48:16:19:e0:6c:f7:29:
                    51:cd:85:d3:f5:62:e0:3f:96:f4:f6:69:88:34:7d:
                    79:06:81:54:42:70:db:6c:cb:49:0f:9f:c2:38:11:
                    4f:4c:df:2d:06:5c:af:ea:e3:96:2e:ac:34:4d:54:
                    b1:07:66:69:95:25:85:f5:cd:fd:b2:cd:8e:2a:ce:
                    e7:52:a9:e3:76:ae:e3:5a:4f:35:c9:48:ac:84:15:
                    be:da:fb:54:bd:fa:6b:de:6f:ed:13:72:b4:92:3d:
                    7f:ba:c3:6e:e2:62:1c:b9:c6:cf:8a:f7:1a:67:bd:
                    a1:a4:82:d3:c0:3c:25:79:4e:27:d2:e3:b6:4b:99:
                    4d:d7:48:66:22:f9:37:4c:5d:28:1e:a6:8c:a6:ad:
                    c9:62:ac:28:a9:2d:33:2c:e2:e3:46:94:6a:6c:9f:
                    76:a6:1e:af:d4:1c:71:71:1a:e2:59:35:ce:92:08:
                    35:28:b0:e8:b6:8b:f7:37:33:7d:8f:56:69:42:4e:
                    ac:b8:56:3a:48:ba:82:51:9b:4e:15:64:a3:f7:11:
                    54:74:84:80:74:9c:ff:00:e4:a6:e9:28:01:1a:14:
                    51:77:45:38:93:fa:8e:ba:93:cc:ef:e2:83:1e:45:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:55:24:86:14:32:A4:91:CA:4D:83:6F:79:C7:FE:E9:C5:82:27:EF
            X509v3 Authority Key Identifier:
                keyid:44:E0:45:35:A0:B2:76:98:97:B1:57:57:A3:41:9A:5A:38:57:2B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/44E04535A0B2769897B15757A3419A5A38572BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E04535A0B2769897B15757A3419A5A38572BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137362e302f32322d3232203d3e20323636393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:9d:b8:f6:f7:f0:51:7f:aa:b1:3d:ff:14:54:46:bf:27:
         3f:f0:01:04:a3:71:ac:f4:2d:73:10:b4:ae:56:47:03:bc:19:
         77:e4:18:86:2d:26:19:3c:ea:64:c6:8a:fe:54:f0:a6:a1:9e:
         e6:78:6d:33:be:ef:45:fc:db:29:85:ba:b9:22:b1:84:ff:77:
         52:6f:12:67:4b:e0:2e:d0:92:a4:89:5e:9a:d4:0d:ff:b0:e3:
         2c:de:8a:d9:e1:14:a9:be:38:1c:73:2f:db:21:91:62:a9:f9:
         01:a9:56:2f:a9:af:d7:38:fa:33:79:c3:c4:c6:f6:a7:11:95:
         92:1b:0b:c4:2c:28:37:9f:4d:ff:88:c1:e1:a3:63:92:da:32:
         94:87:b6:70:94:78:8e:95:06:36:15:9d:0c:17:49:0f:17:15:
         43:b0:09:35:3d:a5:80:92:64:b5:89:f1:87:48:a9:cc:55:20:
         aa:f6:12:8f:7a:e7:33:9f:20:61:b2:6d:9c:99:2a:f2:f0:9e:
         2a:f5:5f:23:5d:ee:eb:59:d7:44:aa:ee:b9:d2:a5:5b:59:5b:
         6a:81:49:54:07:79:3a:b5:ce:94:96:ab:7c:dc:a6:9e:45:1c:
         2f:2a:b8:c2:f3:83:c4:2f:67:00:1f:44:da:10:d9:77:70:80:
         85:da:7d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:37:07 2025 by rpki-client