Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32342d3234203d3e20323733333039.roa
File:                     34352e3232372e38342e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          vugNYjOm1Ae4G0jqS6VsORyinkXUc/CmbJpetdA7dYM=
Subject key identifier:   A2:77:A5:7A:06:80:82:41:17:DA:84:83:66:5F:6C:D5:A4:E6:AC:B3
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       5212D343F3038FDDC05029009910503B54179B55
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 22 Jan 2025 18:51:55 +0000
ROA not before:           Wed 22 Jan 2025 18:46:55 +0000
ROA not after:            Wed 21 Jan 2026 18:51:55 +0000
asID:                     273309
IP address blocks:        45.227.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:12:d3:43:f3:03:8f:dd:c0:50:29:00:99:10:50:3b:54:17:9b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Jan 22 18:46:55 2025 GMT
            Not After : Jan 21 18:51:55 2026 GMT
        Subject: CN=A277A57A0680824117DA8483665F6CD5A4E6ACB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:5a:6b:8c:03:69:7e:02:f1:23:22:94:ef:
                    06:d4:6f:45:4e:9c:96:7f:6d:65:72:d3:c7:c7:e6:
                    30:f1:66:d8:d6:33:e0:84:2d:e7:e6:03:c8:5f:45:
                    dc:d5:52:b2:86:2c:02:16:6e:11:e3:ef:c4:df:73:
                    3b:3b:eb:0b:4d:26:8f:a9:8f:68:07:74:5c:4e:1f:
                    38:a7:9f:66:f6:bd:d4:f1:69:e4:48:e2:48:23:34:
                    a3:c9:4e:b4:1b:85:a8:40:0b:1c:c3:b1:b7:07:ea:
                    bb:69:dd:5d:62:60:c3:5e:ff:2d:cb:a0:cf:c0:4d:
                    6e:3f:96:e2:ff:fe:97:a6:20:88:0c:7f:48:4b:ec:
                    ff:2f:fa:27:c8:3a:b2:78:e3:e8:29:fb:ea:64:e9:
                    86:19:75:eb:3b:fe:5e:6f:74:ac:5d:bf:9d:09:61:
                    8c:e5:88:2d:47:51:3a:3b:28:e7:f2:65:5e:b5:ca:
                    b1:8f:e6:73:af:a8:94:ac:63:c0:41:7c:a0:03:27:
                    38:c4:1a:e9:94:ce:53:7a:74:1f:7d:b8:d2:60:f6:
                    00:0d:24:24:05:3e:1a:e6:9a:8b:5d:b7:fc:72:94:
                    32:95:4c:7a:84:89:85:60:6e:08:d0:97:97:be:82:
                    88:23:42:9f:67:17:e2:fa:71:e6:d7:a8:07:88:92:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:77:A5:7A:06:80:82:41:17:DA:84:83:66:5F:6C:D5:A4:E6:AC:B3
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/34352e3232372e38342e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:bb:df:b8:43:c6:07:b1:0a:2a:4a:68:68:4e:fc:7f:6e:
         86:29:45:af:8e:f6:fe:10:ce:6c:93:09:5b:95:00:3d:b9:b6:
         34:7a:b8:85:c6:4e:49:48:20:b7:ab:fd:7d:8b:a1:d7:2f:4f:
         9d:20:c4:ff:ac:7e:a0:86:44:06:7c:24:be:1b:04:91:37:e5:
         4d:6e:60:5d:1c:60:cd:8b:a7:96:33:33:d4:91:f5:7d:63:0a:
         b4:91:72:00:04:b0:92:84:72:e7:fd:cb:72:7d:03:06:e3:0a:
         4b:f2:e6:27:cb:a0:be:ca:55:6e:07:4d:70:eb:7d:ff:d5:01:
         a8:89:02:aa:c1:2d:dd:dd:fa:21:13:ef:74:dd:2b:11:94:80:
         7b:86:64:95:ae:15:9e:18:6a:a4:68:ad:e8:e0:13:38:ae:eb:
         34:c2:74:13:cb:6f:b4:75:43:ca:3b:6b:5a:64:07:76:09:5a:
         fa:6e:ed:77:9a:26:e9:ee:d3:bb:1f:7c:67:25:25:ec:fe:99:
         4b:c6:18:43:87:ef:97:ab:c1:cf:f9:fe:f7:dd:5a:bc:b2:83:
         32:54:b7:30:c4:b9:e6:5e:87:f1:81:2f:8a:1c:5f:4a:3d:f7:
         f5:d1:3a:0d:a7:1e:3a:23:1c:16:d1:dc:14:90:42:89:53:4a:
         b6:cf:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:29 2025 by rpki-client