Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa
File:                     34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa (raw, json)
Hash identifier:          VYOKYWTW4KYHyjWxZPNuftL4qjJ4ZSOyhDAXEVVS9P8=
Subject key identifier:   44:38:B9:00:B2:52:CB:2F:05:06:78:ED:9A:AB:E6:42:A8:E2:48:23
Certificate issuer:       /CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6
Certificate serial:       2A11691095D878F5BDD0991F0DB99EA8CEB43B4E
Authority key identifier: EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa
Signing time:             Tue 11 Feb 2025 17:02:26 +0000
ROA not before:           Tue 11 Feb 2025 16:57:26 +0000
ROA not after:            Tue 10 Feb 2026 17:02:26 +0000
asID:                     269377
IP address blocks:        45.185.136.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:11:69:10:95:d8:78:f5:bd:d0:99:1f:0d:b9:9e:a8:ce:b4:3b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6
        Validity
            Not Before: Feb 11 16:57:26 2025 GMT
            Not After : Feb 10 17:02:26 2026 GMT
        Subject: CN=4438B900B252CB2F050678ED9AABE642A8E24823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:8d:7f:f9:ae:f6:34:44:f3:2b:cf:50:af:
                    23:6a:13:ee:e5:ad:dc:eb:0e:4a:84:10:0b:de:66:
                    f4:db:d3:20:1d:2f:90:37:c4:2e:84:2a:cf:d9:9c:
                    1e:35:7b:3b:b7:ae:38:f2:da:ec:f4:a6:bd:c5:e4:
                    11:c1:56:4e:66:8a:11:2c:5f:e4:96:28:6f:57:92:
                    e9:38:12:2c:29:f7:52:51:11:69:1c:39:b3:f6:b7:
                    97:fa:2a:d1:b7:e6:9a:8d:03:0a:5c:9a:90:a4:5a:
                    f1:bb:1b:36:53:f9:b5:b5:91:98:31:d4:74:ab:a7:
                    a1:f1:44:8c:db:cc:7d:d6:eb:d0:0a:0b:cc:f7:13:
                    27:83:46:ee:11:f7:a7:f1:b8:89:b4:0d:3f:62:ef:
                    68:5e:5f:b5:bc:8f:98:27:06:46:0d:2f:8c:5a:b1:
                    60:cf:08:6c:7e:68:ae:7f:46:70:a6:6b:f7:f5:ba:
                    db:d8:2a:bd:42:b3:03:0d:c7:18:c2:96:8a:99:13:
                    45:35:6c:a5:a4:a8:c3:ed:27:62:ee:4d:4f:d0:8f:
                    cb:40:1e:75:10:f6:1d:4a:65:ae:72:98:18:f4:13:
                    1c:a2:35:e6:f5:4b:fc:7d:58:2c:6e:c1:03:f3:31:
                    a1:36:54:04:ab:e4:38:e5:16:96:33:ce:b0:f9:ed:
                    21:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:38:B9:00:B2:52:CB:2F:05:06:78:ED:9A:AB:E6:42:A8:E2:48:23
            X509v3 Authority Key Identifier:
                keyid:EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:c6:f7:26:dd:bb:bb:fe:5a:e0:9b:2c:a3:4c:93:5d:cb:c3:
         1c:87:69:46:68:ff:9e:2e:81:49:ef:8d:15:cc:48:e6:de:39:
         06:48:13:df:64:8c:18:1c:82:28:73:2b:5d:09:9e:9e:9e:7d:
         ff:c4:4d:84:49:1e:87:e6:03:e3:52:9e:d6:08:6e:17:7c:9f:
         c8:46:c5:af:9a:39:68:ad:1e:68:93:03:f6:a2:fc:f1:0c:44:
         01:a8:12:bd:e6:51:24:4a:96:8a:ec:5d:7e:d7:96:a4:a1:0b:
         c2:9b:21:2e:3c:59:4a:26:17:12:a7:fc:d9:62:dc:20:6c:7c:
         80:10:4b:ec:ac:40:ff:1c:a8:5b:7c:33:8a:d8:63:8b:83:f9:
         b4:28:b5:e0:ca:fe:50:50:f8:34:f5:c6:27:23:21:95:bf:63:
         71:c7:cd:db:fd:37:14:6e:55:3b:9a:f6:57:83:4b:20:85:3e:
         68:78:62:cd:bc:b5:46:33:cb:24:19:94:5f:88:e1:43:c5:1c:
         f3:28:19:27:58:a8:ed:0f:40:42:a8:d8:f1:08:d2:c4:b9:51:
         ca:90:c5:88:f5:e9:d3:9a:c9:1a:77:06:d5:4b:69:2f:7e:c2:
         5a:79:e0:a5:42:ae:2d:4f:80:50:c9:a1:0f:aa:db:c8:86:34:
         1d:61:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:47 2025 by rpki-client