Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa
File:                     34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa (raw, json)
Hash identifier:          tGfPDEIgUBV2q7+gZyxLsHeW2cwX7Fi0aP1BETqnpMI=
Subject key identifier:   58:0B:95:10:7E:B8:44:0E:A7:F3:33:EF:E6:E7:FA:18:47:19:B4:7B
Certificate issuer:       /CN=05D1E73FF1B023D43F8C09ED71815BC2F6620D99
Certificate serial:       515C62BC066A1FA04A3C083F6F8EEB043F229132
Authority key identifier: 05:D1:E7:3F:F1:B0:23:D4:3F:8C:09:ED:71:81:5B:C2:F6:62:0D:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa
Signing time:             Thu 06 Mar 2025 18:22:11 +0000
ROA not before:           Thu 06 Mar 2025 18:17:11 +0000
ROA not after:            Thu 05 Mar 2026 18:22:11 +0000
asID:                     268464
IP address blocks:        45.161.120.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5c:62:bc:06:6a:1f:a0:4a:3c:08:3f:6f:8e:eb:04:3f:22:91:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05D1E73FF1B023D43F8C09ED71815BC2F6620D99
        Validity
            Not Before: Mar  6 18:17:11 2025 GMT
            Not After : Mar  5 18:22:11 2026 GMT
        Subject: CN=580B95107EB8440EA7F333EFE6E7FA184719B47B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:0e:29:79:b7:2b:03:d1:db:d1:d1:69:37:
                    00:da:2f:8e:97:9e:15:7b:b9:36:31:24:77:51:04:
                    98:ac:69:29:68:d7:2f:c4:a9:e9:2b:98:ec:06:cb:
                    33:e6:77:f8:20:c7:72:e8:a7:4c:f2:82:1b:c7:d8:
                    2e:b7:ab:42:25:1d:73:e6:0b:bc:ca:3c:c9:5e:11:
                    67:3d:31:df:85:6e:ec:43:ff:45:e0:af:30:8a:71:
                    45:60:58:d4:03:e2:fc:db:32:9a:78:46:e1:1f:84:
                    cf:a0:95:b7:49:19:2b:e1:34:7f:d2:33:ef:52:f1:
                    e6:31:01:0a:0c:28:b1:e0:12:3d:03:40:17:64:95:
                    df:00:c7:95:b2:56:7e:1f:6e:c9:01:6f:56:61:43:
                    f1:de:8d:fd:03:16:72:f4:45:b1:f6:ef:15:e9:ea:
                    3d:6c:ee:4b:bf:ba:c6:63:87:37:07:5c:e2:08:2c:
                    64:40:78:e4:02:bf:d0:bc:e8:2e:4c:0b:22:8b:81:
                    9a:f4:1f:f2:ff:26:b2:e6:5b:ba:07:91:dd:5b:61:
                    64:a2:f8:f5:8b:3d:1e:0f:49:b0:f2:fb:52:23:97:
                    f2:c3:e8:b0:f9:92:3c:67:6e:e8:e0:17:f7:8b:60:
                    04:aa:48:57:20:5b:5a:04:96:68:b9:00:4d:f9:e2:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0B:95:10:7E:B8:44:0E:A7:F3:33:EF:E6:E7:FA:18:47:19:B4:7B
            X509v3 Authority Key Identifier:
                keyid:05:D1:E7:3F:F1:B0:23:D4:3F:8C:09:ED:71:81:5B:C2:F6:62:0D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05D1E73FF1B023D43F8C09ED71815BC2F6620D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/1/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:82:f7:81:53:02:82:bf:e2:ea:b7:95:98:f4:e4:87:b1:d1:
         d3:98:1b:0f:c1:be:b9:0d:09:ca:af:d4:32:8c:fa:ad:eb:41:
         c1:32:43:35:a6:45:d2:66:77:1b:c1:73:af:b6:2d:c9:f6:e6:
         da:52:52:6c:36:ea:03:4b:d9:43:81:64:8a:87:f6:24:ff:94:
         87:5a:64:48:b5:b7:c4:23:6d:aa:86:02:8a:55:f5:65:b0:fa:
         41:02:39:73:03:29:25:3e:0a:5e:e0:58:fc:b1:fa:20:9a:d1:
         5d:59:d3:b5:29:b5:a6:66:c0:bd:9c:f8:0d:a5:f5:a2:d3:86:
         54:3a:3d:04:7f:0c:d8:a6:1e:04:0c:e2:c3:83:42:e0:b0:82:
         09:ad:5f:71:fb:54:99:92:f8:9b:4d:a5:db:b1:95:f8:56:35:
         32:57:8b:4e:92:a5:b2:b8:dd:e3:dc:12:c6:a0:0b:41:84:fa:
         8d:3a:36:a0:d8:4f:eb:33:90:8a:d7:9f:e3:cf:22:3f:bc:73:
         c5:f9:1d:b7:10:73:47:f4:a8:d1:33:61:d3:1e:2d:a4:f9:ff:
         d5:9d:45:c8:20:bb:71:c8:ea:a0:40:2e:70:fb:05:04:9e:de:
         68:e7:09:75:e5:be:a2:8c:91:15:3f:90:13:14:9e:d9:55:ff:
         5f:78:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:52 2025 by rpki-client