Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31362e302f32342d3234203d3e20323636393230.roa
File:                     34352e3232352e31362e302f32342d3234203d3e20323636393230.roa (raw, json)
Hash identifier:          1/9ewMFL4WzjC1rjlW+DCV+XVJVaBCqcZXAadI2GTUw=
Subject key identifier:   32:3E:7A:56:52:B7:86:2C:1E:85:4D:AB:50:A9:DC:44:B6:46:1E:46
Certificate issuer:       /CN=F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5
Certificate serial:       46971A864005C8A2D53ABB8DF269B432A81F360F
Authority key identifier: F6:C8:14:5E:EF:98:61:91:6E:BD:BF:83:7D:B6:A8:A7:78:8E:7F:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31362e302f32342d3234203d3e20323636393230.roa
Signing time:             Mon 04 Mar 2024 21:35:42 +0000
ROA not before:           Mon 04 Mar 2024 21:30:42 +0000
ROA not after:            Mon 03 Mar 2025 21:35:42 +0000
asID:                     266920
IP address blocks:        45.225.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:97:1a:86:40:05:c8:a2:d5:3a:bb:8d:f2:69:b4:32:a8:1f:36:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5
        Validity
            Not Before: Mar  4 21:30:42 2024 GMT
            Not After : Mar  3 21:35:42 2025 GMT
        Subject: CN=323E7A5652B7862C1E854DAB50A9DC44B6461E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:3d:73:c7:b9:dc:42:42:44:06:4e:93:9d:
                    b3:d0:41:e4:af:aa:c8:9a:75:a1:92:a6:81:b5:cf:
                    ae:90:16:60:ca:9f:eb:f0:6e:20:66:67:8d:a2:ae:
                    9a:be:1d:cd:bf:2a:81:4b:e5:0f:f3:35:0f:91:20:
                    c7:43:60:e8:3d:3b:78:51:9a:5b:29:1f:21:79:d1:
                    1c:36:2e:15:12:14:a3:c5:7d:4f:31:50:12:ba:84:
                    ca:71:ef:b9:83:8f:8b:71:ae:cd:8a:ef:f9:bc:54:
                    44:65:c4:76:46:65:41:56:ab:3b:35:ee:e3:a0:c1:
                    14:b4:01:a9:0e:43:63:00:d6:fe:73:ec:d1:f3:f3:
                    c5:08:92:1f:f5:0c:2a:54:27:1e:dd:0a:1b:fa:0a:
                    d7:84:e2:a7:b6:e6:20:f1:86:2a:0f:bc:05:6a:b5:
                    ce:92:dc:27:1f:77:2c:d6:d9:ea:c1:8c:74:72:8a:
                    fc:ee:cd:7b:72:f6:fa:84:cc:1c:90:cd:4b:07:72:
                    df:83:c0:7d:1a:36:0d:6a:91:3d:55:3e:79:b1:11:
                    c8:f8:a1:65:ad:12:c4:5e:1d:48:11:8c:e7:e8:4a:
                    54:60:94:e5:34:7a:24:da:86:a4:ea:8a:f4:8a:43:
                    93:9f:00:a3:60:38:30:3d:a9:8f:96:bf:21:95:3a:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3E:7A:56:52:B7:86:2C:1E:85:4D:AB:50:A9:DC:44:B6:46:1E:46
            X509v3 Authority Key Identifier:
                keyid:F6:C8:14:5E:EF:98:61:91:6E:BD:BF:83:7D:B6:A8:A7:78:8E:7F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31362e302f32342d3234203d3e20323636393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:53:78:8d:69:5e:72:8e:80:3f:0e:63:ed:8d:3c:42:18:b4:
         c8:45:83:2d:7c:6f:c1:9e:88:36:8b:c4:8a:f8:49:50:c3:a7:
         9e:7d:e7:70:20:36:c8:b2:21:f7:21:6c:b7:9d:74:80:1e:b7:
         a0:c4:51:d4:aa:43:43:56:d3:e7:c9:07:a2:32:66:ae:66:46:
         da:3b:63:ab:27:00:73:50:b9:9e:5b:41:3d:c8:d2:bc:21:41:
         05:3d:9f:26:61:6f:58:2e:97:6f:8c:83:e9:1b:da:f1:14:7e:
         b6:49:fd:9d:69:85:7f:42:c2:15:2d:08:96:b0:c5:7e:43:ee:
         06:3b:3e:15:9c:e1:54:f9:71:31:a9:1d:a6:7b:31:a4:f1:9c:
         5e:58:48:c8:d4:6f:84:c8:bc:72:de:6a:f0:96:d8:6a:2a:c5:
         e2:a1:84:2d:be:82:83:a3:11:cc:04:bb:42:d6:44:6a:31:34:
         28:17:04:7d:0d:20:cc:d0:4a:26:54:01:cb:aa:1b:1d:6e:74:
         0c:fd:b8:d2:2b:1f:2a:42:63:07:ca:19:25:b3:2c:af:81:e0:
         65:fb:6c:fe:e1:27:43:79:bd:40:f1:3f:db:e0:4a:6e:e3:d8:
         7a:47:16:f3:b8:95:98:af:95:49:ad:05:b5:67:96:02:ba:45:
         c9:05:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:16:39 2025 by rpki-client