Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3135312e302f32342d3234203d3e20323639313932.roa
File:                     34352e3138312e3135312e302f32342d3234203d3e20323639313932.roa (raw, json)
Hash identifier:          R53pUhlv9Vf+2xgzm4TvTTEEbEDY2btXk3OswMe0WHk=
Subject key identifier:   16:EF:C5:78:98:E0:7C:AE:BE:98:2F:88:EC:27:9D:14:34:6B:46:D3
Certificate issuer:       /CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
Certificate serial:       2708294E58EC4131EA837BD9E4BC8C809477D4D9
Authority key identifier: A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3135312e302f32342d3234203d3e20323639313932.roa
Signing time:             Mon 29 Jan 2024 20:00:00 +0000
ROA not before:           Mon 29 Jan 2024 19:55:00 +0000
ROA not after:            Mon 27 Jan 2025 20:00:00 +0000
asID:                     269192
IP address blocks:        45.181.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:08:29:4e:58:ec:41:31:ea:83:7b:d9:e4:bc:8c:80:94:77:d4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
        Validity
            Not Before: Jan 29 19:55:00 2024 GMT
            Not After : Jan 27 20:00:00 2025 GMT
        Subject: CN=16EFC57898E07CAEBE982F88EC279D14346B46D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:15:2c:f7:8f:08:90:20:dc:48:21:7b:6d:
                    d4:21:98:30:bf:6a:08:62:e7:23:bd:3d:ff:5e:7b:
                    1d:d2:80:0c:11:42:09:8e:0e:91:c5:a5:fc:36:ad:
                    21:88:c5:89:4b:d4:9d:7c:98:f6:cf:b8:45:15:dd:
                    8f:85:55:26:07:58:0a:67:b3:11:d5:fa:08:ca:50:
                    30:36:92:5d:86:e2:84:e7:02:d1:c1:14:21:67:fd:
                    0f:0d:fc:6b:0f:96:d7:e7:62:60:fb:7d:57:14:5f:
                    fe:26:cf:89:24:47:6a:70:30:03:2b:4f:b1:a5:40:
                    71:68:9e:c6:48:55:07:0a:c4:0e:e0:8d:91:65:4f:
                    c2:51:08:83:7a:0c:2b:7b:f0:4d:a0:cf:8b:42:5d:
                    68:e8:b9:91:ff:19:65:02:aa:28:fa:a9:38:34:9d:
                    1c:9a:d2:4f:a2:5f:4c:31:b6:24:f0:36:a4:4a:11:
                    34:0e:0c:db:57:7e:bc:95:77:2a:0f:d3:a2:02:1e:
                    bd:42:93:80:48:bf:42:e7:7f:0d:b6:ba:94:c9:d3:
                    92:06:50:e7:75:74:ed:cc:bf:67:41:6a:65:3d:66:
                    98:f2:64:bb:af:43:43:c9:4b:6d:eb:29:e8:2c:5a:
                    cf:0f:7f:a8:25:cd:2a:21:74:ac:11:f1:dd:65:c5:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EF:C5:78:98:E0:7C:AE:BE:98:2F:88:EC:27:9D:14:34:6B:46:D3
            X509v3 Authority Key Identifier:
                keyid:A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3135312e302f32342d3234203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:4b:1a:a2:54:d0:a4:a9:de:7a:0c:2d:ab:01:1a:90:53:0f:
         cd:ca:a3:f2:1e:3b:b0:a2:a4:29:83:cf:51:ad:32:ee:07:a5:
         87:46:76:6f:90:9f:08:a9:56:0b:95:81:ed:15:2f:d2:5a:f3:
         97:71:f0:75:99:fd:f9:b2:bc:96:89:35:b6:6d:57:f5:ec:ff:
         d0:30:d7:f5:70:f0:93:e8:df:29:53:79:11:93:06:f0:f4:9c:
         45:d6:ec:fa:df:2c:d1:8d:93:97:cc:ac:5d:3b:ba:d1:13:5f:
         1d:1f:18:b0:52:ab:73:de:ac:d5:89:d5:9c:e3:90:08:b3:0e:
         0e:58:6c:f1:b6:1d:76:4f:c7:70:70:16:68:8c:e3:5f:be:c9:
         87:4a:a4:d4:c4:ae:52:09:2f:e9:36:5c:f8:89:48:e5:a7:90:
         07:d4:b4:72:69:f4:21:24:e5:57:e9:67:12:78:0d:8e:4b:1f:
         15:b7:fd:62:36:00:a3:ae:14:1b:4c:00:9e:52:c8:46:25:1a:
         3c:42:46:22:71:dc:6d:dd:6b:25:3c:06:f2:8e:3d:a4:e3:ad:
         39:11:73:62:06:11:f0:ea:aa:fd:90:85:c2:69:1a:13:14:13:
         da:60:56:55:4b:14:e4:5b:05:67:35:59:fa:7b:fc:35:03:10:
         90:30:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:35 2025 by rpki-client