Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/34352e3138342e34382e302f32322d3234203d3e20323639333134.roa
File:                     34352e3138342e34382e302f32322d3234203d3e20323639333134.roa (raw, json)
Hash identifier:          heLUUZLoWUfHvfv6WoAeaA+66n8uV70tw2va2hNZGGA=
Subject key identifier:   70:74:38:8E:6D:2A:EA:69:07:85:A7:C4:5A:25:E3:85:2B:7F:52:D4
Certificate issuer:       /CN=2A6491204C711A84AD522B857DDD79956488BAA2
Certificate serial:       16F6AF3BDFF884F061E13F898E3D835162C0F7B7
Authority key identifier: 2A:64:91:20:4C:71:1A:84:AD:52:2B:85:7D:DD:79:95:64:88:BA:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/34352e3138342e34382e302f32322d3234203d3e20323639333134.roa
Signing time:             Thu 06 Mar 2025 12:45:52 +0000
ROA not before:           Thu 06 Mar 2025 12:40:52 +0000
ROA not after:            Thu 05 Mar 2026 12:45:52 +0000
asID:                     269314
IP address blocks:        45.184.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f6:af:3b:df:f8:84:f0:61:e1:3f:89:8e:3d:83:51:62:c0:f7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6491204C711A84AD522B857DDD79956488BAA2
        Validity
            Not Before: Mar  6 12:40:52 2025 GMT
            Not After : Mar  5 12:45:52 2026 GMT
        Subject: CN=7074388E6D2AEA690785A7C45A25E3852B7F52D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:08:86:e6:bc:5c:07:26:02:92:f5:5b:74:fa:
                    5f:0a:29:20:90:ee:54:9b:77:0b:52:5d:2b:ee:f3:
                    b9:eb:e8:56:0d:21:09:26:b4:46:14:c0:54:3c:c8:
                    17:fb:74:9b:8e:88:71:0c:cd:5e:81:69:dd:d9:b8:
                    02:47:28:91:07:3f:29:b5:f7:3d:7a:f4:9b:f8:01:
                    58:2c:7e:94:8c:b8:45:72:04:62:28:8e:34:c0:c4:
                    d4:6a:f8:ce:86:60:3c:b2:b0:45:76:e6:ab:6d:59:
                    18:a9:94:a3:b1:ae:0f:d4:4a:55:82:05:ef:c8:89:
                    df:38:e1:ed:55:e8:8c:89:0d:3b:eb:a2:25:25:b7:
                    d6:96:5a:1f:6a:53:1f:a5:2f:cd:d7:75:21:89:98:
                    a7:e8:7f:ce:65:a9:ff:d5:45:b6:51:cb:6c:dc:2b:
                    22:86:87:0e:79:c2:7b:de:23:b7:70:85:68:9c:43:
                    32:47:4a:99:d8:4c:2d:c4:1a:74:56:17:99:c1:8f:
                    fc:96:bb:9a:38:2a:3c:b6:bd:96:27:9d:f1:1c:c7:
                    ec:e2:4b:f3:68:c3:33:eb:4f:48:17:fe:50:4e:60:
                    ba:6b:cf:82:c7:d9:82:5f:a7:b3:d0:96:bc:03:e2:
                    2f:8e:7e:c8:2e:e9:2b:46:aa:1e:84:a3:4a:a7:ad:
                    f5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:74:38:8E:6D:2A:EA:69:07:85:A7:C4:5A:25:E3:85:2B:7F:52:D4
            X509v3 Authority Key Identifier:
                keyid:2A:64:91:20:4C:71:1A:84:AD:52:2B:85:7D:DD:79:95:64:88:BA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/34352e3138342e34382e302f32322d3234203d3e20323639333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:08:9e:30:19:31:e9:8a:06:2f:fb:90:36:26:a3:ee:87:f4:
         8a:f6:35:80:6a:3f:86:40:b1:52:c6:7d:a2:77:20:bd:19:50:
         89:94:94:49:2c:71:88:8b:c5:d6:63:1e:a1:a5:b1:48:97:14:
         6e:fe:65:30:6e:97:6b:1c:8a:52:e5:22:57:2f:29:7b:6d:75:
         33:e2:16:e5:7a:e7:66:9b:9c:2f:e2:8d:9a:5f:18:6a:a9:f6:
         e1:96:4a:d9:35:ac:d6:7b:dc:6b:89:6e:45:b5:64:2a:aa:79:
         e2:4b:f4:7d:57:a7:fd:ab:3c:59:cb:bd:e0:f2:b2:78:18:99:
         c2:7a:9c:0e:45:77:b3:f5:1b:e1:d9:37:d0:50:66:e9:fb:41:
         ec:bc:d2:09:2b:8c:5d:81:e9:b0:29:2c:70:96:83:44:cf:3d:
         65:a7:c1:e8:26:b5:46:fc:1b:09:af:f7:ce:a5:bb:2a:d7:b4:
         24:47:fe:b9:b0:a7:f4:52:8a:40:b9:3e:06:c4:f5:e5:af:9a:
         c7:dd:fe:a0:2c:09:08:36:9d:f3:3a:bc:94:45:c2:0d:ac:42:
         96:cb:92:ab:48:cd:09:6e:8f:86:91:a1:a4:fc:db:61:c2:e9:
         38:06:29:6c:8b:2c:da:2d:63:39:d2:da:69:75:87:8a:80:8d:
         19:74:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:40:00 2025 by rpki-client