Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32332d3233203d3e20323637323439.roa
File:                     34352e3233322e35362e302f32332d3233203d3e20323637323439.roa (raw, json)
Hash identifier:          Udto9EYPxU/AzNN5eMMDAmUhydPAGXGDp7SlaqmK8r8=
Subject key identifier:   26:82:C2:1B:AF:3A:82:DE:D6:95:08:C9:48:EB:14:5A:51:1C:F8:59
Certificate issuer:       /CN=9830A6B7098E8E3BB866650DCBD2E476C646A0C8
Certificate serial:       658C31F7BBB3C6A8A2F3FE9D9FD939BE76EC25DA
Authority key identifier: 98:30:A6:B7:09:8E:8E:3B:B8:66:65:0D:CB:D2:E4:76:C6:46:A0:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9830A6B7098E8E3BB866650DCBD2E476C646A0C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32332d3233203d3e20323637323439.roa
Signing time:             Fri 23 Aug 2024 19:58:33 +0000
ROA not before:           Fri 23 Aug 2024 19:53:33 +0000
ROA not after:            Fri 22 Aug 2025 19:58:33 +0000
asID:                     267249
IP address blocks:        45.232.56.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8c:31:f7:bb:b3:c6:a8:a2:f3:fe:9d:9f:d9:39:be:76:ec:25:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9830A6B7098E8E3BB866650DCBD2E476C646A0C8
        Validity
            Not Before: Aug 23 19:53:33 2024 GMT
            Not After : Aug 22 19:58:33 2025 GMT
        Subject: CN=2682C21BAF3A82DED69508C948EB145A511CF859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:cf:c2:a8:82:0d:a8:a8:bb:cd:5c:03:c2:
                    01:a7:f3:2d:74:ac:ef:23:f4:15:16:78:00:d8:6b:
                    2f:63:dd:2e:3c:33:c9:0b:bb:c3:40:94:34:a0:f8:
                    22:a5:3b:4e:f8:5e:c3:8b:10:bc:47:63:8e:7c:30:
                    55:88:43:c7:79:89:84:c7:b7:d2:e1:4c:44:90:5d:
                    b1:02:5f:0f:d7:bd:02:2b:d4:cc:d1:a2:68:5e:03:
                    5a:2a:0f:ac:fc:af:b1:26:21:bf:75:e9:83:78:98:
                    ce:b2:26:84:9a:9d:8b:50:5b:9d:f1:5b:73:9c:b0:
                    ed:e6:68:64:cb:a0:cf:b9:1f:ab:a5:0e:bc:1a:5b:
                    8b:70:58:2f:47:c7:6c:4a:f1:60:1e:b0:5b:fd:84:
                    8a:e7:04:76:6e:06:19:79:12:31:c2:9f:eb:64:9f:
                    6b:94:59:5a:31:c6:04:71:28:35:1f:f1:e0:71:bc:
                    ad:52:37:18:d0:b5:c9:f7:d1:cc:ff:50:77:88:98:
                    d5:c0:5c:30:09:8e:d5:81:8c:35:c0:87:b8:1d:9f:
                    df:3c:ad:93:4b:fc:77:ee:f0:e7:12:9f:96:63:04:
                    6a:35:ee:80:35:19:fb:73:5d:66:40:4d:38:aa:2b:
                    f8:e6:44:4f:af:fb:5d:d3:c0:0a:aa:8d:41:27:27:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:82:C2:1B:AF:3A:82:DE:D6:95:08:C9:48:EB:14:5A:51:1C:F8:59
            X509v3 Authority Key Identifier:
                keyid:98:30:A6:B7:09:8E:8E:3B:B8:66:65:0D:CB:D2:E4:76:C6:46:A0:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/9830A6B7098E8E3BB866650DCBD2E476C646A0C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9830A6B7098E8E3BB866650DCBD2E476C646A0C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35362e302f32332d3233203d3e20323637323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:af:f1:6d:dd:1d:cb:36:6f:40:42:ce:fe:d4:47:14:a2:
         bf:9c:b4:b2:b0:90:2b:b5:8b:05:a8:35:a3:06:92:88:5f:0f:
         30:a9:72:6a:f7:e2:2f:78:83:f7:7e:ce:86:cb:5a:8e:4a:f2:
         56:2d:b9:06:c2:73:47:40:cd:f2:f0:46:a3:11:38:13:ea:72:
         98:63:44:15:e8:42:94:1d:17:3f:80:54:b4:0e:cd:2f:ed:cc:
         bd:af:c3:a5:71:a6:a9:2a:34:62:80:b9:eb:21:6e:73:1a:9e:
         38:d4:56:2a:67:f0:42:e5:c3:49:35:94:b5:3d:25:13:fa:77:
         d4:9c:5c:77:c8:6a:37:22:9c:43:07:c4:87:af:53:ed:28:74:
         5e:d8:ba:1b:26:15:7b:6d:59:33:17:f4:0d:8f:72:96:85:24:
         09:08:6c:ff:b0:87:46:bd:65:c5:88:d5:c1:93:9c:06:49:85:
         dd:52:74:82:60:57:bc:e7:6d:0f:94:15:24:3f:f9:cd:09:2d:
         0e:ee:9b:44:96:5c:4f:f6:4d:7c:7a:5f:e3:fe:a4:54:9a:ef:
         cb:80:e8:c6:b8:6a:1f:e4:94:45:47:63:c0:52:fa:47:a8:32:
         52:36:2d:53:85:37:33:98:9d:80:06:0a:d3:da:73:95:02:36:
         0c:03:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:09:17 2025 by rpki-client