Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/34352e3136362e35392e302f32342d3234203d3e20323634313733.roa
File:                     34352e3136362e35392e302f32342d3234203d3e20323634313733.roa (raw, json)
Hash identifier:          jPHU+5oQJCnNWtFNvZD5u7ohO0+DRqInELzmbpLuCtM=
Subject key identifier:   2B:7A:E6:46:D1:57:BA:4D:FD:BA:26:7F:C9:A8:03:99:94:1D:8C:3F
Certificate issuer:       /CN=E1065105D21C56AC4973B7DD1221083E42A226C6
Certificate serial:       3DB3E1453E91B6F13C24164AD7D2B75F5DA97912
Authority key identifier: E1:06:51:05:D2:1C:56:AC:49:73:B7:DD:12:21:08:3E:42:A2:26:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1065105D21C56AC4973B7DD1221083E42A226C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/34352e3136362e35392e302f32342d3234203d3e20323634313733.roa
Signing time:             Thu 11 Jan 2024 21:29:48 +0000
ROA not before:           Thu 11 Jan 2024 21:24:48 +0000
ROA not after:            Thu 09 Jan 2025 21:29:48 +0000
asID:                     264173
IP address blocks:        45.166.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b3:e1:45:3e:91:b6:f1:3c:24:16:4a:d7:d2:b7:5f:5d:a9:79:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1065105D21C56AC4973B7DD1221083E42A226C6
        Validity
            Not Before: Jan 11 21:24:48 2024 GMT
            Not After : Jan  9 21:29:48 2025 GMT
        Subject: CN=2B7AE646D157BA4DFDBA267FC9A80399941D8C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4b:13:ad:fd:37:2e:99:2e:25:62:21:4e:87:
                    84:19:95:50:49:dd:df:d9:bc:d2:14:7d:50:36:1e:
                    f0:2c:eb:39:84:9b:a6:1f:2c:c7:ab:55:9f:87:d9:
                    78:f4:27:80:fa:e7:a0:4a:8e:8c:6b:46:ff:26:b9:
                    e7:cf:b5:1a:5c:0e:f8:a0:30:c3:09:65:0a:69:8c:
                    02:67:d7:26:57:19:9b:12:d8:c9:9d:0d:a8:fe:41:
                    47:45:52:66:cb:60:49:e9:e1:e4:a7:cf:0f:b4:79:
                    dd:12:6d:5a:b9:28:d0:bb:e7:98:ee:7f:e3:9d:9a:
                    99:fd:90:39:89:53:17:34:14:d3:3f:02:5b:89:89:
                    c7:2b:3e:e3:92:41:04:37:d6:73:82:af:60:c0:98:
                    c4:2e:9e:17:b4:aa:4d:1e:2b:e7:e4:18:81:77:26:
                    1d:23:2c:d7:47:6f:7c:17:99:90:cc:33:b0:fa:f9:
                    c7:2e:54:ec:cc:89:f3:c4:b5:11:f4:0c:b5:a8:89:
                    0a:0a:44:e2:12:39:d1:2b:f4:04:11:40:59:2a:94:
                    d5:e3:9c:ba:f1:59:dc:37:a6:d2:5c:25:8b:21:ca:
                    d5:20:9d:ee:4e:11:e5:47:63:c3:17:aa:fe:ea:85:
                    ff:e1:b6:fc:f5:20:a8:8e:49:1c:b7:21:b7:62:c4:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7A:E6:46:D1:57:BA:4D:FD:BA:26:7F:C9:A8:03:99:94:1D:8C:3F
            X509v3 Authority Key Identifier:
                keyid:E1:06:51:05:D2:1C:56:AC:49:73:B7:DD:12:21:08:3E:42:A2:26:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/E1065105D21C56AC4973B7DD1221083E42A226C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1065105D21C56AC4973B7DD1221083E42A226C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/34352e3136362e35392e302f32342d3234203d3e20323634313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b4:8c:8f:9f:83:a2:e2:1a:cb:c8:99:0e:79:52:2a:03:c1:
         a9:51:c9:0d:87:29:84:08:54:8a:89:c0:99:aa:ae:0b:83:06:
         b3:80:35:d5:e2:85:87:35:70:27:6c:68:7b:f2:65:b1:b9:0e:
         36:0f:85:55:1e:ab:67:98:1b:10:54:89:9b:dd:d6:75:16:f6:
         77:18:2e:2e:0f:2b:d3:84:be:14:e8:0a:61:f1:6d:06:db:12:
         b6:df:d4:4f:2b:f2:81:25:31:a1:04:df:1c:99:0a:e9:7a:77:
         4a:b7:79:3b:b6:8b:fe:eb:de:7b:04:03:86:cb:3b:cc:77:91:
         5a:01:6f:ad:54:2e:c5:c0:29:1d:75:79:47:e0:a7:ec:c3:56:
         a2:70:3f:7f:c2:8b:87:15:a5:53:d0:85:ae:ee:7f:f3:ac:29:
         af:c6:7e:5f:83:4f:5f:87:b0:81:22:53:b5:81:ec:42:47:b7:
         e7:e9:95:07:17:1b:35:72:60:39:f0:27:61:f2:38:0d:75:75:
         04:93:cb:af:e6:d1:fe:b4:97:80:45:c7:cf:5b:e5:8c:42:9e:
         d6:6e:13:eb:3a:d2:38:bc:c0:4f:43:79:90:cb:92:c6:81:a8:
         99:2c:4b:1f:cd:8a:1e:96:a8:5b:3b:a2:94:6c:15:ee:7e:0d:
         40:57:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:08:40 2025 by rpki-client