Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32332d3233203d3e20323639323635.roa
File:                     34352e3138322e33322e302f32332d3233203d3e20323639323635.roa (raw, json)
Hash identifier:          n86hgITupBHGxIN7N7c9CMiz6JlIIIiwvcQmW7FnkIQ=
Subject key identifier:   D0:B8:CC:2B:02:56:2D:A0:91:E6:BC:6F:A4:AA:CE:9E:48:59:9F:6C
Certificate issuer:       /CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C
Certificate serial:       4FB044AC7303766384096E2D13D69E7BF33A3C36
Authority key identifier: D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32332d3233203d3e20323639323635.roa
Signing time:             Fri 14 Feb 2025 00:46:11 +0000
ROA not before:           Fri 14 Feb 2025 00:41:11 +0000
ROA not after:            Fri 13 Feb 2026 00:46:11 +0000
asID:                     269265
IP address blocks:        45.182.32.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b0:44:ac:73:03:76:63:84:09:6e:2d:13:d6:9e:7b:f3:3a:3c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C
        Validity
            Not Before: Feb 14 00:41:11 2025 GMT
            Not After : Feb 13 00:46:11 2026 GMT
        Subject: CN=D0B8CC2B02562DA091E6BC6FA4AACE9E48599F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:db:cf:20:d1:8c:18:af:5f:3f:46:38:11:
                    92:9b:94:c8:8a:c8:db:6e:48:74:63:1d:3f:f1:fc:
                    f2:9e:b8:d0:7f:ad:69:de:a1:53:48:fe:e5:27:ea:
                    5e:fa:22:ff:06:17:23:0c:b9:0a:f7:58:a7:99:89:
                    de:9e:a5:8e:af:28:a2:20:1c:74:6a:59:2e:ed:62:
                    c4:32:08:e2:a9:df:63:5a:cd:0b:22:7c:05:34:5b:
                    dd:6c:d4:4b:f8:55:0c:22:1f:f8:05:99:12:5e:20:
                    85:bf:e8:e8:17:0a:87:0f:cd:20:71:5b:22:07:0d:
                    b1:53:e4:8d:2b:e2:54:55:83:f2:29:53:d4:86:09:
                    00:c6:ca:3e:55:36:c1:41:10:c8:df:f7:c6:8f:a3:
                    c4:a5:f8:c8:6e:96:95:71:9c:87:9c:6d:41:54:73:
                    6a:34:33:be:3c:7d:d5:c8:7c:84:68:1d:a9:aa:13:
                    bb:09:a7:d5:09:c1:3c:e1:10:60:d2:a1:28:7a:ea:
                    78:fe:2b:aa:ba:b3:f8:e9:00:79:7f:fc:c3:df:36:
                    c8:10:2b:d9:41:10:8e:17:27:df:32:b2:95:37:5c:
                    e4:95:28:12:17:d2:d1:2a:76:ba:b9:4b:16:c8:f9:
                    44:87:66:03:e6:7b:e3:f4:06:95:f0:33:d3:b1:65:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B8:CC:2B:02:56:2D:A0:91:E6:BC:6F:A4:AA:CE:9E:48:59:9F:6C
            X509v3 Authority Key Identifier:
                keyid:D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33322e302f32332d3233203d3e20323639323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:a8:33:dd:b6:4c:a7:cf:d8:a7:a8:c4:94:b2:14:b0:59:84:
         b4:7f:fc:e7:73:19:c1:3f:77:5a:c7:4b:64:30:9d:3a:31:2b:
         33:3f:12:a5:bc:4b:7c:79:75:93:73:04:cc:a8:1b:5d:97:81:
         30:00:1f:a1:85:e1:99:32:99:92:75:5f:15:2d:ed:ac:70:44:
         32:da:b9:a4:39:10:0a:83:a8:de:17:10:c0:b7:a6:41:d7:10:
         d1:8f:52:3c:64:e1:58:5e:bc:11:0b:5d:60:74:9e:ed:1b:a4:
         9d:6e:ff:d9:96:c6:68:b6:00:63:1a:0e:f8:58:09:a0:17:3e:
         fa:77:82:0a:4e:41:16:ed:b2:9b:06:d8:ab:8c:b2:e7:96:14:
         ac:b9:45:a9:5f:18:2e:6a:53:7e:80:22:d5:db:c8:14:ff:07:
         f4:cb:69:d1:b1:25:99:17:b2:90:57:40:de:2f:6c:2f:51:5e:
         b3:cf:88:3b:a0:34:93:bf:54:21:de:0b:b0:17:74:4d:88:4c:
         73:78:f2:9a:0e:e9:c3:7d:8c:89:82:eb:87:94:74:58:49:b0:
         e9:98:a6:d6:5f:80:11:20:2f:ca:70:d2:03:04:ea:3b:f7:21:
         f8:42:ca:bd:f1:b4:82:88:4f:0a:5b:e9:aa:1c:a1:e0:ea:90:
         18:4a:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:32:17 2025 by rpki-client