Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37342e302f32332d3233203d3e20323637363638.roa
File:                     34352e3232342e37342e302f32332d3233203d3e20323637363638.roa (raw, json)
Hash identifier:          h7WCEXoyqENASBc9VvI8KmNdZf+BTsansIk8G9NsOY8=
Subject key identifier:   7C:21:92:7E:62:8E:67:73:37:2A:03:E9:89:74:A7:D2:45:35:09:56
Certificate issuer:       /CN=D04F30B05726FA543C147DA94BFBD44C1D936300
Certificate serial:       4CB63557B038C849D3C14F324EBD655EDC1EE0EC
Authority key identifier: D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37342e302f32332d3233203d3e20323637363638.roa
Signing time:             Tue 13 Feb 2024 19:17:03 +0000
ROA not before:           Tue 13 Feb 2024 19:12:03 +0000
ROA not after:            Tue 11 Feb 2025 19:17:03 +0000
asID:                     267668
IP address blocks:        45.224.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b6:35:57:b0:38:c8:49:d3:c1:4f:32:4e:bd:65:5e:dc:1e:e0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04F30B05726FA543C147DA94BFBD44C1D936300
        Validity
            Not Before: Feb 13 19:12:03 2024 GMT
            Not After : Feb 11 19:17:03 2025 GMT
        Subject: CN=7C21927E628E6773372A03E98974A7D245350956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:32:0b:88:26:c6:09:85:12:e2:cc:a8:25:
                    d7:97:75:9d:05:43:cc:1d:e5:e7:c7:0d:a5:ed:a7:
                    9f:7c:31:68:b4:b4:33:57:35:16:66:49:d8:f2:46:
                    c5:d8:13:14:2f:24:73:15:70:48:8d:28:61:bf:69:
                    e3:f8:9d:4e:87:d7:1e:b9:6d:0e:60:4e:ca:0e:ca:
                    d7:ae:84:07:6f:9b:cc:9d:16:f1:48:67:a8:f6:2e:
                    10:7a:f0:48:04:57:a2:7a:81:e0:76:80:21:bf:0b:
                    bb:7a:38:eb:90:66:10:7b:4c:52:ee:6a:9b:ef:ea:
                    84:e9:88:51:6c:b4:c8:5a:fd:a9:13:be:0c:2e:cd:
                    67:bf:fe:10:c7:66:51:01:0b:77:8a:ff:ab:bb:aa:
                    45:98:a1:c2:f7:b3:1d:27:a5:42:1a:78:2f:69:e9:
                    42:77:77:fd:e6:c6:4f:c7:30:24:fa:50:57:16:db:
                    50:24:ba:de:7d:a3:15:4c:e1:ba:69:df:6e:be:c2:
                    99:8c:5b:d3:f6:b0:dd:52:b4:36:55:6c:67:f0:61:
                    77:6b:f8:44:95:a4:4d:b3:bc:dc:2c:66:08:7d:3c:
                    09:49:f0:d3:3d:24:00:c4:ef:f5:6f:79:9a:28:80:
                    ee:82:3f:ed:f4:a8:d1:cf:42:d6:b4:97:69:95:87:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:21:92:7E:62:8E:67:73:37:2A:03:E9:89:74:A7:D2:45:35:09:56
            X509v3 Authority Key Identifier:
                keyid:D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37342e302f32332d3233203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:01:88:e0:6e:d3:fb:a7:6e:32:66:47:58:06:fd:2a:8d:19:
         0b:22:b4:d5:99:1a:20:80:5a:2c:62:08:44:96:73:38:ab:a5:
         30:e6:09:c2:b2:21:11:9a:f9:85:03:9f:5f:88:d7:23:9e:7c:
         56:0d:18:9f:7b:6b:5f:2e:21:88:c1:7f:52:76:dd:58:13:40:
         12:1b:88:4c:00:8c:bc:71:f1:22:f4:1a:7b:6e:fa:13:3c:8d:
         a0:06:f5:89:7f:bc:2c:18:0c:68:07:b2:8d:a7:f4:0c:f5:7d:
         7d:bc:f7:f5:39:30:be:33:2d:f6:ce:ae:56:ab:cf:6f:75:06:
         97:37:6d:a5:a7:0c:5f:8b:56:0a:fa:26:78:36:a3:d3:f6:4b:
         56:21:a6:38:0f:36:71:b5:cd:c9:d7:35:19:61:7d:b7:9f:cf:
         18:6e:be:d1:a7:9f:13:62:ec:d5:8f:6a:94:a4:ca:99:bc:3d:
         63:ad:4d:63:9d:f8:19:cd:aa:b7:f5:53:11:2c:dd:01:4c:78:
         1c:18:1c:14:65:6c:ad:a8:ff:4f:d6:d4:5b:4b:e3:af:a8:d5:
         4b:8c:79:4a:f9:0a:e5:4c:d2:52:a7:48:88:cb:bb:0b:7e:84:
         fb:06:b4:0e:fa:88:77:b5:89:d3:88:73:29:de:34:b6:80:83:
         3f:a4:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:23 2025 by rpki-client