Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32332d3233203d3e20323638373236.roa
File:                     34352e3137312e3138362e302f32332d3233203d3e20323638373236.roa (raw, json)
Hash identifier:          iOsNV/LcqnB4jLJs/QRxpQUW+NYbl4MpzKnizgZWpqs=
Subject key identifier:   9E:8D:79:FA:07:3D:D7:C0:D7:D4:BF:EA:B6:D9:4F:01:0C:D3:AD:2D
Certificate issuer:       /CN=E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5
Certificate serial:       747FFC849E1FCF3C18F41DD8927C703F7E85C412
Authority key identifier: E3:BD:40:1A:6D:36:7E:82:1B:7A:C7:E5:AB:B5:10:B6:DE:66:49:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32332d3233203d3e20323638373236.roa
Signing time:             Thu 13 Mar 2025 18:18:39 +0000
ROA not before:           Thu 13 Mar 2025 18:13:39 +0000
ROA not after:            Thu 12 Mar 2026 18:18:39 +0000
asID:                     268726
IP address blocks:        45.171.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7f:fc:84:9e:1f:cf:3c:18:f4:1d:d8:92:7c:70:3f:7e:85:c4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5
        Validity
            Not Before: Mar 13 18:13:39 2025 GMT
            Not After : Mar 12 18:18:39 2026 GMT
        Subject: CN=9E8D79FA073DD7C0D7D4BFEAB6D94F010CD3AD2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:cc:71:b0:0f:35:3d:5f:c4:59:41:b2:77:
                    d6:0c:de:4a:3d:63:65:47:db:59:71:c5:34:ac:ca:
                    7e:2e:c8:50:21:50:35:87:67:b5:b9:71:dd:e2:39:
                    aa:b2:34:13:d9:59:6c:3a:0d:2b:88:f2:5e:94:d5:
                    06:04:ac:3f:15:4b:1b:6d:25:16:6f:e3:2a:43:04:
                    07:03:e0:a3:d8:97:5f:8f:e5:2a:32:f0:ca:e3:c0:
                    05:5f:cb:18:95:1c:7f:4b:25:3b:92:41:30:8b:cf:
                    5f:f1:63:d1:36:cf:d1:81:96:08:29:49:9d:e8:e9:
                    42:bb:a6:ec:77:5f:23:5f:49:11:53:48:60:d3:0e:
                    c4:48:a4:84:0f:c1:65:25:e2:e6:7c:6e:7f:a8:1a:
                    a6:08:b7:f5:79:5e:f9:2d:66:39:0e:d1:fd:9e:c0:
                    35:40:ba:5a:50:66:42:7f:15:6e:2b:97:8c:f9:3e:
                    e8:b2:de:b1:b9:79:f4:3d:54:32:a4:12:05:b5:77:
                    1b:8c:a5:17:be:e9:1d:3d:e7:e7:99:7c:ab:91:4d:
                    8a:08:56:fd:ac:10:7f:0a:94:23:21:be:a8:2d:a4:
                    6a:93:26:73:8f:27:bb:71:d5:17:31:f6:18:59:47:
                    5b:75:49:c6:e4:4b:f2:c2:a2:51:cc:d2:31:0e:0b:
                    6d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8D:79:FA:07:3D:D7:C0:D7:D4:BF:EA:B6:D9:4F:01:0C:D3:AD:2D
            X509v3 Authority Key Identifier:
                keyid:E3:BD:40:1A:6D:36:7E:82:1B:7A:C7:E5:AB:B5:10:B6:DE:66:49:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32332d3233203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:9a:ae:5a:2c:46:bb:43:fe:bc:1f:fb:dd:0d:9b:2d:5c:b3:
         6a:74:bd:36:e5:88:11:ab:72:d5:35:c9:df:2f:73:36:df:15:
         62:99:54:73:2e:23:43:97:df:df:53:32:a2:e7:d1:0d:08:4a:
         51:60:ea:03:77:c7:9c:2b:70:c6:3c:5f:0c:9b:5f:5b:7c:8b:
         3f:b3:5e:ea:d1:25:d1:f3:be:a3:18:55:48:25:ee:7a:9b:d7:
         74:d0:8b:35:77:24:17:90:28:2d:8f:83:7c:e2:29:db:a1:67:
         de:72:ac:3b:af:ca:26:c1:fd:8e:3f:99:da:80:2b:12:42:1f:
         4f:b2:7d:5b:c7:bb:b7:9f:6a:49:02:67:3f:90:b4:f1:3f:b4:
         29:79:73:f3:e3:88:21:dd:3c:e4:a1:c0:e3:aa:8e:e2:49:50:
         7b:54:8e:c0:3e:6c:e1:dd:09:c4:ed:a7:b7:d1:d5:e6:36:8b:
         a5:80:55:04:65:51:61:5d:40:3d:7f:cc:0f:75:06:1a:2a:46:
         51:e6:17:0f:44:5d:37:b6:1a:84:68:0a:5e:d9:00:42:72:ff:
         0b:70:e6:50:f1:78:df:b1:3d:d1:e3:b4:50:0b:b6:2d:90:0d:
         45:bc:61:13:cd:cb:ea:d7:a0:f8:0d:5a:ab:a1:ab:98:8f:3b:
         61:78:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:01 2025 by rpki-client