Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExoWgGy5yM6YqKkSnQpnAbkNzsrSEdXvT4iEtfD7GRgi/0/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa
File:                     34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa (raw, json)
Hash identifier:          0VlI4agPze3kO+lraBJfP4O5QFTEsPuIaqM6ElyE2Ak=
Subject key identifier:   69:0D:09:B3:73:2E:8B:EA:F2:06:20:DF:D0:46:E8:7E:C2:D9:6B:46
Certificate issuer:       /CN=8B547E64AD919E4CF905DEA85CE9AF7E99D147F4
Certificate serial:       02FD2CF8CB09107F866B9F7E40C0356CBD9AC607
Authority key identifier: 8B:54:7E:64:AD:91:9E:4C:F9:05:DE:A8:5C:E9:AF:7E:99:D1:47:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B547E64AD919E4CF905DEA85CE9AF7E99D147F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExoWgGy5yM6YqKkSnQpnAbkNzsrSEdXvT4iEtfD7GRgi/0/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa
Signing time:             Sat 23 Apr 2022 19:00:00 +0000
ROA not before:           Sat 23 Apr 2022 18:55:00 +0000
ROA not after:            Sun 23 Apr 2023 19:00:00 +0000
asID:                     267203
IP address blocks:        45.231.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fd:2c:f8:cb:09:10:7f:86:6b:9f:7e:40:c0:35:6c:bd:9a:c6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B547E64AD919E4CF905DEA85CE9AF7E99D147F4
        Validity
            Not Before: Apr 23 18:55:00 2022 GMT
            Not After : Apr 23 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ff:13:2a:cf:a1:fb:00:d6:4e:c4:79:fa:5f:
                    bc:98:3f:30:73:fe:ae:02:b4:64:4b:14:ac:7b:f8:
                    d9:52:1c:9d:50:8a:93:bc:36:f7:42:0c:29:08:b7:
                    d4:f5:80:50:de:d6:c8:64:79:cf:36:b7:8f:70:11:
                    d0:24:e9:63:22:15:4b:f1:71:5f:44:df:b6:05:c6:
                    3f:aa:e3:e7:9e:fc:e4:4b:b2:50:7a:fe:c4:99:5e:
                    c7:e9:41:f2:25:ea:84:c1:18:51:39:28:02:e2:51:
                    4b:23:19:78:25:e6:c1:63:09:a1:03:19:01:e6:a7:
                    62:21:6f:1c:44:33:c1:80:03:9d:c5:3f:57:d8:fa:
                    1b:34:09:bf:31:05:8e:54:d2:89:a6:87:b1:5b:22:
                    4a:8b:85:65:2c:24:cd:87:39:c9:ad:61:16:7c:01:
                    76:9d:b4:07:10:c9:dc:6d:47:b5:00:b4:1a:05:cb:
                    96:57:b6:cd:26:5e:78:10:fa:7a:7a:d3:94:6f:05:
                    82:40:70:3e:e0:1f:f5:62:89:7e:3e:1a:bb:4a:6b:
                    20:2b:a6:43:26:3e:cf:a8:65:e8:15:bd:fb:f5:d4:
                    c2:5a:f6:64:12:8d:92:51:a6:71:dd:4a:e6:b0:a6:
                    5d:ac:07:3b:b9:8c:b8:b0:68:c5:51:cb:3f:45:b4:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0D:09:B3:73:2E:8B:EA:F2:06:20:DF:D0:46:E8:7E:C2:D9:6B:46
            X509v3 Authority Key Identifier:
                keyid:8B:54:7E:64:AD:91:9E:4C:F9:05:DE:A8:5C:E9:AF:7E:99:D1:47:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExoWgGy5yM6YqKkSnQpnAbkNzsrSEdXvT4iEtfD7GRgi/0/8B547E64AD919E4CF905DEA85CE9AF7E99D147F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B547E64AD919E4CF905DEA85CE9AF7E99D147F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExoWgGy5yM6YqKkSnQpnAbkNzsrSEdXvT4iEtfD7GRgi/0/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:de:4c:ae:07:95:99:5f:38:b2:b5:7b:26:86:7d:79:08:17:
         86:f3:20:22:a1:b1:b7:50:cf:22:da:66:67:c8:b0:35:83:c9:
         c6:d0:e2:db:7a:45:cd:d8:76:0c:8d:65:cd:48:19:7d:9c:07:
         f6:81:81:fb:52:20:d9:ac:fb:fd:51:85:2d:07:02:39:e2:90:
         e7:96:77:b1:cb:55:ee:11:53:f4:19:9a:77:ee:ee:e4:fc:64:
         b3:82:3d:05:25:70:39:87:1a:a5:89:68:8a:a9:20:bd:6f:9f:
         7f:e6:e5:8a:e1:0e:62:91:7e:f4:0a:54:1a:ab:60:dd:bc:b1:
         94:b6:40:e3:20:f5:d3:7f:24:80:65:de:23:df:75:76:3a:64:
         1c:12:f7:93:9c:2d:d5:ef:06:df:77:9f:29:7d:7b:0a:ca:fd:
         8e:f0:df:f6:38:8b:8c:3d:e0:97:b4:3f:53:67:62:00:9c:f1:
         1c:c9:2e:b5:81:a0:0c:19:7f:cd:5a:e2:e7:05:bf:65:67:87:
         15:50:f5:d1:f8:34:45:e6:17:0e:23:3f:fe:b7:f0:0f:f0:0d:
         12:0c:bf:10:ad:ff:ed:ea:d3:a2:d5:dd:23:12:7e:32:6e:3c:
         6e:b0:f0:ae:37:87:35:a7:fc:44:fb:16:3b:58:49:e1:85:a5:
         62:09:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:09:38 2025 by rpki-client