Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32322d3234203d3e20323637323038.roa
File:                     34352e3233302e3230302e302f32322d3234203d3e20323637323038.roa (raw, json)
Hash identifier:          TGkV7rC3eWRHvXtSI5KFUVrtewwFB5BkDwBw6QeY5ko=
Subject key identifier:   9B:39:60:21:ED:7A:DA:60:45:96:B1:4E:59:6A:F3:0B:9A:5F:66:0F
Certificate issuer:       /CN=01491D8C95E86A0BBB53759D44C7888616D20029
Certificate serial:       1863E3B9A2C2F99F44F73F8767B495230159F907
Authority key identifier: 01:49:1D:8C:95:E8:6A:0B:BB:53:75:9D:44:C7:88:86:16:D2:00:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01491D8C95E86A0BBB53759D44C7888616D20029.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32322d3234203d3e20323637323038.roa
Signing time:             Tue 18 Mar 2025 18:14:02 +0000
ROA not before:           Tue 18 Mar 2025 18:09:02 +0000
ROA not after:            Tue 17 Mar 2026 18:14:02 +0000
asID:                     267208
IP address blocks:        45.230.200.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:63:e3:b9:a2:c2:f9:9f:44:f7:3f:87:67:b4:95:23:01:59:f9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01491D8C95E86A0BBB53759D44C7888616D20029
        Validity
            Not Before: Mar 18 18:09:02 2025 GMT
            Not After : Mar 17 18:14:02 2026 GMT
        Subject: CN=9B396021ED7ADA604596B14E596AF30B9A5F660F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:f0:3a:7f:9c:58:71:46:a6:02:9d:f0:8e:
                    2c:cb:93:69:40:b5:32:ca:7e:bb:8e:7d:2f:f6:64:
                    f4:02:a5:de:31:c2:4b:50:48:5c:28:43:c3:ff:ff:
                    da:db:b2:b8:e1:10:5b:36:b3:da:9d:0e:de:03:be:
                    43:29:e2:33:8a:3c:de:bb:25:7c:cb:b0:a3:81:2b:
                    96:11:8c:93:af:5a:f4:4f:19:7b:c0:d2:98:d8:dc:
                    d0:f8:7c:a6:d2:6b:9d:5c:c0:50:f8:11:7a:8f:c5:
                    02:eb:76:ba:52:3e:d2:40:bc:09:86:68:f6:fc:ba:
                    c6:d2:e9:90:c3:b6:ce:c8:f0:b4:75:7b:ac:11:59:
                    39:cf:d6:3e:ee:c3:0f:dc:28:cf:1b:21:85:09:84:
                    3f:6e:6b:4f:04:71:72:ad:6f:f1:9b:2a:33:8b:6c:
                    df:7e:02:98:8b:ce:81:e3:1e:98:01:a7:fa:e0:b3:
                    39:8d:ef:61:ec:af:27:dd:94:e0:bd:6b:3d:32:d5:
                    25:b9:a7:be:b9:2d:79:99:9f:d4:d3:97:ac:ca:25:
                    ba:2b:c7:24:ff:2c:b0:85:c5:da:55:8c:db:e0:1f:
                    b0:9a:30:60:c6:81:f2:9a:84:f4:9d:13:97:41:ae:
                    8e:2f:d3:d4:e2:38:d9:fd:f9:96:f2:2c:9d:b4:b5:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:39:60:21:ED:7A:DA:60:45:96:B1:4E:59:6A:F3:0B:9A:5F:66:0F
            X509v3 Authority Key Identifier:
                keyid:01:49:1D:8C:95:E8:6A:0B:BB:53:75:9D:44:C7:88:86:16:D2:00:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/01491D8C95E86A0BBB53759D44C7888616D20029.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01491D8C95E86A0BBB53759D44C7888616D20029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32322d3234203d3e20323637323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:15:72:33:f8:f8:95:c6:9d:14:bc:b8:17:6f:bc:70:a4:e0:
         c6:67:fc:c6:09:3d:2b:67:14:30:1b:94:9a:0a:bd:c7:9d:11:
         ad:7e:d0:ae:7c:ca:2e:5e:da:65:e6:18:3d:7a:c6:9d:4d:26:
         33:c3:e4:e9:08:a1:bc:00:91:f7:dd:c0:d1:09:cc:44:f0:df:
         4d:0d:02:68:8c:ef:99:6e:67:b7:a3:31:7a:d6:94:30:36:a2:
         c2:3b:b3:5c:f8:72:08:59:8e:df:e1:ce:c1:ce:f6:cf:0f:5a:
         46:0b:1a:8f:66:8a:17:2b:37:da:d8:c3:4b:e5:b6:1a:b1:b6:
         69:5b:7b:20:d9:d8:9f:1d:29:10:e0:cf:1a:ea:d4:7d:04:85:
         3c:99:d4:9a:cb:5a:62:30:3a:7f:19:d6:5d:79:9d:9e:47:8b:
         8f:74:3e:60:83:6a:1b:ae:bd:7d:e8:d8:7e:4d:2e:62:dc:55:
         ba:80:9e:af:fb:06:c7:cc:3d:8e:c6:f8:4a:1c:94:65:27:a8:
         64:82:00:31:ad:f8:31:ad:ed:29:f6:ed:83:2b:65:3e:fc:31:
         36:bf:59:03:7c:96:dc:92:ff:49:9d:9f:66:bc:61:d7:ef:34:
         1e:75:6b:1a:6f:2e:99:5d:c0:a3:26:90:3f:3d:8b:8f:ce:16:
         25:ff:9d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:17:35 2025 by rpki-client