Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e20323033.roa
File:                     34352e3138342e36382e302f32322d3332203d3e20323033.roa (raw, json)
Hash identifier:          Bq1HXZuyLjfF2lkXdAhfHFrHD/35+OMPMi4jAFrvq2U=
Subject key identifier:   7D:13:A1:FE:3E:87:BA:4A:3F:9E:08:74:64:C7:DE:C6:2B:88:23:7E
Certificate issuer:       /CN=7EA2EA6A0D3A338D4FA4840C542D4E9164C82629
Certificate serial:       06E689A5FC7B60FF5845481BD9EE3F2AEB1F15A0
Authority key identifier: 7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e20323033.roa
Signing time:             Fri 16 Aug 2024 02:40:20 +0000
ROA not before:           Fri 16 Aug 2024 02:35:20 +0000
ROA not after:            Fri 15 Aug 2025 02:40:20 +0000
asID:                     203
IP address blocks:        45.184.68.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e6:89:a5:fc:7b:60:ff:58:45:48:1b:d9:ee:3f:2a:eb:1f:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA2EA6A0D3A338D4FA4840C542D4E9164C82629
        Validity
            Not Before: Aug 16 02:35:20 2024 GMT
            Not After : Aug 15 02:40:20 2025 GMT
        Subject: CN=7D13A1FE3E87BA4A3F9E087464C7DEC62B88237E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:05:1f:fe:dd:34:68:f7:66:68:13:3c:86:
                    0f:ab:4c:21:f2:b4:10:d4:8d:ae:4f:96:12:6a:f1:
                    6f:a2:87:e6:39:2c:2b:d3:8b:31:4f:8d:59:7e:af:
                    68:99:4e:8a:38:01:bf:e9:64:62:d3:bb:d3:36:84:
                    28:00:9e:14:c0:b2:ce:b5:20:33:51:cb:7c:83:30:
                    36:2f:5a:66:ed:98:52:f3:f6:bb:c9:74:a1:7d:83:
                    df:ec:53:d4:e1:e3:a9:7d:8f:0d:00:e3:4b:d2:83:
                    c6:9d:e4:6e:7d:b3:00:70:60:be:36:3a:c3:00:b5:
                    fc:f1:96:7d:3e:30:24:a5:4c:c2:8f:bc:a7:92:56:
                    2a:8f:d5:fc:08:c4:e4:b5:a8:62:93:2b:bd:51:6a:
                    f5:85:73:81:41:3c:4f:0e:f3:8d:ec:86:cd:38:f3:
                    04:24:9c:9f:77:95:69:5f:51:f3:a2:fb:7d:50:e5:
                    88:61:a3:4c:3d:93:8a:99:a6:92:0a:b6:48:1c:f8:
                    f6:7e:52:1d:07:94:96:10:bd:f0:ce:18:1b:ce:59:
                    7e:e8:0f:af:01:6d:46:e1:c8:30:75:28:48:2b:62:
                    4f:7c:8d:5c:7b:c3:52:de:31:e4:91:b3:6b:0b:ec:
                    62:0f:7b:b0:32:95:95:32:6a:36:d6:df:53:1d:a8:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:13:A1:FE:3E:87:BA:4A:3F:9E:08:74:64:C7:DE:C6:2B:88:23:7E
            X509v3 Authority Key Identifier:
                keyid:7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:2b:33:1c:98:41:32:1c:aa:70:ea:10:a7:70:5d:3b:fa:47:
         0c:dd:d3:96:30:ff:39:93:25:3b:57:e2:ce:4d:4e:fb:63:b6:
         af:0b:5c:ce:e8:40:7c:db:ac:28:a7:f1:ec:f9:88:c3:4d:11:
         0e:11:d7:31:8d:51:16:0d:86:98:b8:cf:62:9d:f3:c6:f1:90:
         60:b8:e5:c0:a3:e4:78:83:c3:f9:53:3f:45:6e:74:21:88:1f:
         96:8c:c5:bb:e4:60:46:eb:34:49:8f:e2:67:10:d2:27:51:ac:
         83:66:60:1c:1a:1e:da:28:59:f8:0a:71:0e:9f:e6:f8:d7:6c:
         4e:01:1a:b9:c4:0d:c3:7c:81:e2:dc:05:89:70:81:96:b6:01:
         98:9c:96:14:9e:ee:10:bb:0c:6c:86:ac:3b:90:0e:a8:3a:ac:
         6a:d2:d9:e8:c7:d2:e6:4c:4d:54:88:f0:f3:7c:e1:91:a8:1c:
         1f:76:b0:3e:80:a8:89:3f:5a:fa:af:9c:40:8f:80:e5:b1:03:
         21:29:d6:6c:37:0f:78:cc:5c:0f:06:b9:ba:c2:cd:88:05:c3:
         32:df:94:f7:5b:98:13:a2:89:0a:1e:28:18:02:9a:e9:40:8e:
         ba:24:51:64:06:0d:b1:84:f3:b4:89:76:ee:4a:d7:f4:cf:81:
         7c:eb:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:05 2025 by rpki-client