Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37302e302f32332d3233203d3e20323639333539.roa
File:                     34352e3138342e37302e302f32332d3233203d3e20323639333539.roa (raw, json)
Hash identifier:          qv12SJ0vA2I8MzBLVrpfO2iBi3NIsycPEhBPyZ8fkzw=
Subject key identifier:   45:BD:FC:D1:BE:77:7B:20:DB:8E:60:E3:72:5E:58:BD:94:B1:D1:72
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       50AFBA08595CDE55ED931F33B64C07AA5D40FC6F
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37302e302f32332d3233203d3e20323639333539.roa
Signing time:             Mon 26 Aug 2024 19:33:08 +0000
ROA not before:           Mon 26 Aug 2024 19:28:08 +0000
ROA not after:            Mon 25 Aug 2025 19:33:08 +0000
asID:                     269359
IP address blocks:        45.184.70.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:af:ba:08:59:5c:de:55:ed:93:1f:33:b6:4c:07:aa:5d:40:fc:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 26 19:28:08 2024 GMT
            Not After : Aug 25 19:33:08 2025 GMT
        Subject: CN=45BDFCD1BE777B20DB8E60E3725E58BD94B1D172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:83:01:9e:88:59:4c:87:38:53:b3:59:db:
                    e6:8e:38:7e:86:2f:d3:ed:7b:ce:6b:59:3d:5e:b7:
                    86:8b:2c:21:b2:9a:12:d4:55:42:52:a4:f4:07:1a:
                    d8:70:a6:2b:2a:9c:a0:7c:9f:0f:98:32:28:80:2f:
                    9c:02:8d:c4:91:f2:ee:66:22:f8:92:dc:91:3e:7f:
                    76:2a:5a:59:fa:0e:b4:26:11:92:ae:72:ad:44:ee:
                    6f:0f:c2:9c:09:e5:e1:d1:f7:f8:e1:ce:0e:2b:3f:
                    dd:09:0f:c3:f8:bd:72:e5:36:6b:91:46:76:03:fa:
                    2a:b1:65:30:3a:cf:7c:36:a3:5f:ef:6e:f6:c0:91:
                    91:61:25:56:dd:47:1b:89:15:99:4b:45:e5:bc:cb:
                    26:90:ce:26:ba:ae:15:60:1a:40:e6:99:4e:df:f9:
                    93:f7:84:0c:a0:52:d9:80:23:3a:98:23:2d:23:b9:
                    b2:12:f9:ba:63:56:12:17:22:8f:73:c7:36:dc:87:
                    98:ae:92:0b:4d:34:12:cb:3b:e6:80:4c:b9:b9:41:
                    61:9b:97:16:dc:f8:c0:f4:17:ad:24:95:24:49:c4:
                    95:6f:d2:4e:2f:af:ad:56:61:40:1c:13:03:b8:84:
                    2a:77:40:85:21:7a:f9:88:e4:08:cb:43:1e:83:33:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BD:FC:D1:BE:77:7B:20:DB:8E:60:E3:72:5E:58:BD:94:B1:D1:72
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e37302e302f32332d3233203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:44:e0:97:7f:e5:47:bb:9e:4c:14:7b:d0:18:85:96:28:7d:
         ea:8c:52:7b:3d:90:79:f4:3f:1e:b8:04:61:69:9b:f8:87:c8:
         bb:68:51:f8:cb:6d:8e:cd:ab:7f:66:48:f0:f9:72:4e:bd:0e:
         e5:b0:bf:2d:2e:20:e9:b4:54:78:33:c6:d6:6a:ae:86:93:22:
         de:5b:78:2f:8d:2e:e7:12:b6:3d:a8:e1:b9:9e:5f:00:9f:3a:
         9e:11:6c:a1:42:c6:16:d1:9b:20:a0:6c:85:35:6f:5e:46:c0:
         c7:ec:a3:1d:d4:74:85:43:26:98:30:6b:02:59:18:74:c6:81:
         02:a4:d3:72:a5:b9:65:a0:d3:39:ae:69:bf:96:ee:ae:ae:e8:
         26:1c:9e:1e:7c:1f:54:73:1b:43:34:93:f1:3c:17:22:12:f7:
         72:8e:0f:7e:1b:92:2c:3e:fe:e9:3a:06:d1:f6:3c:d3:d7:4e:
         72:45:95:f0:99:23:e1:0e:71:b8:1c:65:8f:08:ed:6e:13:db:
         91:29:b2:a6:92:0e:9a:df:a3:5b:d7:e0:65:87:21:ff:28:8e:
         5e:ad:2d:78:8e:c9:ae:62:7d:b2:41:87:b2:ea:12:9b:87:75:
         91:b4:79:15:9a:6c:62:39:35:e0:85:96:10:3f:cd:a6:29:07:
         43:b3:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:25:14 2025 by rpki-client