Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqqASvj9jUwRfgiejmK57B6TPDm5EPmWrPeBbzbkUE4p/0/34352e3137392e3230342e302f32322d3234203d3e20323639313030.roa
File:                     34352e3137392e3230342e302f32322d3234203d3e20323639313030.roa (raw, json)
Hash identifier:          fdaAuEXqkqD9KDcgPlQh8uavM6oq+//2VvYxBWKHD2g=
Subject key identifier:   9B:9B:12:B0:73:6E:7D:06:F1:CB:EB:6A:E8:F2:0D:18:5F:4D:09:32
Certificate issuer:       /CN=37E828440D52263C9689551A3A808A658D6B34EA
Certificate serial:       5387D7008CF42A34C835B4520D70F1ECF42D0D36
Authority key identifier: 37:E8:28:44:0D:52:26:3C:96:89:55:1A:3A:80:8A:65:8D:6B:34:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E828440D52263C9689551A3A808A658D6B34EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqqASvj9jUwRfgiejmK57B6TPDm5EPmWrPeBbzbkUE4p/0/34352e3137392e3230342e302f32322d3234203d3e20323639313030.roa
Signing time:             Fri 26 Apr 2024 13:39:09 +0000
ROA not before:           Fri 26 Apr 2024 13:34:09 +0000
ROA not after:            Fri 25 Apr 2025 13:39:09 +0000
asID:                     269100
IP address blocks:        45.179.204.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:87:d7:00:8c:f4:2a:34:c8:35:b4:52:0d:70:f1:ec:f4:2d:0d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E828440D52263C9689551A3A808A658D6B34EA
        Validity
            Not Before: Apr 26 13:34:09 2024 GMT
            Not After : Apr 25 13:39:09 2025 GMT
        Subject: CN=9B9B12B0736E7D06F1CBEB6AE8F20D185F4D0932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:89:01:c2:7b:1b:65:62:6b:7f:60:cf:cc:
                    04:79:5a:3c:d4:2e:c5:a2:05:59:c5:3d:19:4c:85:
                    41:8d:d5:d2:67:6a:24:a2:22:30:5f:36:dc:56:d0:
                    2b:e3:f7:5e:a7:f5:d9:c2:2e:d5:c8:a9:a8:5a:04:
                    67:a6:f8:bd:9b:0c:2d:4d:c3:ed:de:05:aa:b3:ae:
                    2a:6d:69:d5:13:38:ca:7b:a7:64:43:15:d3:0d:34:
                    d2:84:2f:f1:3e:1a:dd:03:ff:9d:70:f1:a2:94:29:
                    9b:bd:ed:e4:4a:a4:84:a8:bd:ed:63:30:d6:5f:33:
                    2f:9b:8a:ec:09:04:3e:6f:24:1c:e2:93:db:76:ad:
                    ad:45:ab:a3:e0:1c:2c:95:4f:51:93:00:7f:b4:91:
                    32:39:c4:9f:75:e5:75:77:61:5a:63:67:e3:05:93:
                    a8:16:0a:a6:25:4f:c3:8e:f6:96:a2:12:08:57:1d:
                    9f:78:7f:6e:30:b2:b1:af:72:27:40:84:34:0f:4b:
                    6e:b4:ef:a2:45:07:f2:81:0f:1c:58:f0:35:b1:35:
                    8e:59:2c:52:be:2f:f8:f5:ea:98:93:10:49:a9:ae:
                    dd:37:b9:3c:1c:da:fc:43:ed:8f:68:9c:cf:7c:00:
                    bd:ef:ed:cf:a8:9d:fb:03:40:e6:01:00:c9:56:81:
                    63:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9B:12:B0:73:6E:7D:06:F1:CB:EB:6A:E8:F2:0D:18:5F:4D:09:32
            X509v3 Authority Key Identifier:
                keyid:37:E8:28:44:0D:52:26:3C:96:89:55:1A:3A:80:8A:65:8D:6B:34:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqqASvj9jUwRfgiejmK57B6TPDm5EPmWrPeBbzbkUE4p/0/37E828440D52263C9689551A3A808A658D6B34EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E828440D52263C9689551A3A808A658D6B34EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqqASvj9jUwRfgiejmK57B6TPDm5EPmWrPeBbzbkUE4p/0/34352e3137392e3230342e302f32322d3234203d3e20323639313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:ac:81:e0:9f:e9:92:35:59:20:a2:27:18:de:93:fd:2e:7e:
         c4:55:1f:a4:00:b4:6a:6e:0d:8a:73:2e:1d:d0:9b:81:65:d4:
         2b:67:a7:03:94:07:e2:77:7a:d9:17:6c:98:45:f5:b0:14:a8:
         6d:47:e0:c8:0b:64:e7:8f:3a:c1:d8:e0:ca:12:b9:01:7f:e1:
         0f:80:32:93:10:07:a7:23:ad:b6:10:c4:d3:c0:ef:b0:60:8a:
         5b:a4:b4:02:43:59:d8:44:2e:1f:b5:73:84:df:da:8b:14:75:
         af:3e:59:a4:06:33:1e:e3:93:51:27:e9:9c:8e:f3:22:f0:a1:
         fc:8b:67:68:44:20:a8:ad:f5:9b:d2:67:43:b1:bb:2e:54:35:
         23:7e:86:af:a4:85:54:3d:fd:09:81:63:60:d5:5c:5b:ab:20:
         9f:57:eb:e6:a2:1f:bf:27:33:45:13:89:77:d4:89:93:90:c1:
         f9:ae:5b:f4:e9:b4:82:be:5e:a7:98:76:ec:4c:4b:9d:ca:dd:
         dc:96:ae:27:d3:33:fe:10:4c:48:af:64:18:5c:23:ce:91:80:
         ff:b8:51:4f:9f:e3:7e:44:54:81:ee:14:1d:76:bd:25:08:23:
         14:8d:70:62:1b:e6:e4:6d:fa:b8:c1:ad:5a:b0:f9:9c:be:9d:
         d1:38:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:44 2025 by rpki-client