Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134392e302f32342d3234203d3e20323638333732.roa
File:                     34352e3233392e3134392e302f32342d3234203d3e20323638333732.roa (raw, json)
Hash identifier:          nNCq9LKRkswGNt38HRgiq4tgFB2/+4p57qe3C0QLodc=
Subject key identifier:   91:D2:C6:16:60:2C:7D:8D:07:B8:92:F3:21:6C:A8:AD:E5:CB:05:15
Certificate issuer:       /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial:       7CA643A2A929F477C224A7D6A4C45E4898CE1B2F
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134392e302f32342d3234203d3e20323638333732.roa
Signing time:             Tue 10 Dec 2024 12:53:43 +0000
ROA not before:           Tue 10 Dec 2024 12:48:43 +0000
ROA not after:            Tue 09 Dec 2025 12:53:43 +0000
asID:                     268372
IP address blocks:        45.239.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a6:43:a2:a9:29:f4:77:c2:24:a7:d6:a4:c4:5e:48:98:ce:1b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
        Validity
            Not Before: Dec 10 12:48:43 2024 GMT
            Not After : Dec  9 12:53:43 2025 GMT
        Subject: CN=91D2C616602C7D8D07B892F3216CA8ADE5CB0515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:91:37:69:ed:e4:e5:df:3a:59:f1:20:ec:
                    a9:ef:3e:26:62:04:4e:da:bc:60:ab:c6:11:72:8a:
                    40:59:fd:a1:fe:bb:c8:b7:30:d5:ef:06:cc:b3:20:
                    62:3f:05:18:8d:7f:65:75:a0:05:b9:48:fb:9d:a2:
                    79:e5:b5:a3:d8:a5:45:95:a7:d8:cd:2e:08:c0:cb:
                    f4:8e:42:7a:bc:ee:8c:22:ce:4a:69:7a:be:f1:12:
                    9a:f7:c7:9b:68:a6:0f:29:21:b9:67:c8:fc:04:40:
                    1e:1e:f9:ff:ce:92:8b:4b:04:62:77:09:e0:3e:a0:
                    ac:6a:f9:4e:44:49:02:b5:10:fd:5d:71:c2:29:9e:
                    c3:37:93:f9:30:38:5e:03:e9:72:6f:33:82:be:4f:
                    fa:1b:87:e8:e0:91:61:a3:10:48:44:2b:25:19:c1:
                    b9:25:aa:68:d0:96:ab:c7:40:57:30:08:2d:95:bc:
                    d9:8f:86:0a:71:51:b2:0a:14:89:5d:e4:aa:a0:60:
                    1a:4e:e3:9c:a7:f6:c0:71:d1:91:68:d7:60:5c:c7:
                    11:46:79:3a:e5:35:e6:8f:2a:6a:ce:f8:67:c7:ac:
                    cf:70:10:47:85:65:2a:ac:8f:df:18:aa:01:39:e0:
                    ed:51:5f:4f:dd:4f:13:e3:ad:55:b6:96:d4:61:f9:
                    78:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D2:C6:16:60:2C:7D:8D:07:B8:92:F3:21:6C:A8:AD:E5:CB:05:15
            X509v3 Authority Key Identifier:
                keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134392e302f32342d3234203d3e20323638333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:36:cf:5a:b2:0c:45:07:93:fc:73:22:23:61:23:68:bc:1d:
         8b:64:36:18:0d:1d:bb:63:fe:4e:af:c0:0e:63:4a:a6:7e:ab:
         8e:b9:03:b9:0a:fc:cb:61:92:f3:d9:74:54:4c:13:8c:90:89:
         20:d7:aa:90:fe:bf:66:d6:66:de:6b:58:27:27:a1:42:28:e7:
         c2:99:c4:f1:eb:71:95:a9:fd:a9:84:fc:8e:fd:c8:6a:10:0d:
         2a:63:e7:eb:db:0a:3f:01:35:51:7b:b9:06:1b:84:7d:4a:f5:
         d2:92:8a:97:6f:eb:86:07:51:ad:95:2a:22:b3:12:e9:e2:02:
         07:ec:48:1f:32:4e:50:a5:9f:4f:45:4d:b6:79:d2:4c:9f:f4:
         ff:43:01:ec:12:ef:a9:1f:e0:88:9c:59:22:5f:3b:91:02:8c:
         f5:5a:a7:99:ce:f5:05:19:cc:4b:2f:c7:da:a4:e8:24:fa:86:
         45:d7:ee:3c:31:60:be:aa:3c:e2:cd:19:ef:f0:52:f2:eb:27:
         41:e1:6f:0d:4e:a0:1c:5b:4b:cf:4e:4b:12:3b:18:55:81:24:
         23:53:76:5c:d5:35:09:5e:49:7b:74:30:70:71:c1:ca:17:6c:
         38:70:60:82:ba:a7:7e:b3:3c:20:4d:72:15:0a:c8:77:13:d0:
         d8:1f:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:21 2025 by rpki-client