Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139342e302f32332d3233203d3e20323636393438.roa
File:                     34352e3232352e3139342e302f32332d3233203d3e20323636393438.roa (raw, json)
Hash identifier:          Qlyv03ytdejRTaiQop4INSXZX70/6GHi/UG3F4NDZGE=
Subject key identifier:   53:5C:E2:66:18:A1:05:47:E2:69:5C:4E:74:47:30:EB:E4:4C:B9:2E
Certificate issuer:       /CN=21846FD68091A2016CCF764693C6904AC8FF62A9
Certificate serial:       70E0002D23BBA32847CE66A7A258B402D0305FDC
Authority key identifier: 21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139342e302f32332d3233203d3e20323636393438.roa
Signing time:             Mon 29 Jul 2024 17:34:19 +0000
ROA not before:           Mon 29 Jul 2024 17:29:19 +0000
ROA not after:            Mon 28 Jul 2025 17:34:19 +0000
asID:                     266948
IP address blocks:        45.225.194.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e0:00:2d:23:bb:a3:28:47:ce:66:a7:a2:58:b4:02:d0:30:5f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846FD68091A2016CCF764693C6904AC8FF62A9
        Validity
            Not Before: Jul 29 17:29:19 2024 GMT
            Not After : Jul 28 17:34:19 2025 GMT
        Subject: CN=535CE26618A10547E2695C4E744730EBE44CB92E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:3f:30:ae:58:1b:bf:04:ed:9f:b0:35:8a:
                    3c:9d:7d:db:a2:98:6b:bc:28:13:05:68:48:fb:28:
                    09:fb:22:07:8a:d1:64:f0:c2:d0:c8:f3:3c:5c:90:
                    59:08:09:f4:54:82:8d:09:19:99:7c:7e:62:e6:44:
                    97:99:3d:ae:5e:63:14:15:21:93:f1:f0:21:96:83:
                    d6:53:12:9d:58:f7:40:af:86:47:8a:f0:39:e2:85:
                    e2:86:87:e1:9e:ff:19:33:c8:79:88:9c:21:cb:78:
                    50:d6:cc:cf:72:ae:b9:93:58:13:a6:fd:3f:da:9b:
                    5b:f2:3b:5b:30:41:9b:b2:fa:9c:d6:ba:5f:60:7b:
                    23:11:d6:de:0e:6d:33:94:f4:88:9b:ab:db:4a:8c:
                    8d:36:52:7c:1d:97:50:40:6a:e0:24:27:3f:9e:31:
                    9f:ad:fc:79:20:6f:a6:f1:a1:e9:15:02:26:42:20:
                    b0:28:8f:b8:2c:28:4b:07:e2:f5:f0:d1:42:dc:98:
                    16:90:6f:89:b5:85:f7:cb:c4:b3:5f:ea:6e:70:00:
                    b5:6e:1c:b0:aa:18:4e:05:a1:06:5c:f3:96:65:47:
                    dd:19:3e:bd:c4:b2:ad:4e:b0:a3:cd:da:9d:d7:59:
                    c7:c0:89:c5:36:77:8b:85:db:ef:34:11:45:24:0f:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5C:E2:66:18:A1:05:47:E2:69:5C:4E:74:47:30:EB:E4:4C:B9:2E
            X509v3 Authority Key Identifier:
                keyid:21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/21846FD68091A2016CCF764693C6904AC8FF62A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139342e302f32332d3233203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:93:8f:c5:aa:c8:78:46:6a:e7:dc:9f:c4:46:c5:b4:6d:aa:
         d6:97:ef:3f:c7:49:fa:df:f2:8f:02:a3:86:d5:92:23:9d:0f:
         54:76:6a:34:77:e5:00:06:32:49:28:32:53:22:e1:fd:50:cf:
         70:75:a2:e4:fe:e8:f6:6c:25:2a:95:54:3a:a7:01:84:29:c9:
         1e:62:c1:db:7e:f3:98:45:ad:47:52:ed:34:93:d2:dc:1d:81:
         0f:81:c3:7e:f5:70:4f:7b:66:56:06:97:46:61:34:58:82:76:
         e9:46:26:c9:3a:f7:b2:65:99:25:3f:d9:7b:9f:a8:5c:b3:0f:
         0f:d7:33:d5:6a:3f:e7:0e:01:1f:3f:e1:ee:6e:a8:4e:9d:f9:
         7f:af:06:cb:c5:25:a7:65:2d:57:e8:2c:b9:fa:d8:32:5d:cb:
         9a:cf:46:5c:f2:c0:c2:dc:76:97:64:de:0f:51:84:bc:c9:cf:
         91:1f:cb:70:e4:fd:c3:23:79:fa:28:9a:b2:7f:99:18:30:66:
         b4:84:89:b1:2b:f1:e8:1a:61:58:bc:00:dc:fe:d3:82:89:15:
         7c:90:59:13:4f:5b:d6:29:bc:75:ee:2f:c5:02:dc:0a:61:aa:
         13:57:dd:55:c6:26:27:6d:c5:1c:ab:37:4a:d4:27:bb:3b:a1:
         0d:09:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:44 2025 by rpki-client