Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136302e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136302e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          lmdGY6SIi1gAvMnIm6yg4VToua50pZ3S+kJVjI8WRSc=
Subject key identifier:   71:3B:6D:04:85:DA:B5:9A:D8:84:6C:AA:8F:2D:6C:E8:9A:B3:6C:92
Certificate issuer:       /CN=8723709C4D690CFE7D7971537037FC3C8E195928
Certificate serial:       0301FB0845913AB835B4ACBF9F5FEC0F9AA88686
Authority key identifier: 87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136302e302f32342d3234203d3e20323636313936.roa
Signing time:             Sun 29 Dec 2024 13:32:46 +0000
ROA not before:           Sun 29 Dec 2024 13:27:46 +0000
ROA not after:            Sun 28 Dec 2025 13:32:46 +0000
asID:                     266196
IP address blocks:        45.6.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:01:fb:08:45:91:3a:b8:35:b4:ac:bf:9f:5f:ec:0f:9a:a8:86:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8723709C4D690CFE7D7971537037FC3C8E195928
        Validity
            Not Before: Dec 29 13:27:46 2024 GMT
            Not After : Dec 28 13:32:46 2025 GMT
        Subject: CN=713B6D0485DAB59AD8846CAA8F2D6CE89AB36C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:8a:e8:41:2a:96:ca:9b:49:d3:ff:36:f4:
                    4b:2b:6d:5a:a2:e5:5e:e6:16:b5:2d:1b:42:6a:9d:
                    a6:db:0d:88:55:6c:4f:07:1c:68:4d:e0:4d:8d:24:
                    39:1f:d6:cb:f7:3c:6a:4d:95:ee:2b:80:a0:80:0b:
                    55:d7:be:d2:01:3f:34:88:53:09:61:80:d3:65:af:
                    10:38:9d:49:6d:95:cf:ea:dd:55:a0:90:4b:4a:0a:
                    1f:44:6a:1f:0c:e2:f7:ab:82:2b:09:fe:6a:38:23:
                    dd:19:c0:74:4f:f0:cf:57:18:24:7b:8a:eb:d6:02:
                    6a:15:3b:12:78:75:9b:82:dd:99:a6:1b:e7:ff:51:
                    38:74:01:3d:0a:e3:06:4c:14:23:19:8a:66:34:22:
                    f8:5d:87:da:47:87:b3:85:39:09:7c:95:56:8f:03:
                    f8:69:6a:8c:83:41:98:75:45:16:97:40:f4:77:38:
                    cf:6d:60:04:bc:0f:a8:d0:17:55:c9:fb:99:9a:90:
                    3c:f0:04:66:67:57:bf:04:9f:ba:1e:be:c9:19:91:
                    65:b2:98:a7:df:8a:ee:4c:e5:96:ce:88:e5:9c:8b:
                    78:78:f2:e7:a8:9e:69:8a:82:c5:b6:77:17:3e:d4:
                    bc:88:67:02:ac:a4:8d:f6:ba:fa:70:07:44:b9:e8:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3B:6D:04:85:DA:B5:9A:D8:84:6C:AA:8F:2D:6C:E8:9A:B3:6C:92
            X509v3 Authority Key Identifier:
                keyid:87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136302e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:54:bd:34:64:10:99:9d:b3:83:f7:d4:8d:8c:46:87:80:e0:
         49:2c:4d:7c:ab:03:cd:68:02:93:56:68:c8:a9:a3:e4:c4:3e:
         40:6a:38:93:5f:eb:dc:fd:c8:af:ee:2e:db:95:ec:c5:9e:e2:
         17:1e:13:95:7d:99:27:06:34:3b:99:89:fa:40:c0:f1:42:a5:
         02:71:07:dd:dc:67:ad:a3:3a:0b:d8:d5:1a:2a:9b:fc:b1:0e:
         61:09:68:bc:d5:75:03:98:cb:5e:e3:9b:6f:93:b9:b9:71:90:
         02:5d:e9:1b:04:fe:c5:27:a2:de:3c:33:a9:c9:24:c0:27:83:
         03:51:c0:3d:19:47:4f:9c:c8:86:b3:6a:9c:3a:70:14:1b:02:
         15:76:d3:ac:63:fe:39:7b:6b:8f:6b:de:10:f7:3f:82:97:3b:
         6d:1d:99:b2:2c:9b:dc:52:84:ed:eb:58:0b:e7:78:10:aa:74:
         6f:f2:48:55:d8:26:6d:68:53:b9:7d:0d:94:a5:9a:81:45:88:
         8a:24:b6:3b:6a:5b:a0:8c:da:60:e3:6b:ed:8e:c4:e2:39:da:
         da:98:3c:59:5b:2d:1b:09:22:f7:86:6e:0b:46:d9:7a:bb:f6:
         89:89:74:c4:78:15:cd:5c:86:af:39:a7:cc:3d:0e:43:10:c6:
         b7:ee:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:58:10 2025 by rpki-client