Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1/34352e3139312e31372e302f32342d3234203d3e20323639363538.roa
File:                     34352e3139312e31372e302f32342d3234203d3e20323639363538.roa (raw, json)
Hash identifier:          /5wWHVm3mCJevGKvrdoYvMlwP3sMrgxQw8OEpwJEddU=
Subject key identifier:   1D:56:4A:84:2C:B9:F3:AB:ED:6E:71:B5:40:88:76:AA:78:36:73:84
Certificate issuer:       /CN=A1FED06F7D1405C340D123EC721C6A72F607A3D4
Certificate serial:       472CCD3ECF0B1D8DDFA7CA2CCCE8E538E361A78C
Authority key identifier: A1:FE:D0:6F:7D:14:05:C3:40:D1:23:EC:72:1C:6A:72:F6:07:A3:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FED06F7D1405C340D123EC721C6A72F607A3D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1/34352e3139312e31372e302f32342d3234203d3e20323639363538.roa
Signing time:             Fri 18 Aug 2023 11:13:47 +0000
ROA not before:           Fri 18 Aug 2023 11:08:47 +0000
ROA not after:            Fri 16 Aug 2024 11:13:47 +0000
asID:                     269658
IP address blocks:        45.191.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2c:cd:3e:cf:0b:1d:8d:df:a7:ca:2c:cc:e8:e5:38:e3:61:a7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1FED06F7D1405C340D123EC721C6A72F607A3D4
        Validity
            Not Before: Aug 18 11:08:47 2023 GMT
            Not After : Aug 16 11:13:47 2024 GMT
        Subject: CN=1D564A842CB9F3ABED6E71B5408876AA78367384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:c1:7a:a0:11:59:30:db:46:77:7b:04:f3:
                    96:a8:6c:45:f5:ce:f0:65:a0:bd:a8:1a:ad:60:c0:
                    c4:ed:cc:e3:48:2a:54:44:f7:e8:0a:0e:49:f1:c2:
                    62:ec:ae:c9:01:92:20:1a:dc:05:77:e3:a8:ad:65:
                    4f:36:55:be:79:d0:71:d5:20:5d:6a:2b:e5:de:7f:
                    3a:86:38:0c:e9:e8:86:58:03:a0:c2:d4:89:c3:2a:
                    02:28:b1:10:7a:0a:c0:89:4c:b7:00:9d:b2:07:31:
                    22:62:d8:5f:ee:83:02:2e:07:22:d5:da:36:15:a1:
                    7b:4e:89:7c:70:45:bf:7c:c0:07:ed:48:ec:70:0a:
                    f9:f8:b0:9d:5d:b4:4e:be:d7:85:0f:65:35:f7:cb:
                    30:b6:e4:76:5d:39:b7:df:97:2d:19:c3:0e:91:df:
                    e5:a9:a0:0f:dd:9b:d3:c7:1a:9a:73:93:34:3e:19:
                    be:46:b1:d7:df:b6:03:da:d6:8f:11:04:4c:47:84:
                    91:39:20:41:b9:d2:5c:1b:99:d3:61:13:9f:8f:c4:
                    88:0b:30:12:9b:3f:f6:90:e7:b1:c9:d8:f0:ce:d7:
                    63:29:ff:ee:b6:2f:21:c8:2b:49:61:7b:78:3d:3b:
                    e6:3a:36:57:57:40:05:33:b6:b4:80:1f:50:59:33:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:56:4A:84:2C:B9:F3:AB:ED:6E:71:B5:40:88:76:AA:78:36:73:84
            X509v3 Authority Key Identifier:
                keyid:A1:FE:D0:6F:7D:14:05:C3:40:D1:23:EC:72:1C:6A:72:F6:07:A3:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1/A1FED06F7D1405C340D123EC721C6A72F607A3D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FED06F7D1405C340D123EC721C6A72F607A3D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/1/34352e3139312e31372e302f32342d3234203d3e20323639363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:2e:f3:e1:9f:0d:34:30:63:e7:22:6e:e5:ea:ca:d8:93:
         cc:07:36:fe:b8:8b:d3:43:23:ef:5f:37:99:91:c9:38:dd:1e:
         eb:63:1c:49:f3:60:2e:b5:c4:de:cf:6c:8d:d4:7a:be:3c:2c:
         a9:91:ba:a3:2f:5b:83:22:40:ed:d7:bc:ad:a6:33:dc:86:d1:
         c0:93:2f:57:cf:a3:97:a1:75:95:c3:e8:52:d1:48:07:0b:70:
         6c:f8:d9:66:fd:5f:b9:7b:35:04:db:59:69:b8:e8:bf:f7:fd:
         d8:7d:6b:45:1e:cb:91:78:b6:57:0a:2d:70:d5:2a:34:eb:55:
         87:c7:55:f1:62:9d:fe:de:c1:63:cc:9c:37:32:7c:d0:d7:ba:
         e8:05:32:bd:9a:0f:2a:a3:16:99:8c:d4:73:99:ea:e8:f9:82:
         d8:b2:b6:45:8b:f7:95:1d:9b:f0:78:43:28:69:ae:a5:6f:97:
         0f:08:11:86:57:9f:d4:51:be:5b:b1:8f:eb:54:01:77:c3:20:
         dd:f4:32:2f:14:50:58:14:68:69:be:73:e2:df:50:c2:b3:a8:
         ba:2c:f7:be:3f:7a:89:50:8f:c5:c2:fb:05:8e:87:2a:f1:77:
         9c:ab:c2:39:e0:0d:ec:fb:f9:1e:6c:eb:c4:06:68:69:38:62:
         6c:f0:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:12 2025 by rpki-client