Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32322d3234203d3e20323639363635.roa
File:                     34352e3139312e33322e302f32322d3234203d3e20323639363635.roa (raw, json)
Hash identifier:          JDi19HThoaDHC4j7Cso8T70+hjjYtBI3hHgkShJMX8s=
Subject key identifier:   1F:D9:91:3C:EE:BA:5D:30:0A:33:53:73:55:4B:4C:55:A2:99:A4:06
Certificate issuer:       /CN=79241FBA9AAD7341C88B292B6A38B1FC7F4BDB57
Certificate serial:       44CA8E1B1788C36367B123ED15358A64B01815FC
Authority key identifier: 79:24:1F:BA:9A:AD:73:41:C8:8B:29:2B:6A:38:B1:FC:7F:4B:DB:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79241FBA9AAD7341C88B292B6A38B1FC7F4BDB57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32322d3234203d3e20323639363635.roa
Signing time:             Sat 24 Feb 2024 13:15:15 +0000
ROA not before:           Sat 24 Feb 2024 13:10:15 +0000
ROA not after:            Sat 22 Feb 2025 13:15:15 +0000
asID:                     269665
IP address blocks:        45.191.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ca:8e:1b:17:88:c3:63:67:b1:23:ed:15:35:8a:64:b0:18:15:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79241FBA9AAD7341C88B292B6A38B1FC7F4BDB57
        Validity
            Not Before: Feb 24 13:10:15 2024 GMT
            Not After : Feb 22 13:15:15 2025 GMT
        Subject: CN=1FD9913CEEBA5D300A335373554B4C55A299A406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:06:52:df:a2:e3:d8:18:bc:09:7f:f2:11:
                    9a:64:5b:fe:ed:01:ec:5d:a5:a9:07:1d:ff:e8:b0:
                    9a:e5:78:5a:0f:4f:1b:40:51:25:be:7e:c2:c1:5f:
                    0b:e9:73:ff:38:c7:68:a1:f5:d6:6e:f5:13:e7:b8:
                    71:93:ec:85:87:a6:8b:dd:e4:d4:f0:5b:5e:0d:5d:
                    d9:c9:9a:22:c5:05:97:d7:26:45:bf:07:53:2c:a1:
                    04:aa:cd:09:83:7b:61:bd:e7:b6:b3:de:18:13:5f:
                    04:1c:59:76:50:03:6d:71:db:df:6b:80:e9:c5:99:
                    1f:d8:2e:54:0b:3f:76:18:4e:b7:e7:07:7b:ed:1b:
                    e7:23:6b:08:0f:5f:24:a5:db:f0:dc:47:19:bc:5a:
                    ae:45:07:a8:82:b2:1d:b1:68:50:bf:12:29:d9:5e:
                    d3:27:d5:c7:4c:6c:b1:07:a0:3a:0f:a5:37:52:b9:
                    5c:80:bc:9f:29:6b:e4:c2:03:fe:4f:01:31:71:36:
                    51:1b:cb:14:0f:4c:48:af:20:15:2f:bf:9e:44:e4:
                    6f:0b:40:eb:d6:97:44:22:37:65:53:27:e2:4b:17:
                    6b:3e:7b:65:8c:f3:77:f9:ca:53:6d:b0:e8:73:94:
                    5d:a1:3e:e0:80:17:d3:b4:05:f3:fa:0d:58:b0:3b:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D9:91:3C:EE:BA:5D:30:0A:33:53:73:55:4B:4C:55:A2:99:A4:06
            X509v3 Authority Key Identifier:
                keyid:79:24:1F:BA:9A:AD:73:41:C8:8B:29:2B:6A:38:B1:FC:7F:4B:DB:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/79241FBA9AAD7341C88B292B6A38B1FC7F4BDB57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79241FBA9AAD7341C88B292B6A38B1FC7F4BDB57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32322d3234203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:1a:57:67:0c:1b:37:3d:1e:c9:ca:4f:ee:7a:70:a4:79:c5:
         c5:14:c4:3c:e8:b4:d4:a8:54:e8:60:73:1d:a6:8c:2b:ee:c1:
         f7:d6:2f:aa:c1:10:1c:8c:7b:b1:ff:13:b7:72:06:24:1d:82:
         47:75:d6:e3:80:b6:14:64:22:6e:8e:c7:7d:f2:bd:6e:a8:2d:
         23:19:6d:3c:5a:90:c2:c9:43:b2:86:31:cf:15:61:56:e9:99:
         57:fe:bc:fd:b9:4e:ba:1a:4a:6a:a5:61:a9:cf:4e:79:ae:2d:
         ae:cd:d5:ee:28:c1:d0:06:ca:fe:bc:f3:68:bf:5b:c2:78:b6:
         d3:49:67:d1:04:c3:8b:b8:44:bd:ad:b2:22:3e:62:4d:f3:21:
         06:a5:fd:9a:a7:39:75:6a:2f:db:01:a1:aa:06:d4:18:b2:3b:
         aa:f2:1e:15:0f:1f:4e:69:26:70:f7:e5:d3:11:fd:0b:61:a5:
         80:cf:5f:44:9d:31:b4:36:6e:98:85:a6:ee:bd:17:05:c9:8b:
         24:d0:ef:11:25:70:e4:0b:95:2c:e8:d2:02:63:65:f0:e3:09:
         af:48:a7:63:57:46:7e:3c:67:0b:91:34:1d:07:55:63:9f:1b:
         a6:0a:da:27:9a:a5:ae:2e:7b:5b:f3:1a:d9:61:5a:3b:31:60:
         de:e7:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:28:32 2025 by rpki-client