Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/1/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa
File:                     34352e3139312e33322e302f32342d3234203d3e20323639363635.roa (raw, json)
Hash identifier:          jvzwk84ledPBEy0hA5DvRa42Ds1vb9hUWwVMdbtrAy8=
Subject key identifier:   1D:FA:FD:37:8A:E3:27:65:33:E7:A4:CA:B2:88:21:D8:79:33:18:0B
Certificate issuer:       /CN=C4044C3EF6708490018AF81FD2B4D6E2657DC055
Certificate serial:       7C717344A10A44BE4CD64D678BE8A938F9D0DE26
Authority key identifier: C4:04:4C:3E:F6:70:84:90:01:8A:F8:1F:D2:B4:D6:E2:65:7D:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4044C3EF6708490018AF81FD2B4D6E2657DC055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/1/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa
Signing time:             Thu 14 Dec 2023 14:16:19 +0000
ROA not before:           Thu 14 Dec 2023 14:11:19 +0000
ROA not after:            Thu 12 Dec 2024 14:16:19 +0000
asID:                     269665
IP address blocks:        45.191.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:71:73:44:a1:0a:44:be:4c:d6:4d:67:8b:e8:a9:38:f9:d0:de:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4044C3EF6708490018AF81FD2B4D6E2657DC055
        Validity
            Not Before: Dec 14 14:11:19 2023 GMT
            Not After : Dec 12 14:16:19 2024 GMT
        Subject: CN=1DFAFD378AE3276533E7A4CAB28821D87933180B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0c:e3:cd:b5:c4:42:51:f3:89:71:75:64:e1:
                    59:76:49:70:16:c2:40:5d:47:59:b1:9d:32:af:93:
                    71:84:cc:eb:67:52:fc:4c:e9:96:a9:7d:a8:b6:3b:
                    b3:3c:6b:ca:a0:9b:00:ba:b6:46:bb:bc:ea:94:bb:
                    2c:6b:0d:31:4e:20:91:91:af:16:41:c2:51:08:64:
                    a8:53:86:a3:2f:46:27:7b:22:5a:c1:de:d0:92:d1:
                    03:56:bd:d6:21:73:8e:aa:c2:c9:3d:89:8d:64:58:
                    6f:bb:df:3a:02:be:5b:5a:0a:76:55:cc:20:89:cc:
                    c0:f3:aa:f6:31:36:df:f7:36:7d:b6:ad:6f:0d:ac:
                    15:55:c0:c2:54:f1:99:cd:76:9f:aa:4e:0e:a1:19:
                    10:f1:e3:e2:a5:4a:72:de:7d:58:f1:cd:1b:00:5c:
                    70:b3:25:5b:15:b4:d5:0b:91:9a:4b:91:79:6c:d6:
                    f7:3d:28:05:c4:d1:6a:01:93:e3:3d:0a:1d:24:bf:
                    b4:c5:7c:fd:c6:b5:38:4e:c6:4b:28:60:64:46:ea:
                    9a:85:62:b7:0f:2f:6d:1c:15:84:cc:1e:88:b8:d9:
                    42:e5:38:de:a4:29:ba:d0:64:85:4f:60:c1:f1:aa:
                    92:9f:4d:00:53:d0:27:e9:14:c1:57:24:19:e8:ac:
                    f5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FA:FD:37:8A:E3:27:65:33:E7:A4:CA:B2:88:21:D8:79:33:18:0B
            X509v3 Authority Key Identifier:
                keyid:C4:04:4C:3E:F6:70:84:90:01:8A:F8:1F:D2:B4:D6:E2:65:7D:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/1/C4044C3EF6708490018AF81FD2B4D6E2657DC055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4044C3EF6708490018AF81FD2B4D6E2657DC055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/1/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:5b:4c:10:ed:59:c1:b1:22:4f:a3:b6:9e:4d:7f:51:f5:50:
         24:54:df:16:94:16:07:b5:0a:ac:b4:90:16:98:47:ac:f7:bb:
         bf:bf:eb:99:43:35:c7:c5:ce:22:a8:3c:02:cb:36:bb:08:4a:
         0d:ab:f5:72:84:20:34:51:03:b8:81:5f:3e:ab:67:12:ff:30:
         0c:d3:7f:36:77:0c:3b:d8:35:35:5c:b5:de:c3:5a:4f:c4:e5:
         71:6a:e1:12:b6:0c:e7:5b:a6:bf:2e:de:33:c5:5b:27:5e:c6:
         e5:a7:2e:de:b4:58:5e:6f:f9:2b:6f:ed:04:bd:47:56:7c:90:
         99:49:89:8e:0c:46:2a:bb:c1:67:e1:7b:4c:12:2a:74:8e:9c:
         0c:81:27:a6:10:a1:57:f7:49:d5:c3:fe:f2:c3:bd:c9:0d:be:
         b7:4c:a5:ce:1a:0b:24:fd:d3:7f:cd:70:e1:f4:c5:9e:0e:52:
         98:f2:ce:a9:f2:e3:79:e8:16:10:8e:82:54:81:47:6e:9c:d3:
         66:d6:8a:9e:fe:7f:75:87:61:8c:93:42:3a:6c:bb:ce:77:f6:
         b9:c7:50:db:d9:40:42:2c:f1:06:99:ff:92:a8:67:38:1f:46:
         38:69:42:4d:65:8d:9a:55:3e:c9:0e:6b:ee:51:c5:ed:a6:e2:
         85:91:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:07 2025 by rpki-client