Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136342e302f32342d3332203d3e20323639343434.roa
File:                     34352e3138362e3136342e302f32342d3332203d3e20323639343434.roa (raw, json)
Hash identifier:          dSOIiB843aZzVx8DwsX/d2v1U0hYRQtfZ12R5w5J8X0=
Subject key identifier:   47:A5:5C:22:4C:67:E6:AB:D9:F2:0B:55:5C:5E:EC:FF:59:87:6D:97
Certificate issuer:       /CN=78A85BC823101919BCB85BEEFF44762DC0BE72F2
Certificate serial:       3FE7826A49DD7209D06434079F5E3855965D815B
Authority key identifier: 78:A8:5B:C8:23:10:19:19:BC:B8:5B:EE:FF:44:76:2D:C0:BE:72:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78A85BC823101919BCB85BEEFF44762DC0BE72F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136342e302f32342d3332203d3e20323639343434.roa
Signing time:             Thu 16 Mar 2023 19:00:31 +0000
ROA not before:           Thu 16 Mar 2023 18:55:31 +0000
ROA not after:            Thu 14 Mar 2024 19:00:31 +0000
asID:                     269444
IP address blocks:        45.186.164.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e7:82:6a:49:dd:72:09:d0:64:34:07:9f:5e:38:55:96:5d:81:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A85BC823101919BCB85BEEFF44762DC0BE72F2
        Validity
            Not Before: Mar 16 18:55:31 2023 GMT
            Not After : Mar 14 19:00:31 2024 GMT
        Subject: CN=47A55C224C67E6ABD9F20B555C5EECFF59876D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:38:6f:9d:58:8a:b2:63:31:4d:5e:1e:d1:
                    3a:39:c1:c4:59:69:a3:59:9a:70:70:b6:04:e5:40:
                    00:ff:b3:61:6f:61:0d:40:de:46:9e:03:13:11:fc:
                    68:46:ba:43:0c:30:e6:95:13:96:c3:fd:60:40:e4:
                    b3:1f:ea:be:2e:01:21:5e:4b:f9:84:da:e9:10:62:
                    2b:75:4e:15:ba:ec:7e:9b:d7:c9:13:a8:cb:ad:5a:
                    1a:67:b6:f9:32:23:e2:9f:4c:e9:98:fd:e0:92:4c:
                    ba:2e:a5:10:3b:d1:1b:8d:21:54:2c:1a:e5:fa:ac:
                    29:91:a9:35:59:d6:53:49:37:8b:52:7f:e1:2f:38:
                    bb:d3:0d:4f:1a:d0:e9:7e:41:33:9f:c7:a6:c8:ac:
                    9c:b5:04:5d:3d:8c:3b:b0:06:79:09:ad:dc:81:53:
                    fa:18:57:53:5b:9f:ca:6a:de:89:6e:52:92:11:70:
                    88:87:57:c4:e7:e6:78:95:77:1b:cf:23:4b:3c:6c:
                    73:27:3a:0f:e3:97:1d:1f:84:9c:0c:49:9a:c5:a0:
                    2a:02:84:c7:9d:40:bd:7b:f6:c3:fe:00:89:2a:3d:
                    43:27:8d:10:70:2a:5f:9b:1f:88:64:a2:78:96:5d:
                    8e:d4:42:a6:b8:26:a4:aa:38:1f:be:4f:cb:23:ce:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A5:5C:22:4C:67:E6:AB:D9:F2:0B:55:5C:5E:EC:FF:59:87:6D:97
            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:C8:23:10:19:19:BC:B8:5B:EE:FF:44:76:2D:C0:BE:72:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/78A85BC823101919BCB85BEEFF44762DC0BE72F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78A85BC823101919BCB85BEEFF44762DC0BE72F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136342e302f32342d3332203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:25:cf:f1:08:d5:8f:f2:1a:1a:d4:51:39:a6:46:32:c8:80:
         23:6f:72:e3:6d:5d:b6:8d:ef:23:8b:8a:96:6f:58:80:c9:69:
         7d:c9:77:a5:6d:8f:ed:2a:c7:ea:8a:f1:28:39:b8:58:6b:b1:
         8e:52:87:32:2f:58:b8:95:8d:9c:be:10:0f:91:99:92:71:e1:
         b7:e8:99:75:28:74:94:ee:41:ea:b3:8e:f1:bf:6c:3d:59:76:
         6f:23:b8:e1:73:79:52:16:e2:87:8f:06:f4:ff:a0:8f:6b:1e:
         ff:a3:d1:ab:2d:49:ff:ab:cc:38:e7:bf:49:ec:39:7c:cb:99:
         57:bd:6c:c2:f1:49:b8:45:d6:bc:cd:9b:2b:14:12:7e:93:28:
         4d:8c:a7:9a:e1:35:58:0a:c3:39:2a:ce:b3:13:2a:32:83:70:
         c1:9f:77:e0:ba:d5:6a:cc:d3:12:4c:9f:9b:34:77:e0:fd:b0:
         20:bf:f7:16:2a:c7:5f:0b:80:e8:83:82:fa:40:d6:63:df:e7:
         3c:12:35:f1:7c:23:50:5e:05:8c:77:b2:7a:6c:ee:d4:85:d9:
         d6:4c:df:98:85:aa:d6:91:ae:8d:75:6e:c4:b9:d3:7f:07:16:
         4e:40:f0:98:b5:fd:81:d4:59:6d:9a:ee:2d:10:47:29:57:35:
         df:1e:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:41 2025 by rpki-client