Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136362e302f32332d3332203d3e20323639343434.roa
File:                     34352e3138362e3136362e302f32332d3332203d3e20323639343434.roa (raw, json)
Hash identifier:          V/gpnQVhKFm8cyCOZx3h3+kLU4dga+/UcDqyj7Qep1M=
Subject key identifier:   9D:86:8B:3E:2B:7E:FB:C6:39:A2:25:8B:4C:C3:83:1C:F5:19:F0:0B
Certificate issuer:       /CN=78A85BC823101919BCB85BEEFF44762DC0BE72F2
Certificate serial:       1EE4C3C774F73A986532A0669AB46A40B56B9E27
Authority key identifier: 78:A8:5B:C8:23:10:19:19:BC:B8:5B:EE:FF:44:76:2D:C0:BE:72:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78A85BC823101919BCB85BEEFF44762DC0BE72F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136362e302f32332d3332203d3e20323639343434.roa
Signing time:             Thu 16 Mar 2023 19:00:54 +0000
ROA not before:           Thu 16 Mar 2023 18:55:54 +0000
ROA not after:            Thu 14 Mar 2024 19:00:54 +0000
asID:                     269444
IP address blocks:        45.186.166.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e4:c3:c7:74:f7:3a:98:65:32:a0:66:9a:b4:6a:40:b5:6b:9e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A85BC823101919BCB85BEEFF44762DC0BE72F2
        Validity
            Not Before: Mar 16 18:55:54 2023 GMT
            Not After : Mar 14 19:00:54 2024 GMT
        Subject: CN=9D868B3E2B7EFBC639A2258B4CC3831CF519F00B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1f:7b:91:2e:da:10:05:df:2f:79:44:4e:da:
                    1d:97:35:d2:ce:27:91:94:5d:1a:16:f3:b9:2a:d6:
                    02:ba:a8:6e:29:e9:9e:cd:67:2d:5e:83:a0:44:f9:
                    9a:97:20:3a:80:73:9f:53:18:30:6f:e1:96:07:c0:
                    c8:0b:a7:51:0d:6a:7c:f4:34:92:25:86:e7:31:fa:
                    cc:ec:c3:ce:ff:60:56:f6:bf:5b:b6:0b:1b:8b:78:
                    cf:8b:54:bd:c4:17:22:43:5f:f5:42:e1:82:22:f0:
                    49:c5:1b:2a:82:88:d3:66:cc:b4:85:89:61:a5:33:
                    a3:26:87:9d:76:0a:cb:5c:fb:0b:a1:5f:dc:73:8b:
                    00:f3:16:ee:12:18:48:9e:a7:87:57:db:78:94:d1:
                    fb:18:eb:52:3c:d0:57:da:20:3d:88:7a:6f:5b:34:
                    04:17:60:6b:32:57:7a:24:31:bc:c4:b7:77:a5:ed:
                    50:a4:24:af:5c:a4:f3:3f:1e:f7:f2:e7:bb:e6:6e:
                    1e:d5:e1:3b:4c:90:1e:fc:eb:a3:b1:0f:8b:91:47:
                    25:9c:b5:18:0e:ce:d3:42:26:32:b1:fb:61:5d:21:
                    4f:ba:05:97:cf:db:fe:32:e4:91:a7:04:49:c2:80:
                    9f:ed:72:27:38:d2:47:b3:02:52:e8:f7:3c:59:08:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:86:8B:3E:2B:7E:FB:C6:39:A2:25:8B:4C:C3:83:1C:F5:19:F0:0B
            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:C8:23:10:19:19:BC:B8:5B:EE:FF:44:76:2D:C0:BE:72:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/78A85BC823101919BCB85BEEFF44762DC0BE72F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78A85BC823101919BCB85BEEFF44762DC0BE72F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/34352e3138362e3136362e302f32332d3332203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:5b:97:9a:96:be:cb:cf:a7:db:67:44:ac:bc:e1:7c:fb:4b:
         7b:c7:c4:e4:e6:f6:82:44:9e:4c:fb:dd:c0:b9:18:fe:35:22:
         ee:31:f8:c1:0d:e5:d2:5c:3d:02:2c:56:94:ba:08:0b:45:6f:
         d1:07:b0:08:1d:26:cb:08:92:9a:44:05:7a:87:25:94:82:4a:
         f2:49:36:a2:86:57:c4:91:5d:0d:68:27:04:d0:47:32:e0:44:
         20:42:92:22:ab:88:2c:8d:11:d8:7d:86:2b:5d:41:f2:3a:03:
         d5:cb:94:d4:8a:01:7e:8a:82:44:9c:01:e6:14:ba:cc:28:c3:
         c9:9f:23:86:14:a9:0b:53:48:7a:9c:f1:d3:0a:5b:17:6b:b4:
         01:9e:d7:20:09:3c:6d:60:36:99:fd:11:75:18:24:0c:d6:11:
         42:78:69:2d:fd:78:7e:7e:67:9b:41:54:3c:09:2c:e7:7c:16:
         80:28:3b:c7:8d:8f:a5:49:b7:6f:f6:7f:0e:c9:7b:1c:ec:36:
         17:8a:4f:f2:59:2c:6e:e5:5f:14:1e:a0:f1:02:ac:0a:33:1f:
         45:40:29:c6:27:2f:81:c0:2f:d0:a8:44:d3:51:a9:74:85:5b:
         59:8f:ba:b5:b1:d2:9d:2f:b3:4e:e1:1a:75:4d:c7:90:f6:d4:
         9d:ef:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:27 2025 by rpki-client