Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35352e302f32342d3234203d3e20323639353738.roa
File:                     34352e3138392e35352e302f32342d3234203d3e20323639353738.roa (raw, json)
Hash identifier:          lB+1EstYe+r4xcIBZ4POfNUFhKzDGoRA/BY1jBnx+TA=
Subject key identifier:   0E:20:95:04:C0:48:C4:71:6D:CF:28:B3:42:BD:36:B8:E8:88:C5:8B
Certificate issuer:       /CN=CC34520B595FF4E20FC1BC7F108928DB78BF1C7F
Certificate serial:       0BE0915C9F5D6ABF58DDA41CB7288F1EDD6377A5
Authority key identifier: CC:34:52:0B:59:5F:F4:E2:0F:C1:BC:7F:10:89:28:DB:78:BF:1C:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35352e302f32342d3234203d3e20323639353738.roa
Signing time:             Mon 30 Oct 2023 20:56:59 +0000
ROA not before:           Mon 30 Oct 2023 20:51:59 +0000
ROA not after:            Mon 28 Oct 2024 20:56:59 +0000
asID:                     269578
IP address blocks:        45.189.55.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e0:91:5c:9f:5d:6a:bf:58:dd:a4:1c:b7:28:8f:1e:dd:63:77:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC34520B595FF4E20FC1BC7F108928DB78BF1C7F
        Validity
            Not Before: Oct 30 20:51:59 2023 GMT
            Not After : Oct 28 20:56:59 2024 GMT
        Subject: CN=0E209504C048C4716DCF28B342BD36B8E888C58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:d4:30:46:9d:c6:ca:f6:a4:09:84:be:1b:
                    85:0e:4c:12:58:82:7b:20:96:06:05:36:76:a2:4d:
                    6b:d6:ee:71:1f:4e:3d:8b:84:0c:24:11:8d:0f:ad:
                    2d:89:bd:6b:5e:7b:68:fa:5f:3f:d7:9d:3a:e9:50:
                    72:f0:b6:b7:58:42:79:4f:3c:78:81:a2:e2:d1:ea:
                    af:cd:b0:a8:61:0c:ad:d8:3d:4d:06:52:38:af:48:
                    1b:d4:79:3e:9e:9e:fa:87:19:8c:1a:ee:21:2e:ac:
                    8f:e8:5b:78:92:66:f9:16:c2:7c:06:b9:d5:6a:1e:
                    33:9b:2e:ff:e9:fd:dc:47:6b:80:c1:65:c0:9a:81:
                    76:87:01:ae:b9:e7:5e:6a:0a:74:8b:fe:2b:5f:c0:
                    ba:ea:07:6c:17:23:ed:0b:3d:2b:83:a3:6e:4a:36:
                    b6:d6:d8:f3:6a:7f:da:b3:e5:4a:b3:26:e9:e1:74:
                    fe:49:39:71:f3:01:a7:a8:f1:c6:86:28:9f:95:d8:
                    25:af:12:57:f1:68:3e:01:b3:c2:3c:00:ed:d8:e8:
                    d1:9d:0f:42:ba:14:d1:49:61:1a:e2:42:d9:9f:73:
                    8a:d1:bb:f8:11:70:48:0c:e0:d3:c9:82:a1:44:d3:
                    d9:68:64:5a:6d:e1:de:5d:6c:83:02:9c:f8:0e:f9:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:20:95:04:C0:48:C4:71:6D:CF:28:B3:42:BD:36:B8:E8:88:C5:8B
            X509v3 Authority Key Identifier:
                keyid:CC:34:52:0B:59:5F:F4:E2:0F:C1:BC:7F:10:89:28:DB:78:BF:1C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC34520B595FF4E20FC1BC7F108928DB78BF1C7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCzNntug48WenT1GwTBiUecJ5KUksdRNXMTLJMBKvthR/0/34352e3138392e35352e302f32342d3234203d3e20323639353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:5e:1a:e6:a5:f4:87:e1:0a:83:03:5c:b6:ab:2f:42:4d:
         ac:28:5c:82:54:96:dd:2a:35:5c:ac:c7:fa:71:76:92:e9:1b:
         61:1d:f9:dd:85:bd:83:e0:16:d5:82:1c:47:30:48:bd:98:93:
         37:7f:d2:33:52:8e:1b:a5:cf:77:e2:dc:b6:a6:c2:ed:9a:7d:
         bc:99:08:63:49:e1:09:f8:0a:4a:99:9b:a8:79:98:a7:b5:22:
         8a:f4:02:c0:ae:07:9f:29:04:91:a9:4c:28:1a:f8:54:91:83:
         64:d8:3f:2a:d6:b5:92:de:22:c9:f7:16:50:fc:9a:5e:51:8b:
         ae:ac:74:20:05:d5:18:b3:3d:bc:01:cf:27:c4:15:7a:56:8e:
         9a:1c:aa:34:60:52:d3:ce:24:03:a2:14:be:f7:32:24:20:56:
         7f:41:62:ac:5c:81:ee:75:78:44:4e:a4:8b:9d:5d:42:6c:de:
         51:e2:a5:f3:7e:dc:b0:65:ef:84:aa:b6:51:24:ee:0f:74:e7:
         c6:8d:ab:e3:87:98:4d:c9:68:4c:8a:9a:9a:e7:b0:15:86:52:
         54:7f:2b:b9:b8:b1:cb:14:14:0d:48:54:7c:d0:e0:a4:a2:2b:
         57:d2:18:3b:d3:a0:6b:74:56:1d:68:b3:79:0f:2b:4c:71:bf:
         c1:10:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:55:16 2025 by rpki-client