Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34392e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          GEt2qNCqwLNHi+MLyc8GGanebkCprDuXtBjyWS8YrLQ=
Subject key identifier:   A8:C8:9F:14:15:96:16:FE:BC:DB:C6:DE:96:D2:BF:13:7B:AF:8B:A6
Certificate issuer:       /CN=06EA067E007B9311176981678F208CA96CEFDE1D
Certificate serial:       6DF0336735B4B8C3DF52EA55E686948E22F54DF1
Authority key identifier: 06:EA:06:7E:00:7B:93:11:17:69:81:67:8F:20:8C:A9:6C:EF:DE:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34392e302f32342d3234203d3e20323638323035.roa
Signing time:             Mon 03 Feb 2025 03:12:21 +0000
ROA not before:           Mon 03 Feb 2025 03:07:21 +0000
ROA not after:            Mon 02 Feb 2026 03:12:21 +0000
asID:                     268205
IP address blocks:        45.236.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f0:33:67:35:b4:b8:c3:df:52:ea:55:e6:86:94:8e:22:f5:4d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06EA067E007B9311176981678F208CA96CEFDE1D
        Validity
            Not Before: Feb  3 03:07:21 2025 GMT
            Not After : Feb  2 03:12:21 2026 GMT
        Subject: CN=A8C89F14159616FEBCDBC6DE96D2BF137BAF8BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:8b:2d:df:30:4a:8a:00:5d:39:98:6c:52:
                    06:41:c4:63:a3:e3:d2:3f:f6:d8:fe:cc:79:be:9c:
                    6f:df:22:ca:a8:b8:1c:b5:f0:5e:25:b5:68:01:40:
                    28:45:57:80:2e:ba:05:52:e7:5d:7f:63:90:04:60:
                    96:32:fd:b7:a0:b7:48:4e:a9:27:cc:b4:0a:c0:53:
                    c1:06:03:ed:a2:6d:aa:73:cc:8d:d1:59:4f:d0:3b:
                    34:c3:08:3b:4a:71:9f:a3:0b:35:ae:2f:b1:38:11:
                    08:8a:7a:af:02:6a:46:3d:6f:32:ae:bd:44:ed:0d:
                    28:c7:bc:28:96:11:dc:1e:86:ae:51:8a:18:81:b4:
                    ee:78:d7:d4:9b:1b:b7:83:97:ab:c5:8b:c1:3a:e2:
                    ca:e6:20:5b:80:81:dc:2a:d8:e9:7d:c7:04:2e:b3:
                    58:cb:f7:d5:55:db:fd:a3:62:38:e2:b3:57:ca:10:
                    83:ac:72:8d:dd:71:21:51:a5:c1:9d:91:d6:39:ba:
                    3b:d3:f6:c8:28:bd:ea:59:6d:1b:c2:1e:15:df:26:
                    c2:d0:34:5a:44:f9:a2:01:59:90:ae:da:e4:30:83:
                    e2:af:00:40:55:01:01:10:a4:64:63:f2:87:ad:bb:
                    62:30:1a:88:a7:6a:54:1e:3b:3a:57:2d:66:6a:09:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C8:9F:14:15:96:16:FE:BC:DB:C6:DE:96:D2:BF:13:7B:AF:8B:A6
            X509v3 Authority Key Identifier:
                keyid:06:EA:06:7E:00:7B:93:11:17:69:81:67:8F:20:8C:A9:6C:EF:DE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34392e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:1d:9b:9b:3f:50:05:a3:47:19:2d:57:20:1f:38:7b:69:fd:
         fb:0d:c0:87:b0:4c:ef:b7:49:54:fe:b9:c0:42:de:52:d5:cc:
         5a:eb:31:81:b1:54:c5:33:2d:ed:5c:0e:c7:0b:c9:ca:6a:89:
         f0:f9:54:7b:58:a4:a5:ba:a5:97:4c:f1:a9:f7:59:1d:b3:f2:
         5f:6b:39:93:ab:d5:93:48:fe:87:95:af:55:15:c0:95:d8:9a:
         57:0b:a7:40:9e:c2:4d:27:0d:51:5c:e1:ae:46:0f:74:cc:ca:
         0f:1d:e7:c2:5a:61:af:de:9f:8d:02:fe:34:bc:c0:80:ac:5b:
         a2:6b:b6:80:0a:2a:50:45:d7:12:5a:c2:57:32:79:f2:f9:17:
         9e:76:99:cb:ce:b7:bc:a5:4b:a1:bc:36:c2:0e:3b:7f:7f:49:
         5d:3c:c6:4a:2f:0d:16:42:d0:52:6a:18:06:be:d8:42:57:32:
         66:a8:cb:f8:e8:91:2c:da:29:1d:39:2a:f7:cc:02:3b:22:5e:
         ad:89:c9:2c:37:86:ab:a8:33:05:3f:64:e8:3f:14:8f:50:0f:
         1b:26:50:fd:f7:7c:bb:77:11:63:04:5a:29:e4:0c:25:d2:31:
         22:07:65:b8:ab:90:29:96:5d:12:f9:f0:0e:c3:76:bd:72:42:
         2c:78:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:27:16 2025 by rpki-client