Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39332e302f32342d3234203d3e20323638353137.roa
File:                     34352e3136322e39332e302f32342d3234203d3e20323638353137.roa (raw, json)
Hash identifier:          wU2WdjkuHGVc31JHbYWlkl2sEJOW4kkP4z7gqxNvvGI=
Subject key identifier:   4C:B5:F8:21:00:C8:B1:89:71:08:CA:F9:99:B3:FE:EB:F7:58:C0:C8
Certificate issuer:       /CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Certificate serial:       3B8E975E290003CB6B4890CFE8DEC4BFA7D71C1D
Authority key identifier: D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39332e302f32342d3234203d3e20323638353137.roa
Signing time:             Thu 11 Apr 2024 01:29:38 +0000
ROA not before:           Thu 11 Apr 2024 01:24:38 +0000
ROA not after:            Thu 10 Apr 2025 01:29:38 +0000
asID:                     268517
IP address blocks:        45.162.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8e:97:5e:29:00:03:cb:6b:48:90:cf:e8:de:c4:bf:a7:d7:1c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D029A3E7478998493D96D0D6B9C212CDC5530659
        Validity
            Not Before: Apr 11 01:24:38 2024 GMT
            Not After : Apr 10 01:29:38 2025 GMT
        Subject: CN=4CB5F82100C8B1897108CAF999B3FEEBF758C0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:e3:37:e3:c6:bd:34:ef:bf:49:e7:81:9e:
                    56:06:c1:d9:27:93:5d:92:9d:0d:c5:09:80:7b:08:
                    8a:69:48:96:ba:e8:65:b1:18:1c:d7:d2:84:9e:a5:
                    e5:8b:2f:96:86:f8:dd:33:54:53:fb:4f:59:b8:54:
                    46:49:fd:c2:1f:36:02:6e:55:02:80:b2:37:1f:19:
                    d2:37:b1:e7:8d:35:f3:3c:e4:00:e3:49:aa:81:27:
                    1a:98:91:55:4d:a6:ed:cf:c4:14:9f:3e:95:1f:78:
                    8d:42:69:e2:d3:d3:a2:dc:62:db:50:7e:84:26:1b:
                    2e:6b:65:e8:3b:b3:0d:61:04:b9:d3:07:05:a8:bf:
                    ef:64:f4:31:48:eb:79:5c:ac:29:30:93:95:31:f0:
                    99:9d:56:24:ac:f9:af:40:cf:8e:cf:b3:50:f6:0c:
                    2e:f6:bc:09:7b:19:5f:31:11:41:70:05:55:68:02:
                    5d:db:e4:fa:7a:c1:65:77:b0:be:73:cf:b9:19:3f:
                    7e:5a:fa:2a:56:ce:ea:85:3a:8c:88:bd:8a:42:29:
                    25:00:67:2c:e4:cd:cc:e1:11:03:52:91:64:ac:60:
                    2a:fc:fb:00:02:29:95:44:8f:bb:d5:c3:f4:9b:46:
                    72:ce:27:92:fd:a7:bf:6c:78:b3:6a:ca:e7:33:40:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B5:F8:21:00:C8:B1:89:71:08:CA:F9:99:B3:FE:EB:F7:58:C0:C8
            X509v3 Authority Key Identifier:
                keyid:D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/D029A3E7478998493D96D0D6B9C212CDC5530659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39332e302f32342d3234203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:e0:3f:b2:9a:b2:49:2d:98:5b:39:26:6f:cf:d1:30:a5:66:
         45:97:5c:4d:e6:64:c9:fb:83:7e:7d:b9:40:5d:8b:2d:f9:fb:
         bf:ce:af:e3:a9:87:3d:3a:17:d7:ca:72:97:cd:c3:9a:38:04:
         12:4a:d7:0d:25:ab:ab:a1:ac:02:b6:e6:dc:d4:b5:61:b2:a4:
         f8:85:da:42:a5:eb:87:8f:2d:f6:d1:d8:68:1a:3c:0a:38:fa:
         ba:17:4a:77:ed:3b:b3:0e:ed:28:9b:79:e8:db:5f:21:d6:dd:
         41:b5:67:1e:ab:9b:e3:0c:36:7c:3e:3d:a2:02:6a:cc:72:5a:
         5b:bb:d1:9b:38:de:3c:46:c4:03:86:08:e4:3d:c4:d3:82:f0:
         ce:b0:93:23:6b:6d:9e:7b:80:90:3a:eb:97:13:13:e7:b3:48:
         2a:82:5e:7c:50:bb:71:73:f0:68:30:45:40:4b:d6:81:95:44:
         7c:86:db:b5:3f:c6:da:00:ce:40:d6:d8:b6:c6:69:3b:1e:ac:
         df:07:00:80:00:a9:86:0e:59:80:f9:72:8d:fb:e2:45:14:74:
         a8:e6:71:b0:e7:c7:54:7f:83:4a:b6:ad:27:59:2d:84:a5:1e:
         a1:b9:59:fc:ff:31:4d:57:1a:f3:97:a5:4e:bb:25:c2:cc:5b:
         8d:17:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:02 2025 by rpki-client