Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/34352e3232382e3139362e302f32322d3234203d3e20323637313137.roa
File:                     34352e3232382e3139362e302f32322d3234203d3e20323637313137.roa (raw, json)
Hash identifier:          QBiK7xFmyLr8WqtwQPCOVNSoBCe17ZsMOZWSh2J+Ysg=
Subject key identifier:   0F:D7:B1:31:0A:A1:D6:6A:3B:3E:14:0E:68:B5:03:94:90:B2:60:09
Certificate issuer:       /CN=7E1BBAB799647F4715B7F978054B1A5E92477B5B
Certificate serial:       0ABC870B9519F66791025025665A69E3025A820D
Authority key identifier: 7E:1B:BA:B7:99:64:7F:47:15:B7:F9:78:05:4B:1A:5E:92:47:7B:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E1BBAB799647F4715B7F978054B1A5E92477B5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/34352e3232382e3139362e302f32322d3234203d3e20323637313137.roa
Signing time:             Wed 17 May 2023 17:30:00 +0000
ROA not before:           Wed 17 May 2023 17:25:00 +0000
ROA not after:            Wed 15 May 2024 17:30:00 +0000
asID:                     267117
IP address blocks:        45.228.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bc:87:0b:95:19:f6:67:91:02:50:25:66:5a:69:e3:02:5a:82:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E1BBAB799647F4715B7F978054B1A5E92477B5B
        Validity
            Not Before: May 17 17:25:00 2023 GMT
            Not After : May 15 17:30:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:01:80:4f:88:e9:ba:b8:fc:26:1d:c3:8f:
                    1e:4a:1e:81:72:6a:bf:7f:f1:48:4f:57:fa:ce:a0:
                    a9:31:39:7e:d0:ab:04:d4:0b:a1:80:1b:97:6f:f3:
                    83:62:27:6a:1f:e2:b3:29:bd:06:d4:ce:a4:e2:05:
                    bb:f6:51:ba:50:99:56:0a:e2:1d:d4:b6:b6:5f:80:
                    62:d2:e5:6d:e6:d7:be:6e:a9:48:be:51:c3:5c:d1:
                    83:31:53:ad:64:3a:f6:59:51:e0:42:39:ac:e6:ea:
                    62:48:c6:c5:ff:f0:24:8d:ed:12:9e:21:96:7e:0d:
                    80:80:85:69:d5:bc:0a:be:3b:3d:39:d5:46:d6:e3:
                    c1:12:36:2a:c7:8e:8d:e7:7e:fa:26:f7:a9:40:5d:
                    82:05:17:4b:41:4a:5c:f7:1e:84:da:b6:2e:21:c8:
                    73:43:8e:fa:17:a3:40:33:40:1c:db:43:ef:0c:f7:
                    f6:7a:a7:79:f6:74:a0:47:bb:ef:17:16:40:33:6d:
                    fa:eb:56:28:d1:d5:18:a6:a2:ba:ee:a7:d8:7e:7d:
                    56:66:0b:4f:25:0d:95:3d:97:b6:2e:09:a4:d3:77:
                    00:d2:ee:b7:1b:08:9e:f3:cf:0d:4b:26:07:71:56:
                    c4:5d:25:f4:d9:5c:26:38:ff:07:3b:16:11:3c:9e:
                    d7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D7:B1:31:0A:A1:D6:6A:3B:3E:14:0E:68:B5:03:94:90:B2:60:09
            X509v3 Authority Key Identifier:
                keyid:7E:1B:BA:B7:99:64:7F:47:15:B7:F9:78:05:4B:1A:5E:92:47:7B:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/7E1BBAB799647F4715B7F978054B1A5E92477B5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E1BBAB799647F4715B7F978054B1A5E92477B5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/34352e3232382e3139362e302f32322d3234203d3e20323637313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:dd:8b:ab:59:c2:f7:37:c1:d6:e4:2c:80:02:a2:d3:63:ac:
         b1:5d:a1:76:01:db:65:d1:f3:1e:e5:7e:28:ec:ac:ee:ff:44:
         cc:a5:fc:aa:3a:d3:c0:52:11:9c:79:3e:1e:b1:5a:12:ec:94:
         20:d9:58:ad:9d:3d:50:ce:79:69:72:65:56:b1:d6:07:0f:67:
         eb:1a:6d:0a:f4:57:ed:7b:c2:6a:7b:0f:9a:f8:b0:34:69:1a:
         a4:d9:e4:80:1f:01:11:e9:71:dc:b8:00:7b:18:ac:7a:86:95:
         d5:35:d4:67:19:99:f9:18:ff:45:ac:18:46:99:18:be:9b:1a:
         75:80:e9:81:3f:e1:63:9f:0c:1d:6b:8f:33:c6:55:eb:bf:4b:
         62:8e:6e:f4:8d:a2:49:cc:5e:b8:d5:58:e4:4c:df:e5:fe:0e:
         67:08:61:78:b5:42:69:eb:6f:24:04:38:b6:3c:00:67:90:3b:
         c4:cc:1f:51:ab:e6:ac:ab:36:bc:35:1b:bd:35:8b:5f:cd:36:
         92:e4:93:54:e8:17:86:a9:62:cb:1c:b6:bb:36:a3:33:ab:73:
         d7:fa:93:a9:2f:60:fe:88:a6:43:b0:33:9a:0c:26:02:a1:a0:
         2e:57:0b:41:01:ad:e4:70:a7:5d:22:0f:74:27:75:b2:24:cd:
         d2:75:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:25 2025 by rpki-client