Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34382e302f32322d3332203d3e20323637393532.roa
File:                     34352e3136362e34382e302f32322d3332203d3e20323637393532.roa (raw, json)
Hash identifier:          e2suDiJaEpXBSlrJ1/EXQi7hg5S1UF3n3Et8JCDE39Y=
Subject key identifier:   1E:A1:D8:FE:DE:9B:FE:03:0F:A4:59:32:A3:4E:54:43:13:C6:7E:34
Certificate issuer:       /CN=211BF480C17107F7AE6882CC3FE220E37AFE75F8
Certificate serial:       08A0DB3D1C37B8E7186908DBFC84D6821AF7549F
Authority key identifier: 21:1B:F4:80:C1:71:07:F7:AE:68:82:CC:3F:E2:20:E3:7A:FE:75:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211BF480C17107F7AE6882CC3FE220E37AFE75F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34382e302f32322d3332203d3e20323637393532.roa
Signing time:             Wed 11 Dec 2024 18:53:22 +0000
ROA not before:           Wed 11 Dec 2024 18:48:22 +0000
ROA not after:            Wed 10 Dec 2025 18:53:22 +0000
asID:                     267952
IP address blocks:        45.166.48.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a0:db:3d:1c:37:b8:e7:18:69:08:db:fc:84:d6:82:1a:f7:54:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211BF480C17107F7AE6882CC3FE220E37AFE75F8
        Validity
            Not Before: Dec 11 18:48:22 2024 GMT
            Not After : Dec 10 18:53:22 2025 GMT
        Subject: CN=1EA1D8FEDE9BFE030FA45932A34E544313C67E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d4:07:80:5f:a3:2a:e6:d7:91:ce:2f:4c:6d:
                    bd:7a:b4:b4:cc:3a:55:40:cc:e0:ae:23:38:28:ad:
                    d8:b7:0d:78:dc:b8:61:7f:c0:3a:69:5f:21:e5:85:
                    5f:73:06:1a:72:bd:cd:bc:2d:51:41:8d:7f:de:9b:
                    6a:ac:4f:2e:53:ef:db:36:14:73:81:6e:72:ca:2f:
                    83:cc:c7:d7:fd:42:58:59:b8:27:81:4b:83:d5:6a:
                    36:c0:41:22:28:f3:fa:23:64:e4:a4:cb:f7:7a:f4:
                    d2:ca:3a:3b:2d:e4:05:e9:9d:54:e1:31:3f:02:fc:
                    2e:dc:36:a2:9f:c2:4c:99:89:66:0d:ce:57:16:ec:
                    61:af:e7:9c:bc:40:2e:e2:3a:bd:0a:89:61:89:81:
                    3f:65:56:af:c4:9d:44:21:e8:50:07:bb:a6:cd:45:
                    eb:f1:70:d5:24:a8:fc:97:7c:5b:77:f8:25:9d:71:
                    51:27:7f:a1:d4:c9:12:8a:f1:ed:d2:c2:82:21:93:
                    bb:08:7e:09:60:e7:de:0a:6b:5b:49:be:bc:27:5f:
                    65:49:0e:de:c0:4a:9f:cd:b6:14:be:fd:0c:1e:0f:
                    35:62:71:40:ec:64:e5:46:46:e0:2c:64:90:fc:47:
                    1c:a3:59:c8:a2:e2:fa:a6:25:b7:f8:da:8c:d0:83:
                    6c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A1:D8:FE:DE:9B:FE:03:0F:A4:59:32:A3:4E:54:43:13:C6:7E:34
            X509v3 Authority Key Identifier:
                keyid:21:1B:F4:80:C1:71:07:F7:AE:68:82:CC:3F:E2:20:E3:7A:FE:75:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211BF480C17107F7AE6882CC3FE220E37AFE75F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34382e302f32322d3332203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:0a:98:d6:b2:1e:e6:9a:0e:05:c4:ea:01:40:ed:29:d5:e1:
         c5:5d:9a:ea:85:bc:79:3c:13:f3:eb:0a:99:03:47:88:a6:4b:
         9c:73:7c:bc:9c:59:eb:2e:cb:fd:b4:93:5d:9c:34:c2:b0:e2:
         05:83:2f:f8:cd:bd:89:46:15:f4:55:dd:cd:34:e8:df:eb:93:
         98:cc:7e:60:10:f4:a0:5c:67:fa:e2:09:35:12:d3:54:e5:55:
         61:76:67:6e:2c:16:c8:8d:b2:49:cd:12:ca:e3:ad:8f:ec:f2:
         a1:48:bd:71:25:cd:7d:82:dd:9f:68:31:49:ef:5a:d8:35:b2:
         e4:b3:0d:6d:48:6a:34:0e:a6:75:00:70:78:fb:2c:c6:4f:90:
         4b:67:76:94:36:ff:71:8f:87:6e:63:13:43:53:9d:86:41:0d:
         17:71:53:1c:14:12:6d:0e:68:1e:24:d4:74:2b:70:b3:6a:6f:
         22:bd:be:3f:3c:6c:e6:93:ec:ae:37:ac:79:8a:9c:13:b1:55:
         2d:46:f2:02:1a:92:5a:e4:63:34:1c:ae:bd:fe:e9:e8:bd:80:
         5d:ec:d2:42:c1:47:2d:1f:d3:1f:bb:78:b3:b3:c5:47:26:73:
         a7:41:7b:17:84:57:df:96:fc:ed:15:fe:d2:0a:30:36:db:22:
         f3:16:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:18:37 2025 by rpki-client