Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/34352e3138322e3134352e302f32342d3234203d3e20323639323137.roa
File:                     34352e3138322e3134352e302f32342d3234203d3e20323639323137.roa (raw, json)
Hash identifier:          QN6P8wZW1iadoFhECUW7xZcPEYo3M+iVP/0JGYqFc+c=
Subject key identifier:   05:BC:D3:F9:FA:94:2C:C5:A1:BB:BC:7E:2B:A8:66:DE:24:2B:88:C4
Certificate issuer:       /CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
Certificate serial:       3717A109C597F82CC6D34AFEADC1C2B6AF276CE1
Authority key identifier: C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/34352e3138322e3134352e302f32342d3234203d3e20323639323137.roa
Signing time:             Wed 15 Jan 2025 14:53:53 +0000
ROA not before:           Wed 15 Jan 2025 14:48:53 +0000
ROA not after:            Wed 14 Jan 2026 14:53:53 +0000
asID:                     269217
IP address blocks:        45.182.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:17:a1:09:c5:97:f8:2c:c6:d3:4a:fe:ad:c1:c2:b6:af:27:6c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
        Validity
            Not Before: Jan 15 14:48:53 2025 GMT
            Not After : Jan 14 14:53:53 2026 GMT
        Subject: CN=05BCD3F9FA942CC5A1BBBC7E2BA866DE242B88C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ce:56:d3:9b:22:ab:89:d2:c6:03:6e:d6:94:
                    6f:31:ee:32:4f:cf:7b:1d:73:46:06:e9:b3:41:f0:
                    d2:84:60:57:aa:97:da:57:48:52:8c:98:d5:06:71:
                    39:a5:29:d3:a3:e4:fa:e6:fe:7f:ed:74:f6:1e:0e:
                    45:ee:29:8b:82:34:b4:70:5b:70:30:29:a9:45:ed:
                    4b:f7:11:22:23:35:b4:b4:27:7a:a7:cf:e7:b9:29:
                    00:81:21:b4:2a:c2:59:af:b7:d7:4c:a4:e7:8b:d4:
                    9f:33:1e:b3:31:64:4e:0f:8f:6c:f9:72:c0:83:97:
                    41:59:22:a9:d6:a8:a9:91:31:b8:76:38:66:cc:25:
                    f5:f3:de:03:a9:6f:7e:c4:27:af:0d:5f:48:48:57:
                    6b:13:f1:4d:74:62:03:bc:92:32:e9:a7:3d:f0:ec:
                    dd:2a:1e:35:4c:5a:e1:9c:bb:75:20:15:3f:d4:e1:
                    47:b8:d5:7a:dd:6b:d0:14:ba:02:69:9f:0d:6c:0a:
                    2c:34:4a:3b:e0:a1:3b:6a:30:7b:de:8b:56:4c:a2:
                    67:ec:c8:c2:4e:8c:10:74:59:ee:b9:26:9d:59:6c:
                    d3:39:be:48:84:6c:d8:c1:b4:d1:9c:1b:9a:c5:82:
                    44:f1:d6:8c:82:8d:02:0b:e1:c9:fd:0a:73:33:12:
                    b0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BC:D3:F9:FA:94:2C:C5:A1:BB:BC:7E:2B:A8:66:DE:24:2B:88:C4
            X509v3 Authority Key Identifier:
                keyid:C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/34352e3138322e3134352e302f32342d3234203d3e20323639323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:06:58:78:f2:bd:4b:b8:ec:35:e6:eb:f9:2c:d4:5f:9d:09:
         da:b7:4c:2e:70:06:33:72:a7:9f:f3:c0:6a:0b:13:9e:36:50:
         d2:42:a4:00:5d:94:25:f2:85:e3:51:be:6c:30:32:02:ba:39:
         2a:1e:df:18:d3:9c:2c:4b:35:4d:f2:2c:a6:14:c0:c7:a9:0f:
         2c:e0:64:d6:a6:2e:97:03:b0:4c:50:20:cc:5f:ea:ce:95:90:
         6e:23:b8:94:d0:90:fb:a9:c9:95:ce:3e:8e:8c:34:a3:4d:28:
         5c:f6:85:7f:e5:ec:f3:e9:0a:44:29:c5:de:f8:99:36:cc:26:
         3d:89:78:6f:fa:3c:ae:0b:9d:7d:30:1d:54:03:98:09:4c:2a:
         8f:da:03:59:ce:3f:37:26:31:32:76:0f:7e:0a:bc:1f:a9:70:
         22:b0:64:e7:fb:26:1a:2f:b4:a5:46:28:f3:9d:1c:d6:40:e8:
         58:10:10:a9:34:a9:6e:9e:a0:63:65:53:46:80:9b:2a:1c:18:
         b0:d1:77:8d:2d:38:e8:aa:0d:ae:7f:d6:10:d8:2d:b5:69:b3:
         7f:b6:97:0a:3e:73:64:0f:00:96:77:62:61:d0:ed:c2:b1:68:
         af:e4:7f:84:8d:0b:c3:fe:77:c0:a2:ef:27:2a:99:b7:a0:52:
         e1:8b:d8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:32:44 2025 by rpki-client