Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33342e302f32332d3233203d3e20323638313133.roa
File:                     34352e3136392e33342e302f32332d3233203d3e20323638313133.roa (raw, json)
Hash identifier:          s2og0fPTKD9CrxvNYmcKsIvZnAicSiOykCQ20XVZYoQ=
Subject key identifier:   75:87:32:1B:A0:BD:03:DD:3D:44:06:BC:0E:A5:B7:EB:62:6A:18:A7
Certificate issuer:       /CN=FA921E7C3C9FDC4F96D45614C07E02367A255860
Certificate serial:       7F0F0EB72D0C935F57BB14FB36479654CF5F065C
Authority key identifier: FA:92:1E:7C:3C:9F:DC:4F:96:D4:56:14:C0:7E:02:36:7A:25:58:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA921E7C3C9FDC4F96D45614C07E02367A255860.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33342e302f32332d3233203d3e20323638313133.roa
Signing time:             Tue 16 Apr 2024 23:17:38 +0000
ROA not before:           Tue 16 Apr 2024 23:12:38 +0000
ROA not after:            Tue 15 Apr 2025 23:17:38 +0000
asID:                     268113
IP address blocks:        45.169.34.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0f:0e:b7:2d:0c:93:5f:57:bb:14:fb:36:47:96:54:cf:5f:06:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA921E7C3C9FDC4F96D45614C07E02367A255860
        Validity
            Not Before: Apr 16 23:12:38 2024 GMT
            Not After : Apr 15 23:17:38 2025 GMT
        Subject: CN=7587321BA0BD03DD3D4406BC0EA5B7EB626A18A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:e7:56:8f:71:ef:de:ae:2b:52:db:ed:7b:
                    b7:cc:c4:d5:60:19:76:f0:51:6f:6b:f2:72:e3:cb:
                    84:79:c6:f5:63:33:ca:37:fa:f8:bc:d6:56:39:39:
                    12:fd:fb:26:b8:76:59:4a:f8:fe:52:d9:7a:f7:9c:
                    c6:0a:4d:69:cc:32:ba:a2:52:5b:97:cc:4f:14:68:
                    68:58:52:43:dc:6a:d8:d1:fa:0f:65:f6:26:88:5c:
                    e9:0f:0c:1e:ca:97:3e:8b:eb:23:df:a5:2f:de:08:
                    36:51:87:7d:b5:69:0d:6e:af:bb:b8:30:88:fb:b6:
                    59:ba:13:e1:7c:39:25:5b:9a:ce:d6:b6:12:09:42:
                    b3:f5:9e:31:1e:d1:63:2a:9d:62:88:e8:a6:14:20:
                    e2:f5:80:74:73:08:0d:ea:7d:18:fb:58:99:dc:df:
                    e7:a9:d7:17:fe:fd:71:8a:a6:16:b6:d3:c3:18:18:
                    40:f7:98:ac:3d:4d:50:23:5f:e7:c9:e8:e2:04:da:
                    48:6d:a6:7c:0a:45:3a:51:d6:a0:2b:23:5c:0b:68:
                    fb:2d:f8:7d:97:ec:97:51:a4:97:f3:e2:b0:51:f7:
                    21:13:f2:8f:42:79:86:ed:34:56:30:96:80:fa:3c:
                    d3:c3:c5:f7:f0:de:18:f9:43:5c:b6:bd:d3:b1:cf:
                    38:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:87:32:1B:A0:BD:03:DD:3D:44:06:BC:0E:A5:B7:EB:62:6A:18:A7
            X509v3 Authority Key Identifier:
                keyid:FA:92:1E:7C:3C:9F:DC:4F:96:D4:56:14:C0:7E:02:36:7A:25:58:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FA921E7C3C9FDC4F96D45614C07E02367A255860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA921E7C3C9FDC4F96D45614C07E02367A255860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33342e302f32332d3233203d3e20323638313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:4b:db:e0:0e:86:cb:f8:ce:5b:b1:cb:60:4c:a7:27:e0:22:
         90:f8:38:9a:93:59:7f:34:e8:a5:9b:90:bc:3d:84:69:71:aa:
         f4:f9:49:a1:c7:16:75:18:df:ff:4a:f9:6f:25:25:9c:cc:d5:
         6c:51:ac:d0:bf:63:69:c8:05:78:6a:2a:fb:f3:78:dd:0d:61:
         34:7c:83:f7:9a:25:eb:82:9a:40:0a:de:d4:ae:41:3a:4f:5f:
         b4:fd:35:d7:4b:a0:8e:da:6e:d5:88:f9:b1:5b:5c:27:8d:6e:
         f8:0d:30:bd:86:7a:24:1a:03:d7:3b:59:cb:89:fd:ab:3b:d0:
         88:80:45:4c:c2:9b:4f:d8:26:f8:f1:7d:49:10:f7:20:70:78:
         17:ca:59:e1:a1:d5:dd:fe:d6:82:ef:23:4c:0f:45:79:45:9b:
         4d:0a:cb:4a:40:de:c1:84:b6:22:e6:bd:6f:d5:8f:08:28:b2:
         58:42:74:46:29:3f:06:65:cb:78:76:46:a9:2c:b7:73:95:40:
         7e:34:0a:9a:b7:65:34:00:a3:8d:1d:22:59:53:40:91:cd:8a:
         d9:fc:98:7f:ea:1c:19:f9:75:f5:70:ea:0b:12:c6:bf:a4:12:
         37:e0:86:51:d0:18:a3:be:98:c9:b9:a9:51:eb:a8:a0:16:24:
         34:10:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:08 2025 by rpki-client