Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa
File:                     34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa (raw, json)
Hash identifier:          1SFPOvJ9lye4lFgtvXcFhbdra6XtmHRDxPf8I8PvN8Q=
Subject key identifier:   65:02:93:FD:3E:62:89:3D:B5:85:C8:49:3A:10:19:F5:3F:1E:E8:8B
Certificate issuer:       /CN=1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB
Certificate serial:       571BD656CECA4DC82C4F8DD482333B0A426F52AA
Authority key identifier: 1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa
Signing time:             Thu 06 Mar 2025 16:53:02 +0000
ROA not before:           Thu 06 Mar 2025 16:48:02 +0000
ROA not after:            Thu 05 Mar 2026 16:53:02 +0000
asID:                     267083
IP address blocks:        45.228.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1b:d6:56:ce:ca:4d:c8:2c:4f:8d:d4:82:33:3b:0a:42:6f:52:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB
        Validity
            Not Before: Mar  6 16:48:02 2025 GMT
            Not After : Mar  5 16:53:02 2026 GMT
        Subject: CN=650293FD3E62893DB585C8493A1019F53F1EE88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:5c:64:5b:73:14:c1:05:20:73:45:75:95:
                    5a:af:e4:ca:5c:a2:3f:41:21:e9:67:ed:ca:2a:f7:
                    e1:ea:87:11:01:85:fb:fc:a3:f5:8f:72:cb:f1:97:
                    7e:e6:13:0f:22:2c:4d:46:ac:97:e7:ef:55:cc:44:
                    dd:44:2b:ea:c3:2c:f7:43:02:59:a9:34:14:93:a6:
                    45:8c:1a:e7:03:8d:89:4d:78:63:2e:3f:15:d1:5e:
                    83:46:91:16:57:40:76:ef:a2:de:17:32:8d:95:27:
                    b4:ec:43:28:91:b5:90:36:7c:e8:7f:f6:39:09:55:
                    0c:79:99:c8:e2:74:8f:58:e9:68:06:fb:b6:24:37:
                    7b:b2:a1:1d:69:0c:e0:56:19:5f:a2:da:13:f6:a5:
                    9b:d6:cd:f2:b8:4d:e2:74:29:56:53:45:97:82:5b:
                    4b:99:87:1d:c9:6d:9e:e2:a4:37:8f:fb:0d:50:8b:
                    58:18:a2:fe:f9:71:4b:63:9e:6d:af:8a:67:0b:07:
                    01:b5:62:47:df:dd:ae:27:20:d4:fd:9d:b8:8a:5b:
                    ba:cd:5c:80:64:75:87:36:2f:3f:28:16:cf:c2:7f:
                    7c:33:26:c4:74:88:db:89:11:54:4c:54:29:d9:cc:
                    e5:0b:ff:e9:1c:20:a3:38:63:b2:0a:f7:30:fa:4f:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:02:93:FD:3E:62:89:3D:B5:85:C8:49:3A:10:19:F5:3F:1E:E8:8B
            X509v3 Authority Key Identifier:
                keyid:1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/34352e3232382e3234342e302f32322d3234203d3e20323637303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:7b:67:54:55:4a:7b:98:07:a7:dc:c5:ac:d8:50:1c:8e:75:
         fb:fe:0d:ce:ab:1e:14:d7:3b:d9:eb:4d:9e:79:b5:ac:a2:95:
         85:50:3a:e5:39:22:93:f3:bc:06:20:6d:73:28:ec:4b:83:ed:
         2a:9a:ae:8a:2a:df:73:73:45:42:95:56:64:fd:01:a6:de:88:
         bc:81:ec:1e:62:f6:33:f6:12:00:6b:a4:df:ef:31:c3:d9:3a:
         9b:46:df:15:e5:a0:4d:83:fb:08:da:57:24:cd:bb:e3:dd:18:
         54:d2:61:91:57:55:7f:04:68:0c:40:db:db:9a:fe:7d:2d:58:
         7e:e9:db:d7:54:71:5d:36:ad:1c:d9:68:ab:47:f8:5c:64:5c:
         d8:4e:44:e4:35:83:45:c3:ca:a1:93:b2:e7:3a:46:ff:98:52:
         e2:60:b4:17:11:44:27:5b:01:2d:db:2e:79:2a:fd:cd:d6:de:
         1f:f5:43:f9:bf:7f:77:9e:6c:26:03:ea:b1:e3:76:c9:d0:5b:
         c4:af:31:8d:f8:52:5c:d1:54:6b:6d:d3:ee:7e:1e:72:be:45:
         99:a1:b8:f9:cb:b8:06:42:d7:1b:22:2a:e8:a5:46:e9:dc:f2:
         57:e0:2a:a4:98:38:36:d4:62:35:42:1e:53:9f:fa:23:47:e6:
         58:b2:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:00 2025 by rpki-client