Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/1/34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa
File:                     34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa (raw, json)
Hash identifier:          ZQtSActBrkH9p8zj3+JputKBKbadIRx58mmhafvRmvU=
Subject key identifier:   6E:27:32:84:3A:38:B6:3D:5F:66:46:F8:1C:1C:3D:13:75:42:58:D5
Certificate issuer:       /CN=34BDB7EA10144191770071E69A212425A2FF910E
Certificate serial:       63C2C5842FC3588BC5B5BF48274AA9651AF8083D
Authority key identifier: 34:BD:B7:EA:10:14:41:91:77:00:71:E6:9A:21:24:25:A2:FF:91:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34BDB7EA10144191770071E69A212425A2FF910E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/1/34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa
Signing time:             Tue 16 May 2023 17:22:18 +0000
ROA not before:           Tue 16 May 2023 17:17:18 +0000
ROA not after:            Tue 14 May 2024 17:22:18 +0000
asID:                     269025
IP address blocks:        45.178.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c2:c5:84:2f:c3:58:8b:c5:b5:bf:48:27:4a:a9:65:1a:f8:08:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34BDB7EA10144191770071E69A212425A2FF910E
        Validity
            Not Before: May 16 17:17:18 2023 GMT
            Not After : May 14 17:22:18 2024 GMT
        Subject: CN=6E2732843A38B63D5F6646F81C1C3D13754258D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:f2:50:7c:2b:f2:3d:84:39:10:9d:8d:d8:
                    47:a0:ff:8d:5a:b2:c4:b4:a2:fe:e5:ee:e4:1d:57:
                    9f:a7:9c:bc:2c:7e:fd:35:b5:4f:39:74:6f:fd:47:
                    51:a9:ec:c5:12:88:61:98:ba:40:43:d3:77:20:d6:
                    69:81:d3:19:2d:d5:4f:45:27:c7:9d:39:1d:93:8e:
                    7b:fc:4b:63:92:d6:de:a5:ce:ad:59:15:ee:be:27:
                    cf:79:c9:9d:83:41:e2:2e:8a:b0:4b:2e:dc:38:8f:
                    40:f9:10:dd:51:3f:59:ec:89:ba:f7:b5:36:2e:12:
                    ec:10:eb:34:82:ca:57:e4:98:01:53:1a:02:0f:5a:
                    7d:25:5b:99:bc:c0:b1:7d:2a:f9:90:a0:98:80:f1:
                    ec:f7:09:65:1d:74:e2:f8:53:63:bb:bb:f2:3b:6d:
                    bc:6b:1e:72:a8:40:3d:78:bf:52:69:5a:c7:ed:e5:
                    e0:aa:d5:df:d5:2c:09:9c:e7:ff:12:db:13:98:19:
                    6f:5c:46:cf:30:e2:81:5d:c6:44:86:58:57:5a:2f:
                    7c:e3:61:87:bb:ec:dc:ed:7c:14:6c:7f:ef:85:80:
                    01:b2:2b:02:50:23:89:8d:ed:71:6c:1d:65:33:5b:
                    ce:94:05:cb:74:10:77:b2:a0:ce:7c:32:c2:ad:4b:
                    b5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:27:32:84:3A:38:B6:3D:5F:66:46:F8:1C:1C:3D:13:75:42:58:D5
            X509v3 Authority Key Identifier:
                keyid:34:BD:B7:EA:10:14:41:91:77:00:71:E6:9A:21:24:25:A2:FF:91:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/1/34BDB7EA10144191770071E69A212425A2FF910E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34BDB7EA10144191770071E69A212425A2FF910E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/1/34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:b5:c5:b1:66:3c:bb:6b:e9:90:2b:1e:c0:0d:9e:4a:f9:c8:
         ad:90:d2:27:06:da:00:fa:22:81:07:2d:c3:0f:3b:f5:c3:fc:
         61:bb:5f:5d:b0:36:b1:5f:90:31:76:c5:68:18:76:51:cf:14:
         a1:a4:ba:c2:82:39:dd:ef:e9:ca:93:78:b1:3e:89:c5:35:98:
         a5:0c:48:50:f6:d8:12:16:2f:07:48:0e:af:fb:40:d8:d5:48:
         32:85:ad:c8:b7:41:13:45:be:78:e5:d7:64:42:26:f4:6e:50:
         46:55:2f:f8:11:a1:9c:34:5a:02:92:14:18:2e:8f:4c:dd:ae:
         51:4a:65:e5:eb:42:78:83:b9:3b:ff:99:50:6e:63:48:88:8d:
         7f:a6:fb:e2:4c:d6:da:0a:eb:db:7d:97:26:b0:42:98:b9:b1:
         86:90:a2:a5:b4:91:3f:8c:25:f3:91:6a:42:e2:e7:fd:57:09:
         c7:4f:be:c9:23:6c:aa:43:aa:46:86:8b:2c:9e:d5:eb:af:5b:
         2a:05:9f:31:c8:a9:a8:4c:b6:44:37:72:85:11:2e:37:42:81:
         82:6c:3e:a6:6b:65:5d:62:cf:ad:d2:bb:39:a4:50:56:3e:08:
         29:a5:35:3a:bc:87:0c:7a:45:7e:8e:02:36:f2:fd:db:86:7f:
         35:83:22:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:15 2025 by rpki-client