Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsLUrYSiDhy15zV6nUPkwSv4hHDY8nifxKgfSQxXd1vB/0/34352e3232372e3133382e302f32342d3234203d3e20323637303137.roa
File:                     34352e3232372e3133382e302f32342d3234203d3e20323637303137.roa (raw, json)
Hash identifier:          8S1TVhmJx+NrKUNQOC1/sI5x4WWAE0+d1LTufJ7CkGg=
Subject key identifier:   B1:96:8F:A4:A4:C0:3C:0E:35:4A:AA:79:AF:15:1C:9E:2F:97:CC:8C
Certificate issuer:       /CN=B0ED029775A8BE3227E02E6FCFDD3E72385EBEBB
Certificate serial:       5CC3430E7BA4CDD27AE064E59B03FBFC82938171
Authority key identifier: B0:ED:02:97:75:A8:BE:32:27:E0:2E:6F:CF:DD:3E:72:38:5E:BE:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0ED029775A8BE3227E02E6FCFDD3E72385EBEBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsLUrYSiDhy15zV6nUPkwSv4hHDY8nifxKgfSQxXd1vB/0/34352e3232372e3133382e302f32342d3234203d3e20323637303137.roa
Signing time:             Tue 07 Nov 2023 20:37:54 +0000
ROA not before:           Tue 07 Nov 2023 20:32:54 +0000
ROA not after:            Tue 05 Nov 2024 20:37:54 +0000
asID:                     267017
IP address blocks:        45.227.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c3:43:0e:7b:a4:cd:d2:7a:e0:64:e5:9b:03:fb:fc:82:93:81:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0ED029775A8BE3227E02E6FCFDD3E72385EBEBB
        Validity
            Not Before: Nov  7 20:32:54 2023 GMT
            Not After : Nov  5 20:37:54 2024 GMT
        Subject: CN=B1968FA4A4C03C0E354AAA79AF151C9E2F97CC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:32:fe:e3:bc:cf:fb:57:c4:a3:1e:36:f1:
                    d7:47:cc:fa:9d:79:7f:12:32:9b:c2:5b:d6:77:0c:
                    1b:f9:b5:00:db:8c:72:d5:ed:fe:da:21:d5:b4:b8:
                    08:6a:e9:0c:ac:a0:8b:ad:54:6c:38:e4:74:fc:f6:
                    be:df:c2:c6:c9:d8:91:05:30:69:73:7f:8e:f1:c8:
                    be:8d:bf:39:8c:71:19:e4:46:5a:25:5e:4b:39:04:
                    da:03:80:ab:b6:5c:8c:ff:7b:fb:10:f1:ac:7a:54:
                    0e:ce:aa:4a:41:cd:73:af:2b:d8:b2:91:8c:3c:d6:
                    81:fa:a2:aa:95:fb:f1:5f:56:67:b4:fe:3f:75:fd:
                    f6:53:7b:52:a5:97:76:7f:73:69:81:cc:18:9b:d4:
                    51:7d:df:9d:cb:c0:ff:74:b2:39:ec:6c:17:8a:23:
                    2b:20:08:73:da:b2:0e:57:9b:8b:b7:c5:2f:3d:c7:
                    db:a7:66:12:d5:78:a8:fe:1a:e9:3c:57:52:d1:8f:
                    1b:f2:52:4c:f2:29:8b:09:cf:3c:bd:71:05:03:18:
                    48:ef:fd:e6:36:9b:1f:5e:51:55:51:fc:fd:87:58:
                    29:85:5a:76:68:6a:84:3c:ac:3d:31:2d:f5:65:8b:
                    43:93:85:c0:2b:5f:85:0a:8e:54:38:79:8a:17:79:
                    b6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:96:8F:A4:A4:C0:3C:0E:35:4A:AA:79:AF:15:1C:9E:2F:97:CC:8C
            X509v3 Authority Key Identifier:
                keyid:B0:ED:02:97:75:A8:BE:32:27:E0:2E:6F:CF:DD:3E:72:38:5E:BE:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsLUrYSiDhy15zV6nUPkwSv4hHDY8nifxKgfSQxXd1vB/0/B0ED029775A8BE3227E02E6FCFDD3E72385EBEBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0ED029775A8BE3227E02E6FCFDD3E72385EBEBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsLUrYSiDhy15zV6nUPkwSv4hHDY8nifxKgfSQxXd1vB/0/34352e3232372e3133382e302f32342d3234203d3e20323637303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:5f:4e:c2:10:01:20:49:ee:8d:74:c2:c7:6e:9a:0c:d6:8e:
         5b:15:8b:f0:1b:b3:98:3e:dc:c1:b5:63:a7:63:1b:2c:65:4e:
         94:fd:6b:19:4d:dd:66:ea:d9:cb:aa:42:d5:30:9c:d8:d3:78:
         1f:0c:0c:ae:88:38:fe:51:7a:de:11:8f:bc:2a:f6:04:97:c3:
         32:c4:25:be:65:28:d0:17:aa:ca:ba:71:ab:43:fb:41:15:86:
         ea:d7:27:4c:09:00:c6:5f:26:57:a7:d1:02:24:2b:34:17:79:
         06:58:02:a2:ff:d7:53:26:04:54:b5:8d:a9:2b:4f:cc:14:40:
         d4:49:37:23:13:ae:42:4a:74:0c:c3:c3:22:d9:6e:2b:20:7a:
         f1:bc:30:51:7b:b0:2d:9d:f3:46:9f:28:d8:70:d5:29:ac:06:
         45:7b:5d:4a:27:ac:35:e0:69:79:4c:a9:b7:3e:f3:4a:24:27:
         bb:77:51:50:e1:d9:ec:28:e2:a2:fc:db:a7:27:58:8a:f5:15:
         42:25:f5:9a:d9:8e:dd:bd:79:53:69:cb:7c:24:37:48:a4:b1:
         61:f6:a5:91:83:66:47:24:df:80:19:90:6c:97:db:09:61:4d:
         ca:f1:5d:df:80:97:46:e4:ba:4d:c9:3d:8a:83:2e:37:72:cd:
         1c:f3:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:50:25 2025 by rpki-client