Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/34352e3136312e31372e302f32342d3234203d3e20323638343436.roa
File:                     34352e3136312e31372e302f32342d3234203d3e20323638343436.roa (raw, json)
Hash identifier:          gve/rTGI4FUE0MWKwlqxHg+49h3NOOZNQ5E6F0CqJd4=
Subject key identifier:   7B:25:C4:95:3B:15:9E:A0:47:3C:FB:88:F5:CD:6F:23:39:04:77:F9
Certificate issuer:       /CN=1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB
Certificate serial:       1F6AEF69396CB578163C569418C82F98A573D420
Authority key identifier: 15:50:DF:0A:F2:4D:ED:E2:FB:9F:66:A1:C8:05:60:A1:FB:45:6C:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/34352e3136312e31372e302f32342d3234203d3e20323638343436.roa
Signing time:             Tue 15 Aug 2023 16:41:26 +0000
ROA not before:           Tue 15 Aug 2023 16:36:26 +0000
ROA not after:            Tue 13 Aug 2024 16:41:26 +0000
asID:                     268446
IP address blocks:        45.161.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6a:ef:69:39:6c:b5:78:16:3c:56:94:18:c8:2f:98:a5:73:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB
        Validity
            Not Before: Aug 15 16:36:26 2023 GMT
            Not After : Aug 13 16:41:26 2024 GMT
        Subject: CN=7B25C4953B159EA0473CFB88F5CD6F23390477F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:05:6a:04:fb:92:0b:44:61:a5:9f:2f:f3:
                    2e:dd:37:37:94:03:02:56:83:e7:62:ba:83:0c:5b:
                    1c:09:96:bf:55:0d:7b:0e:97:5a:57:35:33:dd:6d:
                    95:dc:58:0d:b6:a3:19:82:91:1a:61:37:30:f0:ed:
                    59:8d:4a:43:f6:43:13:9b:eb:23:16:11:b1:48:b9:
                    37:76:cf:a3:d0:1c:54:85:23:31:b4:7f:6c:6d:fd:
                    97:95:e3:f6:8e:38:2d:62:d1:20:d7:32:ff:f7:58:
                    a4:25:df:4a:91:95:ab:cb:6c:f5:1f:d5:b3:b4:cb:
                    eb:76:d9:ff:5f:c9:30:fb:a9:a7:8b:5e:11:8a:51:
                    c1:68:78:59:5a:c7:33:d9:f2:b1:04:a6:ff:f3:c0:
                    98:16:b4:19:78:bf:6c:e9:4d:68:1e:7b:a9:2c:ff:
                    3c:de:56:3d:23:3c:df:eb:a8:d9:c7:4f:39:79:45:
                    bd:76:99:77:70:db:08:d0:c5:c9:d2:1a:f1:0f:7f:
                    76:02:16:45:e8:66:a3:88:0a:63:55:d0:70:df:ef:
                    ef:2b:a1:12:f4:91:91:0b:5e:a1:33:51:9c:5a:06:
                    0a:44:eb:4c:dd:e4:f7:d5:3e:ce:90:ae:6a:c2:02:
                    97:91:18:b2:7e:b2:5e:f4:8a:e2:ce:f8:7d:55:f4:
                    62:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:25:C4:95:3B:15:9E:A0:47:3C:FB:88:F5:CD:6F:23:39:04:77:F9
            X509v3 Authority Key Identifier:
                keyid:15:50:DF:0A:F2:4D:ED:E2:FB:9F:66:A1:C8:05:60:A1:FB:45:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/34352e3136312e31372e302f32342d3234203d3e20323638343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:52:fd:4b:09:6e:39:6f:84:e4:80:9c:9b:96:bf:02:4b:08:
         0e:32:1b:48:9b:a9:c0:d2:6c:9a:52:3f:9f:59:a3:8b:23:7a:
         e9:ec:65:5c:a6:05:39:6d:d6:dc:d7:e5:94:3d:2b:0c:7d:77:
         7d:95:f0:5e:3f:86:89:c1:56:6d:41:e5:ed:15:1c:69:40:aa:
         08:4e:55:eb:18:eb:da:7a:eb:b7:b2:01:aa:41:60:5f:54:02:
         f2:66:b7:4f:af:72:44:b6:5a:24:2e:9e:04:ef:98:3e:77:3c:
         60:95:c5:1d:ce:8e:a3:44:1d:cb:c5:0e:85:e2:76:bf:94:79:
         a2:1d:23:83:81:b9:cf:d8:54:a9:11:07:3f:98:dd:6a:1f:ad:
         c2:fb:76:71:a1:75:34:4a:a9:34:53:2e:f1:90:0b:16:54:99:
         d9:77:dd:36:96:14:c8:64:a7:42:bd:ad:e2:74:82:82:35:37:
         dd:74:1f:01:6a:c8:fc:50:37:e9:f5:f7:b3:c3:a8:2d:ba:a2:
         67:b7:cd:fa:56:e9:f0:92:32:d7:b8:08:8b:56:1b:d9:db:ab:
         22:0d:67:3c:30:e5:e3:21:89:24:ba:f4:43:2e:ab:ee:bc:81:
         3b:2d:68:e2:0b:8b:03:70:50:f5:b7:ff:ac:f6:d2:13:88:41:
         20:51:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:14 2025 by rpki-client