Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230302e302f32322d3232203d3e20323638333630.roa
File:                     34352e3233382e3230302e302f32322d3232203d3e20323638333630.roa (raw, json)
Hash identifier:          arOWvoc4HiRy+65dbmF4DG9SrbMd5hWC9JmvtyU2jdw=
Subject key identifier:   B7:83:D5:B1:60:EA:84:79:48:DC:2C:54:4A:E2:E2:FA:5D:FD:8B:6F
Certificate issuer:       /CN=8ECAE7055E57C4418318B40632DEBC73D2044D56
Certificate serial:       14EFB4CA33887833186050B7B3B4987818AA4B8D
Authority key identifier: 8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230302e302f32322d3232203d3e20323638333630.roa
Signing time:             Mon 23 Oct 2023 21:30:35 +0000
ROA not before:           Mon 23 Oct 2023 21:25:35 +0000
ROA not after:            Mon 21 Oct 2024 21:30:35 +0000
asID:                     268360
IP address blocks:        45.238.200.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ef:b4:ca:33:88:78:33:18:60:50:b7:b3:b4:98:78:18:aa:4b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ECAE7055E57C4418318B40632DEBC73D2044D56
        Validity
            Not Before: Oct 23 21:25:35 2023 GMT
            Not After : Oct 21 21:30:35 2024 GMT
        Subject: CN=B783D5B160EA847948DC2C544AE2E2FA5DFD8B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:b1:7d:19:c6:eb:70:a8:cb:96:67:75:f1:
                    29:8d:fc:75:83:c1:c5:8b:11:23:8b:55:6d:a3:d0:
                    74:98:82:db:d8:69:99:f8:01:e9:35:35:0b:34:a1:
                    94:f4:7a:10:5e:45:8b:0d:fe:63:fe:ae:ca:93:5c:
                    9c:dd:09:35:74:ef:55:76:4d:04:4d:d1:55:0f:fe:
                    e3:22:8a:b4:c7:28:32:70:41:2a:ad:29:b0:70:65:
                    40:43:f5:33:01:7c:c0:bc:ba:88:93:17:b2:ca:bd:
                    7e:b6:c2:84:a8:f5:68:ab:76:c6:91:03:85:75:fa:
                    df:ad:ce:34:a0:a9:d2:5d:31:36:36:0c:b2:5a:50:
                    a0:6c:d8:b6:34:c0:63:5d:5b:17:0b:de:77:81:bc:
                    1e:43:d9:b1:cc:84:32:8c:21:58:81:86:b9:29:21:
                    f5:a8:76:87:3e:3b:f4:dd:42:69:e8:97:5a:42:a8:
                    27:9f:be:a9:d6:7b:88:8d:f9:8a:c6:b3:fc:f2:ce:
                    58:59:27:d9:23:cc:07:17:4e:9d:17:6d:f4:c8:e3:
                    3d:c9:94:2a:2e:1d:1c:2c:66:cc:b1:7a:32:59:60:
                    ba:d1:9b:71:20:0c:fe:3a:84:dd:33:8e:f8:8a:93:
                    dd:51:c6:34:cb:ea:a0:34:da:00:46:1f:f5:9d:04:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:83:D5:B1:60:EA:84:79:48:DC:2C:54:4A:E2:E2:FA:5D:FD:8B:6F
            X509v3 Authority Key Identifier:
                keyid:8E:CA:E7:05:5E:57:C4:41:83:18:B4:06:32:DE:BC:73:D2:04:4D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ECAE7055E57C4418318B40632DEBC73D2044D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PzDoPpeTCKraFKTV6k6MEw6agEDiDdfuPFHFpoJHsKv/0/34352e3233382e3230302e302f32322d3232203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:de:a5:6c:3e:d2:f7:f8:18:36:35:30:2f:f5:81:b0:43:be:
         8e:32:cc:60:e2:8d:75:a6:d9:62:77:56:a1:c7:8b:07:da:f8:
         1e:53:9a:1d:70:de:f0:6c:a5:d0:1c:62:bb:24:59:5d:37:10:
         80:c5:46:3a:1c:a2:67:b1:ae:fd:6f:36:7b:f6:b8:a4:e4:14:
         c2:fc:1b:f1:50:6d:4f:1e:63:13:1d:85:bb:39:e1:a8:3d:28:
         4e:f6:7a:ae:d1:b1:c8:78:41:f8:6c:93:0c:46:76:4c:21:e3:
         54:ce:33:57:78:d7:7e:ee:f6:90:11:fd:a0:eb:2c:88:a7:30:
         31:f3:ee:98:7e:61:4a:cc:66:e8:30:de:5e:6f:68:f5:78:0c:
         6e:9c:35:51:1d:e3:48:06:75:45:7b:b3:ec:3c:78:a0:92:4f:
         d0:80:f2:0b:40:2c:85:df:32:8f:8c:67:16:e5:87:0e:45:46:
         88:1d:b4:2e:70:1e:36:7d:25:e7:15:f6:d1:05:c0:90:79:b7:
         9c:c1:57:65:32:60:bd:45:82:ab:a9:27:44:b0:9b:17:19:de:
         0b:43:cb:66:3e:7a:af:7d:a1:a7:3a:b2:21:76:a0:6d:bd:7c:
         e8:f6:35:92:64:76:ad:3a:72:e1:8b:e9:4c:c1:18:ad:32:ea:
         6d:f2:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:55 2025 by rpki-client