Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa
File:                     34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (raw, json)
Hash identifier:          VOtxJ10zH5zpJE9PI2+E/kC2LhQ+eYZLKWlBr90BHC0=
Subject key identifier:   7B:AC:D8:B5:48:A0:C2:E8:72:BA:2F:4C:1C:24:BB:62:81:45:88:8E
Certificate issuer:       /CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD
Certificate serial:       529C905FC71BBAD441D9C10A3822D7B8259F9FC5
Authority key identifier: 86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa
Signing time:             Thu 06 Mar 2025 00:34:30 +0000
ROA not before:           Thu 06 Mar 2025 00:29:30 +0000
ROA not after:            Thu 05 Mar 2026 00:34:30 +0000
asID:                     268727
IP address blocks:        45.171.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9c:90:5f:c7:1b:ba:d4:41:d9:c1:0a:38:22:d7:b8:25:9f:9f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD
        Validity
            Not Before: Mar  6 00:29:30 2025 GMT
            Not After : Mar  5 00:34:30 2026 GMT
        Subject: CN=7BACD8B548A0C2E872BA2F4C1C24BB628145888E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:a5:d8:74:9c:0f:e3:a5:0a:ac:35:29:dc:
                    4f:6c:ef:58:8a:62:96:3e:fe:11:17:bc:c9:be:b3:
                    81:18:3a:22:f1:7e:ac:5e:89:63:b3:88:5a:3d:e9:
                    34:9c:c0:80:d3:34:d7:df:01:51:70:13:ed:3a:02:
                    7e:a2:ab:8d:c4:c9:f4:12:2e:2f:db:c6:cc:7e:fa:
                    fc:0c:bf:6b:ac:7f:a2:6c:cb:b8:16:eb:8f:2f:84:
                    fc:e5:13:e4:38:a1:05:38:0f:fc:46:a1:68:0d:e8:
                    3a:06:f0:96:89:d4:1b:71:99:1b:e1:d1:97:10:00:
                    52:5b:40:da:3f:7e:13:d3:bb:d7:6f:00:1a:e8:a6:
                    1e:00:40:e1:3e:b8:96:c4:29:28:ae:4c:34:dc:ae:
                    ad:c1:e8:52:bb:5a:df:5e:82:e4:6b:be:fc:37:f1:
                    3e:28:59:f0:a0:ff:ec:bb:8f:4c:66:dd:3d:e4:b0:
                    f4:2c:26:ba:d9:73:04:21:13:a4:fe:48:2a:03:5c:
                    47:65:1c:3d:cb:37:9f:1f:c2:04:6d:88:74:bb:46:
                    2e:87:a5:53:10:fc:e7:32:e5:d0:07:b4:59:ce:ce:
                    6e:77:d9:52:c2:34:b2:a7:7f:75:b1:e3:20:d7:20:
                    7a:c4:cf:57:0b:0a:ec:9d:09:0c:ee:5d:ac:b0:11:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AC:D8:B5:48:A0:C2:E8:72:BA:2F:4C:1C:24:BB:62:81:45:88:8E
            X509v3 Authority Key Identifier:
                keyid:86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:3d:76:29:65:37:41:9f:da:71:36:bc:66:38:c3:d5:a6:f6:
         0f:b2:2c:13:f6:fe:e7:62:e3:2c:0a:06:28:0e:07:98:a3:c2:
         46:6f:b7:fe:d7:e1:90:ef:51:b2:ca:0d:7c:36:a5:20:79:43:
         e4:29:49:41:99:e0:f1:9b:1a:5a:45:74:53:71:c5:38:2b:69:
         3a:73:af:b4:fa:41:23:46:c5:c4:8b:41:80:f1:16:a0:85:ac:
         8a:72:c0:02:d7:ac:ff:1d:77:8d:34:81:22:69:9b:a5:83:5a:
         18:5a:12:ee:9a:4e:a0:e3:32:c9:31:cb:10:14:f1:d2:f2:3b:
         73:63:29:fb:ef:27:c5:38:be:bf:9a:67:69:8b:4c:10:cc:a8:
         2d:2b:ba:a2:00:9c:6e:9c:3d:95:d1:13:98:0d:f3:23:e6:a6:
         f5:ee:e5:f0:aa:80:98:56:99:6d:5e:ee:4c:95:34:63:28:77:
         7c:ba:81:f4:8c:44:79:8a:97:b0:6b:bd:83:82:d5:2a:a2:e8:
         12:7d:71:45:14:32:2e:bc:eb:ac:b7:87:44:0d:ae:cf:bc:c3:
         62:66:b3:99:59:82:a2:da:38:ee:0a:8d:a8:17:8c:52:4e:88:
         7a:bc:e6:cf:2f:9d:71:c4:8c:8f:46:ef:00:5e:b8:f8:2f:72:
         08:57:e7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:47:35 2025 by rpki-client