Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/34352e3136392e3135322e302f32322d3332203d3e20323638313131.roa
File:                     34352e3136392e3135322e302f32322d3332203d3e20323638313131.roa (raw, json)
Hash identifier:          2EPJj7+IxrjXiWEAvd8EMY5lnmgTePsExl5wFKppzH4=
Subject key identifier:   88:2D:F5:77:EA:EE:65:96:AF:9B:2D:C7:52:6A:1E:F0:4E:57:80:A2
Certificate issuer:       /CN=2F31829AD9E8542E92D68A1D4B84371FA881196F
Certificate serial:       2A2BCEA9F353841B816FD952903A4D3AE0FC9CF7
Authority key identifier: 2F:31:82:9A:D9:E8:54:2E:92:D6:8A:1D:4B:84:37:1F:A8:81:19:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F31829AD9E8542E92D68A1D4B84371FA881196F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/34352e3136392e3135322e302f32322d3332203d3e20323638313131.roa
Signing time:             Thu 05 Dec 2024 15:33:53 +0000
ROA not before:           Thu 05 Dec 2024 15:28:53 +0000
ROA not after:            Thu 04 Dec 2025 15:33:53 +0000
asID:                     268111
IP address blocks:        45.169.152.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2b:ce:a9:f3:53:84:1b:81:6f:d9:52:90:3a:4d:3a:e0:fc:9c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F31829AD9E8542E92D68A1D4B84371FA881196F
        Validity
            Not Before: Dec  5 15:28:53 2024 GMT
            Not After : Dec  4 15:33:53 2025 GMT
        Subject: CN=882DF577EAEE6596AF9B2DC7526A1EF04E5780A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:6f:31:51:ae:2c:8d:28:cd:a9:e8:d7:2d:4d:
                    48:22:0d:88:03:5a:b7:ea:0a:97:36:29:a4:c8:ee:
                    39:c4:22:8f:00:04:45:7f:cd:2e:8e:72:69:86:ea:
                    9e:28:28:ec:03:55:e8:87:89:33:c5:5a:5a:81:8e:
                    87:a2:0c:4e:1a:4a:a9:1f:f7:58:0a:c2:c3:fb:fc:
                    90:99:98:e6:86:f2:c3:08:56:63:1c:9d:4d:a4:aa:
                    de:26:d8:a4:8c:6b:7a:7a:ed:d2:1a:10:5e:7d:c0:
                    d5:e8:26:19:e5:66:42:9b:dc:46:64:92:fd:38:e7:
                    04:3b:dc:48:eb:e9:18:c5:36:ca:56:ad:62:2c:9f:
                    76:e4:3e:c3:4c:b5:42:ab:57:e6:1d:fd:8a:b9:21:
                    27:72:5c:2f:2d:ad:58:72:ba:ac:fe:b8:f8:c5:52:
                    7d:eb:b6:3f:f8:7e:26:f4:74:03:81:ca:02:f8:bb:
                    03:8b:fd:65:37:78:32:0d:3b:72:19:98:4c:d5:f9:
                    28:87:4a:ad:ac:94:45:05:6d:a7:2e:d2:ef:fa:94:
                    53:1c:81:d2:fb:8f:e5:60:3d:80:73:0e:f0:39:92:
                    10:7b:8d:57:2f:a0:8b:01:40:76:90:42:d9:69:d3:
                    d0:37:8b:45:d1:9e:32:69:aa:20:61:ad:f5:68:23:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2D:F5:77:EA:EE:65:96:AF:9B:2D:C7:52:6A:1E:F0:4E:57:80:A2
            X509v3 Authority Key Identifier:
                keyid:2F:31:82:9A:D9:E8:54:2E:92:D6:8A:1D:4B:84:37:1F:A8:81:19:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/2F31829AD9E8542E92D68A1D4B84371FA881196F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F31829AD9E8542E92D68A1D4B84371FA881196F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/34352e3136392e3135322e302f32322d3332203d3e20323638313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:3d:1a:eb:ec:e2:a7:8d:6c:55:23:7b:73:e3:52:30:55:bc:
         9d:47:54:10:c1:77:f6:3c:a4:c5:2e:d4:d7:6f:29:d5:e1:2d:
         28:29:7e:ab:3b:ac:97:4f:88:bf:01:8d:e8:18:11:d8:2b:5f:
         cb:ce:1d:86:21:08:22:76:15:50:64:72:bd:3e:e8:f6:c7:bb:
         0b:ff:ef:95:f0:ff:bd:cd:61:49:44:bf:7d:5d:34:c0:1f:a2:
         18:5f:78:c4:4f:70:35:72:ee:d2:33:b4:24:74:dd:f8:b6:0b:
         8e:a1:bb:9f:4b:05:e3:44:30:8d:8d:5f:a7:c9:e5:2f:c1:98:
         cb:bc:0c:d0:ad:68:49:1d:bf:75:61:65:4a:67:c8:5f:da:06:
         9a:9f:26:fb:48:4d:ee:45:3e:1d:0b:b4:d3:39:67:1e:36:f8:
         18:a4:68:0a:e8:4c:e8:24:a3:7d:e0:a5:6b:5a:fc:b6:46:7b:
         62:f7:b7:eb:12:9e:ef:95:cc:5d:bb:87:80:59:96:3a:3c:86:
         f2:36:72:f9:16:89:5a:9a:86:55:69:42:ca:ab:bf:f5:b6:34:
         5c:5b:79:09:96:5c:16:f3:cd:1b:e7:10:0d:f9:26:b5:1f:4e:
         a3:8f:98:a0:c7:63:cc:a2:6e:48:fb:3e:9d:a9:30:ea:06:5b:
         43:34:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:52:35 2025 by rpki-client