Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/34352e3139302e39362e302f32342d3234203d3e20323639363435.roa
File:                     34352e3139302e39362e302f32342d3234203d3e20323639363435.roa (raw, json)
Hash identifier:          hgcD4RosdwW9T43YfuHQeaZTeWC2YYmtCGh85/IaRYU=
Subject key identifier:   DE:02:5F:11:33:12:2C:17:21:58:45:18:21:A9:C3:AD:B0:CB:C9:CF
Certificate issuer:       /CN=ED5D66318EFFC37900E14A00DD2D9379FECCFA14
Certificate serial:       4571716F37C594EEAA30F13225244750472255A5
Authority key identifier: ED:5D:66:31:8E:FF:C3:79:00:E1:4A:00:DD:2D:93:79:FE:CC:FA:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/34352e3139302e39362e302f32342d3234203d3e20323639363435.roa
Signing time:             Fri 25 Aug 2023 11:42:49 +0000
ROA not before:           Fri 25 Aug 2023 11:37:49 +0000
ROA not after:            Fri 23 Aug 2024 11:42:49 +0000
asID:                     269645
IP address blocks:        45.190.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:71:71:6f:37:c5:94:ee:aa:30:f1:32:25:24:47:50:47:22:55:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5D66318EFFC37900E14A00DD2D9379FECCFA14
        Validity
            Not Before: Aug 25 11:37:49 2023 GMT
            Not After : Aug 23 11:42:49 2024 GMT
        Subject: CN=DE025F1133122C172158451821A9C3ADB0CBC9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f8:5f:b5:ea:7d:97:bd:3a:f7:54:f6:eb:44:
                    7e:8f:ce:1d:4e:f4:d6:2e:85:b4:b3:f7:e4:10:d0:
                    61:6d:11:02:40:a6:29:09:8c:ab:65:73:dc:0a:39:
                    e3:67:18:d9:a1:b4:8c:9a:e3:33:b2:bf:2d:a5:29:
                    8a:0f:4b:a7:7d:ed:98:f2:15:48:01:55:79:20:6e:
                    b6:7f:a6:ef:77:af:72:2e:3b:2b:e0:24:ae:d2:4a:
                    b5:4f:75:b0:4f:56:5f:cc:41:1d:3b:3a:c9:b6:2e:
                    be:3c:e1:99:e6:43:b0:ef:32:dd:b9:d9:9e:0e:5e:
                    b0:86:2b:29:5b:7c:d0:96:53:e0:eb:32:7d:4c:16:
                    7d:00:19:35:08:95:a1:16:b9:07:eb:3e:8a:ef:4a:
                    9d:a2:15:43:0f:1f:bd:df:96:23:a6:95:28:e5:67:
                    c8:e7:22:58:85:7d:43:55:b6:a8:47:8e:92:12:85:
                    ec:14:e6:b3:1c:99:fe:cc:df:26:17:5b:a5:9b:a1:
                    99:96:ae:98:93:95:57:00:2c:96:15:50:a3:38:33:
                    f3:b8:76:70:3f:5d:d6:f1:7e:f5:9e:6f:f4:32:5f:
                    da:13:17:b3:4a:29:0e:c5:f4:9b:68:90:69:64:b2:
                    57:0c:0a:6d:c3:58:ed:96:18:3f:6b:f2:4d:94:ba:
                    f7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:02:5F:11:33:12:2C:17:21:58:45:18:21:A9:C3:AD:B0:CB:C9:CF
            X509v3 Authority Key Identifier:
                keyid:ED:5D:66:31:8E:FF:C3:79:00:E1:4A:00:DD:2D:93:79:FE:CC:FA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED5D66318EFFC37900E14A00DD2D9379FECCFA14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/yMH9tTQYnTryh2giZNvanyw9xKGYSn39LJT3Bx3Gmic/0/34352e3139302e39362e302f32342d3234203d3e20323639363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:20:1a:e3:80:97:e4:6e:1a:df:ba:b8:3f:3d:44:71:20:
         b9:12:69:01:c8:ad:b2:65:35:a0:e3:aa:b0:80:4d:2c:e8:64:
         fc:21:a1:e8:02:38:25:36:f9:78:a4:c4:a3:4b:eb:c6:a4:77:
         54:c5:81:91:47:29:b7:0c:f3:69:cc:fe:62:f8:b2:51:8c:b5:
         88:bf:05:ee:ac:3b:1b:38:99:87:87:b7:6a:96:57:f0:74:b1:
         af:a2:99:08:9c:b3:64:31:ae:66:f9:be:c6:27:4c:87:23:ac:
         ce:9f:dc:9b:4b:dd:16:cc:9b:94:f5:cb:82:6a:c0:c9:7f:33:
         f3:4d:c4:d7:a5:bd:b6:f9:86:da:2d:15:c4:20:cf:7b:71:3d:
         c1:f8:fd:fa:8a:5d:c0:5c:3c:37:99:7f:85:e5:69:4b:98:4d:
         51:28:b4:80:c4:13:90:89:3b:77:f0:6d:62:ec:de:1c:95:8d:
         bf:07:50:c9:a7:5a:38:95:e8:e4:84:d9:02:b2:69:f2:62:57:
         d1:8d:33:fb:9f:e1:44:e6:e4:db:d7:8e:27:81:bb:1d:95:c0:
         fc:2c:7a:72:b8:72:19:d4:f1:5f:90:cd:d9:9a:6a:06:8a:0b:
         c3:37:d7:cc:01:6b:b5:d4:72:5a:34:5b:c0:3d:70:02:78:0b:
         f8:25:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:44:48 2025 by rpki-client