Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/34352e3136332e37322e302f32322d3234203d3e20323638353733.roa
File:                     34352e3136332e37322e302f32322d3234203d3e20323638353733.roa (raw, json)
Hash identifier:          fZcj2mNa6RAI7daULsRGzOs7bw//VfMrZ2q4Xamy7Ak=
Subject key identifier:   4D:42:B8:F0:53:97:DB:B4:C2:44:9D:62:8E:38:DD:03:E4:E0:F9:FD
Certificate issuer:       /CN=635B08B978D64805B810A85B7DD77EBE6B716916
Certificate serial:       5A4EE670308796F175E8E2CF0B525ACF5AF4BB6A
Authority key identifier: 63:5B:08:B9:78:D6:48:05:B8:10:A8:5B:7D:D7:7E:BE:6B:71:69:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/635B08B978D64805B810A85B7DD77EBE6B716916.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/34352e3136332e37322e302f32322d3234203d3e20323638353733.roa
Signing time:             Mon 09 Dec 2024 19:07:58 +0000
ROA not before:           Mon 09 Dec 2024 19:02:58 +0000
ROA not after:            Mon 08 Dec 2025 19:07:58 +0000
asID:                     268573
IP address blocks:        45.163.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4e:e6:70:30:87:96:f1:75:e8:e2:cf:0b:52:5a:cf:5a:f4:bb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635B08B978D64805B810A85B7DD77EBE6B716916
        Validity
            Not Before: Dec  9 19:02:58 2024 GMT
            Not After : Dec  8 19:07:58 2025 GMT
        Subject: CN=4D42B8F05397DBB4C2449D628E38DD03E4E0F9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:f8:b8:a3:7a:4d:be:82:4c:31:b0:d8:46:
                    b2:19:6e:34:a3:5f:23:f7:98:c7:b2:45:f3:ea:03:
                    c7:64:b8:d3:83:3a:59:08:05:40:6a:f8:e3:f8:26:
                    30:0a:15:64:1f:a5:23:bb:6f:b3:34:8d:eb:bc:6f:
                    dd:7a:4b:25:1d:16:5d:90:98:76:f4:97:2a:77:80:
                    88:a9:31:f3:e4:6b:8c:b3:cc:9a:62:d4:29:c5:5b:
                    eb:a7:19:10:0f:eb:7d:36:a4:e0:f2:25:5c:89:55:
                    ed:45:d9:d0:70:8f:66:22:c9:59:8a:ec:12:81:7c:
                    ec:f2:51:02:b4:58:8e:4e:49:88:40:51:49:c7:66:
                    2b:08:e0:fc:ae:b0:57:2c:77:f0:8d:0f:cd:81:e8:
                    78:c0:ae:8b:34:01:b0:ef:b5:d2:bc:97:44:4e:79:
                    4e:9e:4b:23:a8:cb:e9:fe:67:cc:e7:67:db:6e:ab:
                    82:22:c9:27:8a:b6:ed:ac:c7:2f:a7:8c:ab:c8:71:
                    b4:b5:a0:99:97:53:fc:44:83:57:fc:7b:f4:99:63:
                    19:78:ee:af:ee:cc:7d:a3:1a:e6:2a:a0:6c:21:19:
                    4a:4d:53:f4:9c:d6:ab:1f:94:65:0d:ee:94:09:be:
                    97:88:3d:b4:cf:a2:b1:c5:da:7e:8b:81:0a:98:f8:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:42:B8:F0:53:97:DB:B4:C2:44:9D:62:8E:38:DD:03:E4:E0:F9:FD
            X509v3 Authority Key Identifier:
                keyid:63:5B:08:B9:78:D6:48:05:B8:10:A8:5B:7D:D7:7E:BE:6B:71:69:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/635B08B978D64805B810A85B7DD77EBE6B716916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/635B08B978D64805B810A85B7DD77EBE6B716916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/34352e3136332e37322e302f32322d3234203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:2f:40:bb:e1:2d:61:a5:0f:66:04:a5:b6:39:12:2e:b4:0d:
         1b:a8:f7:0e:0b:50:82:59:d1:b6:47:75:4c:ca:04:da:0d:32:
         ce:a4:ef:62:81:f9:cf:76:f0:01:98:22:a8:c0:38:36:cd:9b:
         42:8c:c6:a5:b8:14:14:b2:e9:1a:b0:c8:26:a2:6a:ca:7b:c6:
         85:3b:7a:98:8a:f5:bb:20:12:7d:3b:da:91:6c:2b:3a:03:fa:
         b8:e2:43:2c:c1:75:f5:a5:7c:3d:85:66:8e:c9:c8:8d:15:6a:
         7a:24:6f:1c:07:51:3f:e8:78:ab:45:f4:2d:c4:cc:87:a6:02:
         e2:75:98:59:fa:b6:56:28:4c:0c:78:13:45:a1:d2:47:8e:cc:
         62:0d:89:df:33:c4:af:cf:1a:d3:ab:3f:a3:17:23:a0:bb:59:
         0f:73:9c:38:1c:92:72:41:a9:7f:ae:c4:c9:33:e1:d1:4d:b9:
         fc:4b:5b:6f:26:21:d5:fe:ad:7a:01:e8:6b:ec:6a:90:cf:2c:
         9f:15:20:19:5c:0a:45:ff:79:7a:11:6b:e8:5e:b7:ad:f8:7e:
         fe:9a:13:9b:8a:85:a6:b0:24:e6:67:fa:6b:6b:ac:8a:3a:6c:
         58:d4:0c:5e:42:8e:2e:f4:35:17:24:24:13:0d:f6:67:2b:12:
         0c:7f:cb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:50:58 2025 by rpki-client