Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3233392e382e302f32322d3235203d3e20323634353632.roa
File:                     34352e3233392e382e302f32322d3235203d3e20323634353632.roa (raw, json)
Hash identifier:          s9+YYnGcqro2z6EgY2o9lsyYglwFCCQ1QtyYnqh5dyk=
Subject key identifier:   AA:C7:1E:3B:5C:73:33:3B:F7:2F:A0:B9:F9:F8:30:58:63:6A:BA:4A
Certificate issuer:       /CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
Certificate serial:       54B5524DD458CC448E8A48CF24C7121893C6848C
Authority key identifier: 0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3233392e382e302f32322d3235203d3e20323634353632.roa
Signing time:             Tue 12 Nov 2024 01:01:42 +0000
ROA not before:           Tue 12 Nov 2024 00:56:42 +0000
ROA not after:            Tue 11 Nov 2025 01:01:42 +0000
asID:                     264562
IP address blocks:        45.239.8.0/22 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b5:52:4d:d4:58:cc:44:8e:8a:48:cf:24:c7:12:18:93:c6:84:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
        Validity
            Not Before: Nov 12 00:56:42 2024 GMT
            Not After : Nov 11 01:01:42 2025 GMT
        Subject: CN=AAC71E3B5C73333BF72FA0B9F9F83058636ABA4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:15:5a:da:93:d2:8e:45:ee:83:f1:b4:9e:0f:
                    ed:f6:fd:9f:bb:3b:48:dd:02:f1:d5:3e:00:83:ac:
                    33:37:5b:5d:c1:97:56:92:e2:32:fe:3d:ff:0c:b8:
                    aa:c1:a4:c3:9d:64:dd:9e:14:e4:1e:81:4f:e1:a2:
                    54:c4:c8:e9:63:41:95:74:b2:dc:54:34:f4:ef:c7:
                    1a:7b:10:e4:40:6f:e0:00:15:7d:33:4b:2f:c4:63:
                    36:3e:7f:0f:3e:4b:34:06:f9:14:f3:44:4c:f2:00:
                    31:ef:44:35:6c:f9:1b:a2:70:96:ca:f0:08:ca:6a:
                    8b:04:c7:26:fe:00:d7:60:5b:91:a6:b5:89:00:9b:
                    1e:bc:2d:17:fe:6c:45:d7:91:0e:b8:74:db:6b:5a:
                    9c:e2:64:10:70:9e:c6:d6:bd:7b:6b:fa:d8:13:20:
                    d9:cd:f2:2b:54:14:c4:72:5a:ed:78:5a:7b:99:37:
                    b6:0a:4f:ff:e8:2c:c6:c9:57:da:3e:e4:81:c1:38:
                    ed:ed:fa:9d:4a:c6:81:dd:20:79:1e:47:30:d5:0d:
                    ea:2c:29:e5:a1:08:20:6a:0c:75:f6:80:d5:11:be:
                    5d:7d:bd:bf:0b:30:c9:3a:29:18:84:53:02:01:74:
                    5a:08:88:1a:49:32:ef:f6:9b:76:b7:31:87:50:68:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C7:1E:3B:5C:73:33:3B:F7:2F:A0:B9:F9:F8:30:58:63:6A:BA:4A
            X509v3 Authority Key Identifier:
                keyid:0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3233392e382e302f32322d3235203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:7e:98:82:e6:03:9e:d1:b7:54:83:ab:dd:c7:f7:0a:ca:a9:
         2a:2f:6c:ee:88:eb:b4:43:6a:55:50:87:c8:f5:38:c3:ff:30:
         13:74:35:71:07:01:fb:54:1a:67:15:f1:b4:b6:52:32:d4:a8:
         78:5f:a5:a3:18:db:a2:75:3a:66:e7:f0:5f:3e:92:f4:c8:34:
         3c:ec:3b:4b:3e:4b:7f:c6:b1:6c:4c:61:6f:0f:43:22:45:3d:
         52:5d:0b:cb:70:4c:29:97:79:b1:8a:75:41:c5:9c:de:7a:19:
         0c:8f:dc:97:f7:13:f0:1f:b7:95:0c:26:d0:19:3f:3e:63:f0:
         68:a9:f4:b2:5e:96:70:70:87:32:c6:f7:19:b3:c5:f9:68:48:
         da:c6:70:d0:2e:2b:aa:7f:84:5e:ea:d0:5f:32:07:16:9d:d0:
         58:80:b1:bd:b9:53:7a:34:94:6d:d7:84:f7:51:d4:9e:5a:93:
         b9:e9:c0:f5:0e:61:ee:a0:55:ed:e5:76:50:f0:15:0d:08:01:
         d8:e7:71:e7:aa:4a:e1:0d:4b:35:94:3b:18:80:72:62:e7:6e:
         1f:ac:1d:49:a4:9f:53:b3:bb:35:db:1f:96:55:f4:30:47:40:
         14:98:0e:e2:77:99:27:a9:bf:75:e7:9d:24:f0:13:42:08:2c:
         6a:e1:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:02:11 2025 by rpki-client