Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37352e302f32342d3234203d3e20323639353137.roa
File:                     34352e3138382e37352e302f32342d3234203d3e20323639353137.roa (raw, json)
Hash identifier:          4PnGM8sOT7Xxx6wwU5TeBvyKKJl0IPPgyX99vePc/aA=
Subject key identifier:   78:C1:CF:B5:E4:44:1E:3E:B3:3C:79:B7:8F:F4:D2:F1:A7:1E:7E:3A
Certificate issuer:       /CN=CB0236634B4C2CE495EE34D60558955292749C07
Certificate serial:       6E4FA77083D962E1DABBAF2B38891DA5F7A10D0A
Authority key identifier: CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0236634B4C2CE495EE34D60558955292749C07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37352e302f32342d3234203d3e20323639353137.roa
Signing time:             Thu 12 Dec 2024 14:06:46 +0000
ROA not before:           Thu 12 Dec 2024 14:01:46 +0000
ROA not after:            Thu 11 Dec 2025 14:06:46 +0000
asID:                     269517
IP address blocks:        45.188.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4f:a7:70:83:d9:62:e1:da:bb:af:2b:38:89:1d:a5:f7:a1:0d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0236634B4C2CE495EE34D60558955292749C07
        Validity
            Not Before: Dec 12 14:01:46 2024 GMT
            Not After : Dec 11 14:06:46 2025 GMT
        Subject: CN=78C1CFB5E4441E3EB33C79B78FF4D2F1A71E7E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:48:85:ea:72:70:4e:df:fb:3c:fb:bf:66:
                    ce:51:00:8f:69:e8:82:1c:0e:15:31:97:fa:ea:8c:
                    07:77:e8:2c:7f:39:a4:62:b6:86:b8:0b:ef:9c:d1:
                    83:e5:51:38:50:a4:60:a8:5e:53:ab:df:e3:2f:9f:
                    19:49:89:a0:53:69:10:61:d4:91:cd:db:c8:b0:32:
                    ee:aa:50:18:db:64:13:d5:f6:37:a2:42:d9:cd:a6:
                    6d:3f:be:c2:75:a0:3d:b4:02:dd:35:db:3c:08:f1:
                    14:52:a3:74:63:ae:38:75:fe:4a:52:3b:48:b7:9b:
                    d7:9a:fd:ae:81:f7:f7:c6:1e:3b:44:65:5c:23:57:
                    6c:eb:c3:47:39:ee:4e:70:7f:e7:2c:41:e3:74:ed:
                    ea:d6:92:a0:84:bf:ca:3a:f1:d3:f1:a3:e7:88:44:
                    18:bc:48:23:a3:be:c8:56:6b:fb:57:22:fe:ad:c3:
                    48:c4:1a:c8:37:75:c9:9b:48:cb:b0:61:1d:4a:0a:
                    2e:2a:84:c6:ba:3d:8d:06:26:14:f4:37:55:e8:72:
                    72:bd:eb:63:31:39:f7:70:f6:e1:4f:24:ab:d1:45:
                    3a:6f:69:3e:53:fe:9d:68:7c:79:3f:ed:3d:99:f7:
                    98:aa:71:a5:a8:5e:05:cd:9b:21:1d:72:6d:e8:ad:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C1:CF:B5:E4:44:1E:3E:B3:3C:79:B7:8F:F4:D2:F1:A7:1E:7E:3A
            X509v3 Authority Key Identifier:
                keyid:CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/CB0236634B4C2CE495EE34D60558955292749C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0236634B4C2CE495EE34D60558955292749C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37352e302f32342d3234203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:d6:4f:cb:2a:1d:21:e1:bb:90:71:45:05:a2:00:75:f2:65:
         90:f5:e4:c8:f2:4c:ee:1e:5a:bb:2f:6b:25:ea:ac:63:23:7b:
         ec:25:3c:4e:ff:6d:06:dd:20:9a:5d:b3:4e:d2:d9:29:eb:b6:
         84:69:c1:11:3b:f4:7c:7f:f2:08:52:12:b1:83:65:68:1a:06:
         df:cb:6b:cc:c9:f0:78:81:f2:03:77:46:30:7b:95:d7:cb:53:
         46:59:e3:86:89:b4:92:c4:8c:93:af:60:0c:12:00:5f:a2:95:
         d6:7e:de:69:3a:9e:b2:77:55:1f:f8:16:89:8a:45:42:14:b3:
         82:b1:40:f9:cc:b4:a5:16:b3:5f:51:4c:81:c0:5d:74:05:12:
         c7:9a:1c:ca:32:22:b5:9a:09:b0:3c:11:e0:72:b6:a2:a2:e6:
         99:83:3d:da:ac:01:eb:23:d8:75:69:71:15:28:68:71:bf:d3:
         51:e1:fe:66:bc:72:fa:11:9c:79:19:8b:4d:c3:09:6e:f3:4e:
         c1:9e:fa:a2:8b:89:21:97:d1:70:aa:2a:f7:80:10:e4:bc:a1:
         e7:2f:a8:7d:97:ae:04:44:96:20:11:47:81:f9:ac:c3:32:e5:
         25:97:9a:b8:b1:93:c1:0b:97:d1:c8:24:05:f6:90:17:29:5c:
         3f:37:f1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:13:59 2025 by rpki-client