Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3235312e302f32342d3234203d3e20323638323136.roa
File:                     34352e3233352e3235312e302f32342d3234203d3e20323638323136.roa (raw, json)
Hash identifier:          4q6wNeli7QbFddNXz664CiKIQqX9lzrr07O6zLyLp3k=
Subject key identifier:   1C:5F:E1:D0:B9:FA:DA:4B:C6:2D:53:AF:4A:0E:F0:B1:CB:9A:60:7E
Certificate issuer:       /CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
Certificate serial:       7A16B980299D30E92CD0095C984475AE87D56856
Authority key identifier: 41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3235312e302f32342d3234203d3e20323638323136.roa
Signing time:             Wed 20 Mar 2024 23:50:26 +0000
ROA not before:           Wed 20 Mar 2024 23:45:26 +0000
ROA not after:            Wed 19 Mar 2025 23:50:26 +0000
asID:                     268216
IP address blocks:        45.235.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:16:b9:80:29:9d:30:e9:2c:d0:09:5c:98:44:75:ae:87:d5:68:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4112E3731E0AE560372831E75ED6420E95EFCFE1
        Validity
            Not Before: Mar 20 23:45:26 2024 GMT
            Not After : Mar 19 23:50:26 2025 GMT
        Subject: CN=1C5FE1D0B9FADA4BC62D53AF4A0EF0B1CB9A607E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:91:2f:4e:8e:41:51:1f:fb:68:ee:89:8d:e8:
                    bf:e2:ea:a4:cd:14:d1:cb:08:66:a5:e6:e9:29:4f:
                    77:07:d5:83:a2:ae:74:7e:52:9a:90:e9:b6:8f:5d:
                    9e:cd:60:1d:61:e6:e3:58:61:67:a6:36:73:a1:9a:
                    eb:de:e5:43:31:0c:7b:52:72:d2:87:9c:a7:fb:fc:
                    8c:e1:67:99:34:fa:6f:0d:8c:93:38:a1:49:0f:d4:
                    bc:d6:83:c8:9f:0b:fd:ea:9e:49:7b:32:3a:6c:f8:
                    f5:dc:f7:10:9c:de:c4:9e:65:a9:8d:f8:e4:7c:74:
                    bd:c6:98:ba:65:f9:84:55:ce:93:10:4f:44:10:36:
                    6f:78:ce:3d:d9:00:62:94:65:d4:9e:d1:7d:a0:b0:
                    b3:29:33:88:ac:d4:06:b6:f9:59:99:da:fc:fe:91:
                    78:f8:86:24:a4:d2:7a:e3:27:fa:71:9a:86:cc:1d:
                    d8:56:ec:a5:2f:ca:30:e8:1e:90:42:91:48:38:6f:
                    ab:53:0a:5a:79:3e:c0:77:0a:c9:c9:20:68:6a:83:
                    db:9c:7c:00:e8:00:d3:3a:09:47:f1:d4:f8:a6:2e:
                    de:f5:14:7d:54:98:6a:f0:38:c9:ab:3f:49:10:9b:
                    4c:2a:ef:2b:d3:c9:19:a7:b6:75:2e:0b:a0:c3:70:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5F:E1:D0:B9:FA:DA:4B:C6:2D:53:AF:4A:0E:F0:B1:CB:9A:60:7E
            X509v3 Authority Key Identifier:
                keyid:41:12:E3:73:1E:0A:E5:60:37:28:31:E7:5E:D6:42:0E:95:EF:CF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4112E3731E0AE560372831E75ED6420E95EFCFE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3235312e302f32342d3234203d3e20323638323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:92:93:95:9d:df:32:1a:59:d0:5b:e7:b9:d3:28:54:cf:06:
         44:b6:42:43:30:dc:96:a1:98:bd:73:bd:70:04:2d:b9:ad:0c:
         68:88:a5:50:4e:ed:88:c2:2f:75:74:60:2a:cd:81:f2:2f:eb:
         f1:3d:0b:1d:6c:7b:90:36:ef:fc:d3:4b:e2:99:3c:0b:1c:2a:
         f1:78:c2:28:92:f2:1a:66:22:cf:94:f7:6d:6f:8b:f0:cc:60:
         0d:c6:59:ac:6d:21:b0:44:65:d4:fb:19:10:38:82:15:09:26:
         d8:92:66:39:3a:dd:5b:2c:e9:c7:71:6e:ce:8a:9c:10:0f:07:
         3c:d8:fb:5f:87:96:ca:df:b8:d5:9c:48:d2:18:f9:31:b9:ba:
         ac:83:c8:6c:b8:7a:a5:37:a0:8f:5e:f4:02:99:53:36:3d:a0:
         fb:1b:58:de:db:64:72:d8:2a:0a:2a:70:be:17:41:c4:f2:07:
         f3:f3:fd:61:1f:ee:37:b6:35:70:55:f1:40:dd:85:47:7d:cd:
         12:2c:17:99:d6:4a:45:44:d0:66:45:62:41:c9:51:90:bd:37:
         cd:f0:9a:ea:64:03:61:ea:5d:23:0d:76:b9:7d:42:d7:1c:1f:
         50:93:10:da:b4:82:0f:c1:1b:93:37:33:36:ac:16:5d:dd:c6:
         58:25:b9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 04:20:14 2025 by rpki-client