Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          v9Clf1p3Y/6xMEogPNj2AY0gNQN25nEj7+COgH3omXE=
Subject key identifier:   1F:6B:21:A5:B4:CF:BC:63:B1:AD:66:D3:5F:28:3F:FF:32:FC:C2:8F
Certificate issuer:       /CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Certificate serial:       7EFAE63B54C9E630FCE21E0BFF7EFD811BD323AE
Authority key identifier: 91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 01 Apr 2025 15:16:01 +0000
ROA not before:           Tue 01 Apr 2025 15:11:01 +0000
ROA not after:            Tue 31 Mar 2026 15:16:01 +0000
asID:                     262503
IP address blocks:        45.181.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fa:e6:3b:54:c9:e6:30:fc:e2:1e:0b:ff:7e:fd:81:1b:d3:23:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
        Validity
            Not Before: Apr  1 15:11:01 2025 GMT
            Not After : Mar 31 15:16:01 2026 GMT
        Subject: CN=1F6B21A5B4CFBC63B1AD66D35F283FFF32FCC28F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:12:9e:e7:01:69:f6:23:87:cb:e9:ff:50:
                    6e:04:5e:5d:8d:a0:77:2e:17:4e:b0:cc:8f:eb:7b:
                    ac:9e:f8:06:f0:75:95:55:84:81:97:db:3b:d7:b1:
                    bd:54:a9:19:58:be:86:cc:0e:cf:e8:59:4e:e4:93:
                    fb:64:99:e2:31:15:62:08:9c:85:dd:84:1b:80:ec:
                    c5:8c:0c:bb:fc:00:92:62:4a:64:e0:78:89:8d:30:
                    4c:bd:67:10:94:d5:67:77:6c:6c:bc:59:93:bf:cf:
                    0d:b0:6c:0e:fb:37:11:15:44:9a:49:50:19:7c:cd:
                    4c:de:9f:ad:03:1e:4b:a1:41:39:a8:af:cd:e6:bd:
                    e6:1d:91:8a:27:c4:9b:d5:92:ae:2c:5b:7c:71:3e:
                    bb:44:76:4a:74:6e:0b:41:3f:ff:bf:ad:64:f1:b3:
                    75:95:9e:24:68:02:39:74:ef:3c:49:3e:ce:d4:a2:
                    66:8c:84:aa:81:88:49:e8:1e:aa:80:45:df:0d:ee:
                    0c:e1:94:88:b8:08:68:ae:d3:78:01:34:61:5d:fa:
                    bd:7b:92:e2:0d:bd:45:96:f2:bf:f0:8d:eb:24:70:
                    70:7e:61:29:05:b0:25:ad:54:76:c8:ad:d9:b2:9d:
                    57:a5:0a:ff:37:e7:94:65:4d:46:2b:6c:90:4a:98:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:21:A5:B4:CF:BC:63:B1:AD:66:D3:5F:28:3F:FF:32:FC:C2:8F
            X509v3 Authority Key Identifier:
                keyid:91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:22:d8:c6:f6:45:88:21:76:6d:28:4a:fc:9b:a0:14:3c:39:
         cd:80:6b:a8:eb:35:31:7b:3d:1e:89:80:73:4c:10:96:1c:90:
         ca:5d:03:fe:7b:a0:93:ef:bc:7d:e1:59:7c:fc:92:9a:dd:08:
         c3:24:5c:a9:78:96:19:c6:e1:f4:31:04:3f:1a:05:83:ab:36:
         71:3e:17:e5:0e:e8:2c:f0:66:4c:5c:b5:6d:42:60:c7:e4:82:
         40:74:a2:13:94:22:4a:1b:7b:06:d6:c4:40:c0:fb:58:45:d7:
         f0:60:a6:35:f1:bb:21:d4:2f:04:b1:7f:1e:49:0f:64:4a:20:
         5d:d0:ad:7f:48:17:de:48:f5:82:db:17:dd:28:39:34:1d:02:
         0c:54:37:6f:25:c1:53:fb:53:f1:dd:44:4c:aa:c2:64:0d:89:
         61:54:b1:ae:1a:e7:b1:8b:59:a8:59:f9:1b:c3:4c:2c:86:8e:
         cc:23:f9:5a:c2:58:87:2d:a8:6e:9d:27:c1:97:f8:6e:c3:d0:
         ab:48:5b:31:3c:23:2d:ff:fd:c2:4a:dc:8b:8f:ef:6d:86:0f:
         8e:49:00:76:49:51:5b:de:b5:b9:82:0b:98:e6:fd:6c:20:14:
         02:4d:95:8a:05:44:a2:35:ff:23:5b:f8:c1:ce:a5:59:92:be:
         f0:47:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:38:24 2025 by rpki-client