Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/34352e3137372e3130302e302f32322d3234203d3e203133373836.roa
File:                     34352e3137372e3130302e302f32322d3234203d3e203133373836.roa (raw, json)
Hash identifier:          xCm0Mci1Cigd/kLV8A3vzSaWYKbRkYLngEayCe8i4Hw=
Subject key identifier:   64:10:6A:8D:94:3E:DD:E4:E4:47:26:3A:8E:A1:86:14:EC:AC:1F:03
Certificate issuer:       /CN=63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65
Certificate serial:       6D0091D9AFE992380FBE8BD079358DCBB4ED44C3
Authority key identifier: 63:63:5F:5D:8D:FC:4E:C6:EB:51:8D:ED:A1:83:0F:B8:4F:E2:0A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/34352e3137372e3130302e302f32322d3234203d3e203133373836.roa
Signing time:             Thu 15 Feb 2024 20:17:48 +0000
ROA not before:           Thu 15 Feb 2024 20:12:48 +0000
ROA not after:            Thu 13 Feb 2025 20:17:48 +0000
asID:                     13786
IP address blocks:        45.177.100.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:00:91:d9:af:e9:92:38:0f:be:8b:d0:79:35:8d:cb:b4:ed:44:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65
        Validity
            Not Before: Feb 15 20:12:48 2024 GMT
            Not After : Feb 13 20:17:48 2025 GMT
        Subject: CN=64106A8D943EDDE4E447263A8EA18614ECAC1F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:83:a2:e7:a9:98:3f:b2:84:ba:81:d7:8a:
                    bf:aa:7e:a0:74:54:32:50:d1:59:d0:8a:20:80:f0:
                    58:ef:c2:41:e3:6f:5f:5d:b0:43:eb:0c:af:50:69:
                    81:ce:40:de:9b:46:55:da:42:60:34:40:15:ae:83:
                    8e:5e:16:e0:4a:f7:d8:59:b1:da:53:ab:7a:e1:07:
                    3e:fa:d7:4b:29:1c:ac:5e:6b:be:50:c0:35:30:7f:
                    23:1e:be:79:97:18:56:83:4f:d9:65:43:f1:3a:a4:
                    7c:ae:85:26:d4:d3:c2:e8:f4:fa:50:c8:3d:90:a8:
                    7f:c3:06:34:72:ab:0b:ac:f0:0c:e3:24:2f:23:7a:
                    49:8d:83:62:de:c1:bd:b6:24:d8:95:aa:52:d3:19:
                    b5:9d:18:38:e4:47:7d:67:af:7b:ce:be:46:96:ef:
                    85:12:95:1b:20:ae:b0:ef:c0:45:26:ae:0a:ec:90:
                    32:b6:ed:91:13:47:6e:e6:18:49:5b:4c:46:ed:8d:
                    98:29:c0:4e:ec:79:ba:02:77:d2:4c:e8:fb:4d:a2:
                    99:d5:f5:80:73:cc:2e:63:ee:50:ce:d8:dc:11:9c:
                    68:77:7c:e5:c1:c6:e0:0a:e4:df:25:36:cf:7a:fa:
                    8e:23:12:93:d5:58:65:06:12:47:d6:80:1e:fa:4d:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:10:6A:8D:94:3E:DD:E4:E4:47:26:3A:8E:A1:86:14:EC:AC:1F:03
            X509v3 Authority Key Identifier:
                keyid:63:63:5F:5D:8D:FC:4E:C6:EB:51:8D:ED:A1:83:0F:B8:4F:E2:0A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63635F5D8DFC4EC6EB518DEDA1830FB84FE20A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/34352e3137372e3130302e302f32322d3234203d3e203133373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:b0:a7:44:72:9c:18:03:a1:de:05:95:2e:9c:00:68:3a:
         9e:31:ef:ad:d9:82:d8:ff:89:d7:c4:2c:c6:b1:3f:ff:03:91:
         cf:50:8d:73:ee:96:b0:ba:7c:76:c3:42:e2:15:29:25:09:04:
         b5:2a:78:32:8e:51:78:d3:02:17:f1:59:db:4a:13:6b:22:79:
         55:a2:e7:a2:44:58:60:ac:9d:f5:28:11:cc:00:9e:e0:2a:31:
         46:3c:1b:58:d4:f3:d6:19:61:f0:9b:30:50:b4:ec:65:c6:c7:
         87:f4:66:1e:61:a3:b1:c9:10:23:85:59:7d:ca:b1:78:64:0a:
         13:30:41:ff:60:51:b3:77:37:13:2a:46:4b:a5:aa:84:d6:f6:
         79:34:90:31:c3:0c:fc:43:20:03:f5:32:bf:58:c5:7d:99:eb:
         68:93:f1:ef:6e:fb:1c:3a:ad:9d:05:52:69:af:b1:48:37:c8:
         5c:21:d2:68:f0:62:1f:15:40:bc:70:00:c1:ac:5b:85:31:5a:
         48:f3:e0:5b:8f:e6:39:36:d5:df:f3:3a:c4:89:e7:0f:0b:2c:
         6f:1d:ee:a8:cf:c9:cc:0b:99:f6:fa:80:3c:1e:9a:db:ec:10:
         1e:c8:b9:8d:6b:45:be:77:f6:ad:37:03:f0:84:dd:10:bd:f2:
         35:08:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:13:23 2025 by rpki-client