Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/34352e3233382e3133372e302f32342d3234203d3e20323638333332.roa
File:                     34352e3233382e3133372e302f32342d3234203d3e20323638333332.roa (raw, json)
Hash identifier:          +AuWFPwcrFfULKGXkiM6+vinOyBoCzRXW5X0m/XLMD0=
Subject key identifier:   71:08:90:74:09:50:E2:9A:68:1E:2B:12:82:EA:32:97:B4:4B:0C:5A
Certificate issuer:       /CN=7C2B62DDAC7CD557627D3A7FA657743CC2942997
Certificate serial:       25EE9D48F0F8259D3CB6CC51197E59EFED5EF933
Authority key identifier: 7C:2B:62:DD:AC:7C:D5:57:62:7D:3A:7F:A6:57:74:3C:C2:94:29:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/34352e3233382e3133372e302f32342d3234203d3e20323638333332.roa
Signing time:             Sat 02 Mar 2024 13:07:20 +0000
ROA not before:           Sat 02 Mar 2024 13:02:20 +0000
ROA not after:            Sat 01 Mar 2025 13:07:20 +0000
asID:                     268332
IP address blocks:        45.238.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ee:9d:48:f0:f8:25:9d:3c:b6:cc:51:19:7e:59:ef:ed:5e:f9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C2B62DDAC7CD557627D3A7FA657743CC2942997
        Validity
            Not Before: Mar  2 13:02:20 2024 GMT
            Not After : Mar  1 13:07:20 2025 GMT
        Subject: CN=710890740950E29A681E2B1282EA3297B44B0C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:d3:1b:f1:d3:ca:2b:3e:d9:0b:5a:84:9c:
                    30:40:88:7a:d3:0f:9a:2a:2c:ea:2d:af:d2:0f:2c:
                    ae:2f:f0:12:b3:d4:e9:53:ec:c5:a1:79:36:53:fe:
                    d2:ca:c7:2e:7f:ee:d0:19:61:cb:2a:82:6f:de:2b:
                    9a:ed:1a:ec:39:51:e4:0f:bb:f4:f1:fc:05:73:fe:
                    cd:67:ad:f0:62:52:7b:8d:47:50:40:ad:e7:3f:6f:
                    6f:b0:d8:33:2c:45:96:39:bb:50:b2:e1:7a:ba:49:
                    07:ac:fe:a2:7d:cc:18:4d:0c:0b:ed:97:d1:63:02:
                    b4:f0:39:20:8d:53:91:84:97:38:41:a0:20:9b:c0:
                    7f:e4:05:94:9b:0b:28:8d:c8:7c:c4:f2:07:21:84:
                    d6:d4:8d:54:d1:11:67:51:2f:06:7f:fe:e3:cd:9b:
                    cf:29:cd:df:58:1d:22:18:ca:be:ac:25:0f:23:b8:
                    f8:ee:25:9e:32:a2:d3:1c:d3:b0:9a:76:5c:2b:3b:
                    de:dd:78:eb:0d:9d:81:d6:b4:b2:ae:c6:50:ec:ce:
                    5f:4f:be:b4:86:8f:57:24:73:33:a7:4f:b4:46:e2:
                    9a:88:2c:84:e9:50:42:db:74:91:66:52:95:e8:31:
                    b9:92:d7:82:8a:8a:6b:a0:b3:d7:0e:09:1a:b4:15:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:90:74:09:50:E2:9A:68:1E:2B:12:82:EA:32:97:B4:4B:0C:5A
            X509v3 Authority Key Identifier:
                keyid:7C:2B:62:DD:AC:7C:D5:57:62:7D:3A:7F:A6:57:74:3C:C2:94:29:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C2B62DDAC7CD557627D3A7FA657743CC2942997.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hg1Mn8SJ2PxjG7cehRwwQkLsNe9cRFybtjUdoByiDv36/0/34352e3233382e3133372e302f32342d3234203d3e20323638333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:b0:0d:4d:d3:17:ac:62:66:65:aa:4b:9e:00:f8:3d:f3:
         28:a1:9b:73:3c:fc:df:d2:28:a4:f1:0e:45:82:a3:f2:3e:46:
         38:9c:1d:22:b2:bb:e6:53:fe:25:bb:af:ed:5a:fd:eb:e7:3f:
         65:43:4e:86:ca:1a:03:bf:f7:37:ff:e1:ba:d2:2a:2c:32:94:
         00:d8:60:1c:6f:74:b1:95:e1:f3:8d:63:a3:cb:63:29:99:0d:
         0e:4a:3b:54:1d:a0:36:04:c7:d0:78:37:55:b1:2a:46:47:1d:
         9f:3e:3e:c0:2b:69:86:df:42:bf:c4:b9:f2:a1:bb:06:f1:81:
         1f:db:ad:fe:c3:2d:90:ad:51:b4:61:3d:fd:49:56:6f:a5:ab:
         76:a0:bb:97:e0:fd:7e:9d:58:bf:39:8a:18:61:61:85:97:ce:
         ee:ed:35:07:2d:de:0a:f3:47:17:92:b6:34:b5:8b:03:f0:8f:
         93:a5:bc:4b:ec:6d:4e:8e:b4:23:2a:49:9a:48:90:0d:ef:65:
         59:09:8d:90:ea:c0:12:30:04:72:f6:33:35:8e:a1:cc:cc:55:
         7e:b5:6e:9c:e0:d6:10:61:d7:66:01:21:19:39:7d:69:43:9b:
         f7:22:66:df:6d:09:7c:00:5b:10:3b:95:10:ba:ad:23:3f:d0:
         b8:fc:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:30:57 2025 by rpki-client