Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231362e302f32322d3232203d3e203631353932.roa
File:                     34352e3232342e3231362e302f32322d3232203d3e203631353932.roa (raw, json)
Hash identifier:          hgwwTLoEhxQXDJPEwrzo/53i9GgV44dR7QfyC3gOfMI=
Subject key identifier:   CD:EF:D9:2A:D3:78:62:13:CA:E5:AF:A7:42:03:92:3E:F3:C2:A6:08
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       01969522A5F60D31FC1CFF9EEE650CBE2D747265
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231362e302f32322d3232203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:02 +0000
ROA not before:           Wed 12 Feb 2025 14:26:02 +0000
ROA not after:            Wed 11 Feb 2026 14:31:02 +0000
asID:                     61592
IP address blocks:        45.224.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:95:22:a5:f6:0d:31:fc:1c:ff:9e:ee:65:0c:be:2d:74:72:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:02 2025 GMT
            Not After : Feb 11 14:31:02 2026 GMT
        Subject: CN=CDEFD92AD3786213CAE5AFA74203923EF3C2A608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0a:b9:72:5a:a6:c7:ab:29:ab:5e:59:ec:e2:
                    56:0e:56:27:63:a5:60:47:89:cc:62:4b:79:56:de:
                    29:dc:db:e2:73:2b:0f:ba:ca:a2:5e:7b:de:8e:54:
                    09:0b:61:15:4d:b5:6e:58:f5:d4:65:e3:0b:c7:e9:
                    c5:01:a5:19:92:51:9e:96:d1:07:1d:4b:07:a5:03:
                    92:02:00:92:f4:a8:88:6f:0b:20:50:77:d9:84:76:
                    5b:12:4c:3c:c5:a4:5e:6a:eb:78:a3:d4:cb:1c:1f:
                    5f:86:86:6a:cf:40:a3:19:d4:d6:72:40:fc:65:a1:
                    aa:ff:81:56:cc:b7:1f:ce:f2:21:26:03:11:33:f0:
                    9f:fe:5c:65:1f:44:fc:d6:29:89:7f:bb:7a:56:d8:
                    11:16:8a:77:4d:26:dc:0e:a2:e0:1e:23:4e:44:61:
                    6f:1d:64:80:b8:cd:e5:f2:c4:a0:89:64:d2:5a:dc:
                    e3:8a:6f:9a:e2:30:fa:54:af:bf:80:d3:2a:76:a7:
                    2c:6c:38:f3:79:08:80:bf:1d:bc:67:ac:7c:94:fc:
                    c8:2d:21:e2:3a:82:3e:b3:0d:0d:c2:06:fa:23:6d:
                    9a:02:a6:21:04:40:68:19:40:ea:23:6f:d5:39:e9:
                    7e:b8:e1:ec:07:c4:98:28:16:d5:f0:c3:c2:be:c0:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EF:D9:2A:D3:78:62:13:CA:E5:AF:A7:42:03:92:3E:F3:C2:A6:08
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231362e302f32322d3232203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:ea:4d:d2:d7:f3:ff:91:af:23:12:5c:22:58:7f:a3:e9:
         0e:2a:d4:1e:47:9d:7c:e5:bd:5c:2f:ee:0b:af:b4:ca:2e:9f:
         26:02:9f:e6:0c:2d:5a:5a:d9:cc:12:2e:40:68:53:41:08:9b:
         27:e3:40:7b:82:3b:64:74:c9:30:b4:8b:b8:c1:22:92:34:c2:
         94:c5:85:e6:77:a3:01:0e:30:7c:e3:63:98:c0:ec:84:2a:cc:
         fa:3f:96:ab:ba:b4:88:31:85:d8:a9:3b:fe:a4:bd:6c:92:b9:
         47:5c:42:c5:c0:3d:fd:79:ed:9d:5d:3e:74:9a:5f:85:94:cf:
         33:c2:1b:4a:be:86:2a:38:1d:7f:e9:57:01:ee:ea:74:a9:16:
         36:3f:1c:fe:66:60:85:08:fc:dd:c4:11:2b:06:38:fc:ce:3b:
         3d:c5:d5:e1:6a:8a:0e:13:78:27:71:e6:a2:51:1e:d5:a6:46:
         8b:f7:ce:4b:45:17:d8:b4:16:38:78:be:2f:b0:78:1a:d8:30:
         f5:d7:32:78:45:7c:8c:f9:dd:12:e8:54:94:a5:16:32:70:d6:
         d3:d9:26:12:5e:6d:0c:79:ce:84:c9:0f:3d:4e:6f:84:fe:fe:
         9f:f2:6a:b4:ce:f5:af:27:bf:a1:e1:ff:67:a9:fd:76:67:2e:
         ea:be:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:55:37 2025 by rpki-client