Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231382e302f32342d3234203d3e203631353932.roa
File:                     34352e3232342e3231382e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          HcdKPNozPY4+21IjD8upaqW45xZvxPID5XxswGd1VK4=
Subject key identifier:   DB:61:6C:AE:EF:C6:E9:9B:6E:E2:E9:ED:FB:83:EE:2C:3A:9A:8C:A4
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       4992591641919EF4DFEC67473526A00387F4D5BF
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231382e302f32342d3234203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:03 +0000
ROA not before:           Wed 12 Feb 2025 14:26:03 +0000
ROA not after:            Wed 11 Feb 2026 14:31:03 +0000
asID:                     61592
IP address blocks:        45.224.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:92:59:16:41:91:9e:f4:df:ec:67:47:35:26:a0:03:87:f4:d5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:03 2025 GMT
            Not After : Feb 11 14:31:03 2026 GMT
        Subject: CN=DB616CAEEFC6E99B6EE2E9EDFB83EE2C3A9A8CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:92:d3:4d:12:c0:24:e5:40:aa:27:cb:bd:8e:
                    9a:20:2d:63:5a:ca:f6:34:f6:47:aa:75:43:3c:e6:
                    e3:83:72:ca:cf:ae:6d:45:29:34:d2:45:ba:35:63:
                    75:bf:52:46:c8:78:4b:07:8e:bb:58:f2:aa:bc:4b:
                    76:cf:f2:7d:e1:f0:73:c3:44:15:47:09:de:7b:89:
                    b7:41:45:b8:88:e8:73:fc:a3:07:c7:d6:c7:3b:f0:
                    be:da:a6:f1:c6:c1:18:9c:a2:e5:73:b1:98:d5:96:
                    b7:5a:7e:85:48:3d:7f:23:f1:2d:2f:98:71:ac:6d:
                    05:2b:39:98:2e:12:18:c0:27:f4:95:00:90:39:6a:
                    24:21:8f:d7:93:86:2d:a9:4a:6f:6c:b0:75:bf:16:
                    09:30:32:5f:99:6d:e6:96:4e:06:0f:48:3a:4e:50:
                    38:06:51:94:ba:83:18:f3:e2:44:34:30:96:73:96:
                    a0:3f:51:2e:e0:cc:87:62:7e:02:09:7c:93:38:46:
                    8a:a6:9a:e7:80:56:1e:64:24:76:38:3c:be:9a:fa:
                    c6:9e:21:c9:dc:92:15:fa:24:e3:ae:e1:e0:c7:96:
                    21:ab:3c:f0:45:11:61:14:45:c2:82:77:c4:e6:f2:
                    95:ef:52:78:78:84:7b:c5:86:89:96:2c:70:f8:8b:
                    54:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:61:6C:AE:EF:C6:E9:9B:6E:E2:E9:ED:FB:83:EE:2C:3A:9A:8C:A4
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231382e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:6d:77:14:da:91:08:39:72:cd:d1:14:0d:da:d5:a8:28:75:
         9c:8d:eb:34:99:0a:1d:56:ed:ed:1f:37:17:b9:14:9c:79:29:
         32:e2:b0:4a:d5:fe:ee:cf:42:2b:b1:65:dd:da:4b:30:e7:16:
         e2:dd:45:0a:a0:14:18:0a:a6:f7:a0:61:85:cf:15:be:57:7d:
         e5:e6:00:6d:86:9e:6e:a2:2f:50:b1:2a:1d:69:60:4e:cd:9b:
         3e:7a:38:d0:37:56:58:e1:04:78:30:aa:67:a1:76:a9:5a:2f:
         4b:9e:2b:54:78:57:65:fc:7a:9a:b2:d3:97:d2:51:fa:5e:3e:
         70:3d:3a:23:ac:e7:50:04:e0:9d:1f:c0:40:81:ed:80:7e:f1:
         48:e6:7c:b5:b2:2d:4d:bd:84:d9:34:ca:c5:8a:13:db:71:2d:
         9a:a2:db:46:7c:49:3b:5d:53:46:af:0c:cb:e2:fb:aa:31:ff:
         17:46:87:be:fc:e7:a3:af:a9:f0:32:f5:a0:13:f7:b6:01:70:
         d3:c3:10:93:1d:9a:27:f6:c6:84:cc:6c:0f:c8:d5:ae:aa:14:
         d4:87:f7:aa:a1:58:c4:6b:25:ca:cd:52:e6:4a:30:ec:80:11:
         88:a3:34:6d:8f:22:b4:cd:c9:61:e5:dc:eb:10:f0:7b:5d:ad:
         f2:6e:75:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:15 2025 by rpki-client