Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231392e302f32342d3234203d3e203631353932.roa
File:                     34352e3232342e3231392e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          sNXrGG/ggI61z2+pS5CRl1Ix2aAjY1Is5viI9PMlGwQ=
Subject key identifier:   F3:80:38:C6:A3:C2:C4:E9:5F:F2:FE:40:4C:89:F7:34:8B:D9:4B:34
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       2EECBE6DC48345B1C1371126A274674DC0C71FB2
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231392e302f32342d3234203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:01 +0000
ROA not before:           Wed 12 Feb 2025 14:26:01 +0000
ROA not after:            Wed 11 Feb 2026 14:31:01 +0000
asID:                     61592
IP address blocks:        45.224.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ec:be:6d:c4:83:45:b1:c1:37:11:26:a2:74:67:4d:c0:c7:1f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:01 2025 GMT
            Not After : Feb 11 14:31:01 2026 GMT
        Subject: CN=F38038C6A3C2C4E95FF2FE404C89F7348BD94B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:5c:e8:83:e8:e5:ca:70:af:22:33:c0:41:
                    ae:de:e8:19:1f:99:b0:b7:89:89:97:1b:5b:34:31:
                    8a:a9:81:12:92:0f:24:5d:0e:40:c1:bf:2a:42:46:
                    91:80:52:45:0b:ce:fa:f4:1f:07:3e:03:ad:c5:dc:
                    73:c3:a8:18:4c:64:a0:ea:a1:f9:9d:06:cc:10:be:
                    77:15:43:c3:4f:79:7a:62:19:f5:d2:50:db:95:30:
                    56:a7:04:b3:f8:f5:0c:45:64:db:47:6a:a3:51:b3:
                    0f:cc:ba:22:9a:17:0c:06:a3:f3:d4:f2:5d:6e:dc:
                    ec:c1:2d:6b:1d:3f:d9:03:57:68:73:2c:23:24:56:
                    f0:93:6c:41:9c:f9:b4:e1:d8:48:f2:db:04:80:d3:
                    0b:9f:28:c7:77:22:58:78:75:b2:28:36:55:f0:e3:
                    02:19:a0:a2:05:8c:18:a3:32:a8:7e:b9:4d:68:24:
                    6a:f3:10:32:77:6f:d4:c5:99:52:c2:6e:f3:54:df:
                    36:12:92:d5:e3:59:7f:3b:f1:0b:d3:40:c2:0c:0e:
                    ab:78:0c:cd:aa:23:5e:7e:54:20:a6:7c:91:49:25:
                    fd:94:da:eb:75:93:90:69:16:85:84:8a:c0:75:57:
                    1e:62:02:ce:9f:4a:14:99:65:f0:1a:a5:4e:f2:cf:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:80:38:C6:A3:C2:C4:E9:5F:F2:FE:40:4C:89:F7:34:8B:D9:4B:34
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231392e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:f4:ba:a9:01:c2:0c:08:9b:bb:f2:74:f9:62:fe:51:bb:b6:
         da:30:ba:9c:b0:66:7e:f7:b8:15:39:c7:0f:dd:cf:fd:31:71:
         72:4f:f1:af:45:c8:b6:f1:ac:aa:67:0a:6c:81:1f:b9:6d:6b:
         e2:4d:b7:28:35:1b:f5:57:c4:1f:c2:72:f6:8d:d9:4a:af:a7:
         63:5c:f1:0c:96:d3:6b:c8:0b:1b:80:c4:d4:3d:53:1b:7c:ed:
         cd:6a:27:75:36:b5:dc:f7:9f:12:f2:98:0f:38:bd:a4:71:fa:
         3a:e3:25:6e:d8:10:58:71:16:b4:70:d6:9d:cc:78:c1:88:13:
         a1:23:3d:70:dc:44:7b:07:80:28:7b:b3:b4:a4:b2:3f:50:e3:
         63:23:b6:4a:2d:ae:7a:01:22:54:b0:e3:b8:49:06:a0:97:7b:
         8d:03:e8:50:02:d4:27:57:d5:20:bb:d4:3d:3d:a8:ee:a1:6a:
         68:ae:42:32:95:0d:68:e4:92:b4:50:e0:55:f0:5a:40:e6:cf:
         b3:9e:21:fb:59:ae:0b:d6:9a:fd:02:30:e8:0c:21:7a:75:44:
         47:71:66:7c:6f:55:9e:a0:e4:1e:b7:d3:1a:26:f0:cb:c9:cb:
         c3:19:47:6e:be:30:13:fd:69:a4:9e:60:4f:cd:fa:59:c5:85:
         73:4e:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:47 2025 by rpki-client