Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3138382e302f32342d3234203d3e203631353932.roa
File:                     34352e3233322e3138382e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          vq8qhXcvpcFDakL/N5yX1dphsqgxyna8fOKCUcKr6tA=
Subject key identifier:   F5:97:FB:D6:97:3A:E4:AC:4C:68:3E:4E:32:CA:CD:F5:7B:AA:D2:73
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       6D3A8D852E3F1FF5661A4865B7065B3F2B23D755
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3138382e302f32342d3234203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:03 +0000
ROA not before:           Wed 12 Feb 2025 14:26:03 +0000
ROA not after:            Wed 11 Feb 2026 14:31:03 +0000
asID:                     61592
IP address blocks:        45.232.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3a:8d:85:2e:3f:1f:f5:66:1a:48:65:b7:06:5b:3f:2b:23:d7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:03 2025 GMT
            Not After : Feb 11 14:31:03 2026 GMT
        Subject: CN=F597FBD6973AE4AC4C683E4E32CACDF57BAAD273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:7d:71:69:55:78:28:ed:f6:d3:f8:c5:af:
                    cb:7c:16:38:dc:aa:32:1d:a8:97:86:73:1c:78:53:
                    f2:2f:62:12:8e:5d:b5:79:0e:d3:22:05:a3:f1:73:
                    02:1f:87:04:f7:21:c6:8d:4a:44:8b:2a:58:47:70:
                    7e:da:ae:ca:9c:36:69:1d:4b:6e:98:99:a2:ca:9a:
                    30:57:ed:53:11:c6:66:18:7b:fa:d8:25:c9:3b:7f:
                    62:bd:fa:d7:a1:f3:57:7f:13:66:b4:3e:81:42:dd:
                    59:68:80:01:5a:54:54:f1:c7:4b:0d:c1:ee:a3:c0:
                    c1:88:ca:79:59:bd:4d:0e:d6:c2:2b:75:8b:3d:bc:
                    45:6c:08:09:6a:66:ed:85:94:06:54:fb:db:28:71:
                    d6:76:28:cc:d9:ba:29:46:b8:a3:a4:6b:7c:b8:5a:
                    3d:c2:84:51:09:1d:11:d0:08:db:ed:35:a4:c2:51:
                    fd:4f:e9:c6:48:d2:7e:6e:4a:5c:71:b6:47:d9:a9:
                    f6:65:69:7f:37:ca:6b:a6:cc:df:3e:8e:90:f3:24:
                    67:52:e3:c6:a2:ce:d2:df:0d:cc:e0:73:8c:97:82:
                    1b:dc:1f:21:74:ed:cb:78:4b:97:d1:bc:04:a2:9d:
                    5d:c8:b4:d6:5c:dd:20:44:8c:d5:f7:eb:cb:56:13:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:97:FB:D6:97:3A:E4:AC:4C:68:3E:4E:32:CA:CD:F5:7B:AA:D2:73
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3138382e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:2d:60:31:36:02:1e:07:6f:50:f0:2b:90:14:62:75:89:ec:
         14:a2:68:4d:fa:1e:0b:c2:cf:48:ed:1a:1b:45:5c:3c:6e:f2:
         08:f5:27:d5:fe:51:f1:a0:32:41:95:2d:7b:a5:a5:e9:12:5a:
         2a:06:28:8e:04:12:6f:aa:ed:79:1c:50:58:5a:52:28:62:52:
         e6:d9:8d:ad:aa:64:fc:30:c3:39:b1:d6:86:0e:0d:40:d7:b9:
         68:90:5f:2e:11:02:88:84:43:2f:5a:f3:05:91:0c:89:72:a8:
         5a:21:1d:01:ce:35:90:ce:fb:9e:f1:32:9a:e8:02:9c:b9:db:
         6c:bc:d5:17:3b:35:8a:ef:23:fa:89:d8:0a:ab:cc:e8:80:78:
         c8:4c:00:e4:53:0a:07:5f:15:46:f1:29:f8:61:0b:cf:a3:a8:
         fa:e1:08:50:20:b3:5a:ae:a7:fc:87:4b:38:70:b5:8e:38:fe:
         5b:65:d4:75:d8:76:66:03:fe:0f:ec:6e:51:da:a0:0d:91:38:
         75:80:25:7c:2e:4e:9b:05:e4:2c:6b:4b:9b:7d:f0:62:16:04:
         a5:c3:49:18:65:59:b4:03:d4:8a:a8:1b:60:22:94:88:f1:85:
         d4:ea:14:6a:87:5d:b2:52:85:b7:67:a9:a9:ae:1d:35:b5:8c:
         9a:c3:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:14 2025 by rpki-client