Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/34352e362e3232302e302f32322d3234203d3e20323636323438.roa
File:                     34352e362e3232302e302f32322d3234203d3e20323636323438.roa (raw, json)
Hash identifier:          skjEJ4HRRGnYkGLZHLieot6U8UQq3kXGl+/4QlKCZOA=
Subject key identifier:   2D:6E:ED:37:78:52:46:66:1B:6C:E4:7D:EB:C9:E0:78:DF:80:75:53
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       44A57FDEA46AB181F9EC8E1451B13696A3DC58CA
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/34352e362e3232302e302f32322d3234203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     266248
IP address blocks:        45.6.220.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a5:7f:de:a4:6a:b1:81:f9:ec:8e:14:51:b1:36:96:a3:dc:58:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:22:ff:6f:0f:1c:8d:29:7d:aa:ed:12:04:
                    af:a6:5d:5a:4a:eb:26:c2:db:cc:27:90:93:55:01:
                    73:20:77:a2:26:8b:80:72:09:cc:bf:6d:66:eb:e7:
                    9a:20:32:3c:d1:b3:1b:87:0c:bd:b7:f3:79:b5:ab:
                    aa:7e:e4:51:f7:17:01:27:b1:96:57:88:9b:88:ba:
                    bd:a0:4b:db:7b:90:c3:7a:cf:7c:d0:65:c9:45:a4:
                    f5:33:6e:5b:03:f1:54:62:19:21:a0:4a:c2:4f:21:
                    40:28:a7:4b:9e:37:de:3c:f4:69:7f:d8:4b:df:d1:
                    23:e1:91:bc:b1:69:0b:c2:59:5d:61:1f:66:6e:38:
                    5d:02:d9:1c:85:8f:e9:cb:91:c4:4d:80:42:0a:68:
                    ee:34:88:85:0b:9b:63:0d:c7:02:0e:7d:10:24:75:
                    0c:49:8c:c6:5b:da:1e:82:12:2d:68:34:20:dc:03:
                    92:74:ce:87:84:ad:71:47:dc:b4:b0:f5:ba:10:6e:
                    e7:72:db:ce:c4:61:1d:33:63:3b:53:1a:72:7c:7f:
                    45:0a:3a:92:fe:4f:a8:ba:43:e6:8e:30:8d:23:fa:
                    9a:36:db:fa:b2:ca:68:1f:1b:51:89:9d:42:29:2f:
                    58:c4:1e:19:80:1b:ea:72:b5:50:97:74:f4:92:e5:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6E:ED:37:78:52:46:66:1B:6C:E4:7D:EB:C9:E0:78:DF:80:75:53
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/34352e362e3232302e302f32322d3234203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:3d:4e:96:60:24:38:7d:80:18:ec:04:86:41:cf:f3:e3:52:
         b8:8c:fa:72:82:6d:b0:a2:28:4f:c3:08:3e:3d:ea:47:dd:77:
         83:e4:e3:e8:e6:74:d4:41:fe:17:6b:c9:44:3d:7a:77:4e:71:
         c1:6e:d6:64:17:7b:2e:56:fc:06:43:d7:64:db:46:47:7e:df:
         b5:85:71:d5:6d:d5:6e:e7:95:8c:3e:31:42:73:29:58:96:81:
         79:23:c8:3c:60:ef:bf:fe:3a:77:fc:ac:f3:e8:b9:ce:1d:85:
         0a:2a:5c:69:13:f8:24:a6:3e:fc:7f:d6:24:41:33:d1:04:4a:
         5c:83:69:e4:61:ab:4d:32:16:dc:c7:9e:a2:d3:5a:49:14:e1:
         13:1f:a1:2e:fd:b8:6e:1f:34:33:25:13:ff:16:a7:17:6a:86:
         06:f9:5c:43:b1:f7:59:1d:f9:8c:82:c3:c0:0e:cc:37:ff:da:
         50:d5:6a:dc:ec:e6:5d:9a:13:c8:4c:19:80:95:83:a4:66:15:
         d4:32:a4:b2:64:68:02:1a:1b:55:97:b3:1f:dc:55:e2:c4:79:
         52:2f:9b:50:4a:08:8d:6d:d1:3f:d1:3a:73:fb:cf:f2:34:1e:
         d3:0b:1e:f5:69:f7:b2:3f:78:a6:f2:fb:6b:de:44:1e:17:e8:
         eb:9f:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:07 2025 by rpki-client