Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33332e302f32342d3234203d3e20323636393234.roa
File:                     34352e3232342e33332e302f32342d3234203d3e20323636393234.roa (raw, json)
Hash identifier:          ZDGf1LHcZpEWRur2xUWKDj7HuKxTUiuPKuffCA4nH3g=
Subject key identifier:   71:14:0F:00:31:CA:F6:D7:39:C6:BC:89:DD:F1:95:B5:E5:6E:B8:85
Certificate issuer:       /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial:       1B3D8DEF68D20ED381C578E1254FEE2B6FBEC3EC
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33332e302f32342d3234203d3e20323636393234.roa
Signing time:             Wed 04 Dec 2024 16:44:35 +0000
ROA not before:           Wed 04 Dec 2024 16:39:35 +0000
ROA not after:            Wed 03 Dec 2025 16:44:35 +0000
asID:                     266924
IP address blocks:        45.224.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3d:8d:ef:68:d2:0e:d3:81:c5:78:e1:25:4f:ee:2b:6f:be:c3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
        Validity
            Not Before: Dec  4 16:39:35 2024 GMT
            Not After : Dec  3 16:44:35 2025 GMT
        Subject: CN=71140F0031CAF6D739C6BC89DDF195B5E56EB885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6f:f6:5e:a3:93:bc:62:0e:b0:ed:95:e2:cf:
                    2d:c1:37:50:5f:06:fa:a1:0f:31:8d:79:07:29:9f:
                    1a:c9:22:b4:df:da:9b:ee:51:4f:ee:33:1d:27:e2:
                    e6:41:3d:40:3a:1c:a3:29:98:e6:e7:f1:1d:4c:75:
                    d4:51:f8:0b:9d:0d:4b:51:33:7d:b5:b0:44:25:9d:
                    61:b6:43:fe:c4:9d:68:73:a4:7e:7c:f8:c6:bf:1f:
                    46:8a:91:21:97:6c:24:28:75:42:cc:8e:02:d7:11:
                    5c:aa:38:b1:75:49:af:5b:89:8e:3d:e5:eb:63:7c:
                    2a:eb:fd:cf:7f:70:49:c3:bf:5e:9e:66:85:0e:a5:
                    42:e3:3a:d4:c8:c7:f3:40:44:8a:cb:01:bb:4b:01:
                    06:0d:05:18:26:94:fe:64:63:55:60:21:0b:71:0f:
                    fc:6e:67:68:30:a1:91:a0:73:e8:69:d9:7e:99:6c:
                    36:33:0c:00:6f:b7:62:e8:b1:4e:39:c2:db:d1:4b:
                    16:1b:16:da:68:c0:d3:bb:53:09:bb:41:88:3d:04:
                    64:98:e6:08:63:4d:b0:b5:da:b2:72:95:6a:9a:9d:
                    93:9f:bf:21:b9:83:e4:f2:8b:fc:21:21:4b:6c:b3:
                    43:f9:f2:6d:f8:ff:f9:b6:12:65:f7:7a:d7:03:3c:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:14:0F:00:31:CA:F6:D7:39:C6:BC:89:DD:F1:95:B5:E5:6E:B8:85
            X509v3 Authority Key Identifier:
                keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33332e302f32342d3234203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:30:21:d5:28:7b:e1:02:2b:76:a6:ae:25:29:00:17:04:ce:
         8c:31:a7:d3:c7:cd:73:13:96:33:a7:a4:f3:95:78:8c:e7:7d:
         71:68:92:e1:41:b9:fe:ce:58:82:78:7f:5d:f6:b0:9d:56:06:
         72:8f:1b:32:bd:7d:df:60:da:9e:e9:2e:99:69:6f:53:fc:ec:
         1a:38:2e:97:fd:08:e6:52:b9:c1:19:7c:a9:98:00:39:f5:93:
         08:46:8b:4b:9c:a0:e7:35:08:11:5d:8c:2f:63:0f:46:2e:3e:
         1b:3d:20:98:e7:3a:3b:67:1b:52:c3:93:1a:43:34:9b:85:b1:
         b9:50:86:9c:f9:52:ab:f7:c2:7f:d0:43:90:67:bc:1e:8f:af:
         60:b3:7c:b0:40:1e:d2:0f:18:03:29:77:6b:72:f9:51:a9:9b:
         77:a0:cd:1e:0b:40:dd:7e:c8:0a:ce:f9:2b:f7:2b:a0:ad:7d:
         1f:37:94:d3:15:3f:55:3b:43:e7:41:0a:3a:e9:36:a6:73:02:
         e5:55:e4:82:78:b2:bf:c2:09:2e:5a:5a:4d:f2:1b:2a:2c:71:
         12:ee:a4:e5:e3:58:c9:be:d6:b7:04:42:5d:d8:3a:7b:e6:6e:
         f3:4f:28:62:2f:e0:ab:92:8d:2a:41:29:66:6b:d7:15:fd:ea:
         91:8e:a4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:20:40 2025 by rpki-client