Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33342e302f32342d3234203d3e20323636393234.roa
File:                     34352e3232342e33342e302f32342d3234203d3e20323636393234.roa (raw, json)
Hash identifier:          3+3XirPeDXtGCQykXKBkMnmoPrNf3SQnpsJRhvpGwL0=
Subject key identifier:   27:80:BE:0F:CB:0D:14:5E:B5:41:92:54:05:92:29:3B:A1:DA:A5:A5
Certificate issuer:       /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial:       5BA3EFCC00171D4DBCC540F09D4DB1DD1F4D5D5E
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33342e302f32342d3234203d3e20323636393234.roa
Signing time:             Wed 04 Dec 2024 16:44:15 +0000
ROA not before:           Wed 04 Dec 2024 16:39:15 +0000
ROA not after:            Wed 03 Dec 2025 16:44:15 +0000
asID:                     266924
IP address blocks:        45.224.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a3:ef:cc:00:17:1d:4d:bc:c5:40:f0:9d:4d:b1:dd:1f:4d:5d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
        Validity
            Not Before: Dec  4 16:39:15 2024 GMT
            Not After : Dec  3 16:44:15 2025 GMT
        Subject: CN=2780BE0FCB0D145EB54192540592293BA1DAA5A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e9:1b:af:45:37:dc:ca:6f:52:1e:f9:4a:56:
                    9c:57:cb:66:4f:df:5f:1a:40:fc:d4:ff:e4:83:28:
                    9b:4c:b0:82:bf:be:35:f0:cd:55:78:30:59:6f:e7:
                    6d:98:ff:0c:1a:38:ab:96:26:fa:5e:18:50:90:64:
                    4b:c2:50:70:8e:62:90:86:7f:05:d5:95:c4:2b:7b:
                    61:d7:0d:60:54:0f:39:8e:52:e1:4b:e7:c4:4a:c5:
                    c4:7a:52:93:df:98:13:e1:52:73:b1:54:44:b4:dc:
                    22:d9:d5:66:07:c5:0d:61:1c:24:6c:a4:9f:2a:c7:
                    b7:2e:3c:43:dc:d6:d5:2f:f8:fc:67:a8:db:75:2c:
                    06:f1:1f:08:a4:c2:72:31:bd:d6:99:86:6b:a6:ed:
                    86:94:cf:be:0a:0f:fc:28:b8:64:a4:e8:3e:f6:10:
                    64:d8:89:f5:9a:22:21:7c:20:20:88:5d:70:6d:68:
                    2e:8c:d7:5f:95:a2:55:f0:cd:35:15:58:70:87:42:
                    bb:55:23:3b:4a:d4:9f:8b:62:86:8e:8c:bd:08:02:
                    b8:88:ff:17:29:ae:bf:20:aa:45:ad:6b:65:3c:b4:
                    34:c6:48:b9:3b:3e:a8:1f:f2:28:d8:87:ff:73:8d:
                    8d:39:76:8b:31:3f:6a:2c:91:30:14:ec:fb:73:f7:
                    d5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:80:BE:0F:CB:0D:14:5E:B5:41:92:54:05:92:29:3B:A1:DA:A5:A5
            X509v3 Authority Key Identifier:
                keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33342e302f32342d3234203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:34:80:b9:44:a1:89:b0:cc:8e:52:86:03:56:25:05:10:1d:
         be:28:87:49:13:7f:10:cc:c6:6d:a0:64:1c:c4:9c:b9:40:90:
         b9:48:c4:4f:69:52:b2:c0:19:1e:8b:b3:ea:00:63:78:83:d2:
         61:1a:d3:31:9b:f3:5c:89:1c:ef:91:e9:ef:35:d4:db:9c:cd:
         d1:55:82:cd:ec:26:68:13:65:20:d2:6b:e8:b9:23:65:45:d6:
         a3:05:0e:cc:24:36:54:d6:27:62:7c:fb:9a:ec:cb:ed:ac:bc:
         dc:a3:0a:91:47:fc:4b:99:9f:ce:58:9a:4b:d4:dc:cc:43:36:
         09:f1:83:57:4d:35:dc:60:40:f7:bf:fd:a0:e0:3a:88:c4:6e:
         a2:f1:cd:38:8a:c9:ca:ac:58:0a:5c:75:fc:f9:8d:e8:f6:26:
         62:84:91:da:3d:28:48:31:5b:77:ef:74:84:36:35:f7:cf:43:
         50:61:a8:ba:91:d4:25:51:49:b2:9f:89:b5:3d:91:a9:04:92:
         16:23:e4:94:b9:fc:a6:66:9d:81:53:3c:a9:2c:40:00:07:13:
         a6:11:8c:81:78:b6:19:0d:ff:f1:cc:a3:41:c5:15:d7:2c:a6:
         29:e8:77:2c:75:00:9e:c9:a4:7b:57:5c:1c:cc:a9:20:6f:6b:
         bd:05:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:14:38 2025 by rpki-client