Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e35312e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          5coUYNk0QxCW6Lz/XvJnxyWQxB2HbzzhyUcsioJv9kc=
Subject key identifier:   27:8E:57:AF:14:44:E0:D6:AA:C5:74:49:22:A8:72:76:9F:B2:D4:49
Certificate issuer:       /CN=B4F54174CAB335222D5C3A179199900DBAC503F6
Certificate serial:       6F7BFF24F8BE35B40693CDEA9DA76F014FB6C65E
Authority key identifier: B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa
Signing time:             Thu 06 Mar 2025 18:59:19 +0000
ROA not before:           Thu 06 Mar 2025 18:54:19 +0000
ROA not after:            Thu 05 Mar 2026 18:59:19 +0000
asID:                     267256
IP address blocks:        45.232.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7b:ff:24:f8:be:35:b4:06:93:cd:ea:9d:a7:6f:01:4f:b6:c6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F54174CAB335222D5C3A179199900DBAC503F6
        Validity
            Not Before: Mar  6 18:54:19 2025 GMT
            Not After : Mar  5 18:59:19 2026 GMT
        Subject: CN=278E57AF1444E0D6AAC5744922A872769FB2D449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:94:a9:74:f0:6d:63:d6:4d:81:5d:98:51:
                    fe:a6:0c:dd:6a:e5:58:37:55:1a:5d:31:5e:b9:a4:
                    41:fe:70:bd:9b:dd:44:97:c3:83:4a:2a:78:fd:54:
                    ef:94:e7:32:63:ea:9e:93:b8:b8:45:ac:76:a1:1c:
                    01:53:c3:b3:77:93:49:d2:3a:61:e6:d8:d2:17:4d:
                    cd:31:69:a5:7a:4e:69:a8:08:1e:75:30:42:04:ec:
                    fa:0b:f1:8f:40:b2:1c:44:a1:94:fc:40:c6:6f:06:
                    25:9b:c8:e9:91:29:29:ed:fd:a5:4d:95:ea:df:a1:
                    b1:b0:2e:03:ce:f1:26:5a:81:6f:cb:53:4c:67:4b:
                    7b:15:41:c6:dd:81:2b:8d:93:4a:da:62:3a:1d:4a:
                    b5:02:e9:8a:33:72:d3:eb:46:15:fd:ad:4e:02:cc:
                    8c:da:57:71:f1:da:25:ff:8c:04:d6:a5:a4:e8:72:
                    7f:71:0e:88:87:45:18:ca:d9:81:4e:f3:0e:f6:ed:
                    7e:f4:4b:2d:79:a2:01:9d:5b:e9:53:f0:52:9d:31:
                    3a:ea:d8:a3:72:eb:12:5c:15:70:01:de:5e:5d:f6:
                    9c:6e:47:33:2d:3f:c7:41:3d:04:a1:1b:f6:7d:a0:
                    15:4f:91:21:d3:c5:a8:9b:b9:7e:33:59:7b:0b:12:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:57:AF:14:44:E0:D6:AA:C5:74:49:22:A8:72:76:9F:B2:D4:49
            X509v3 Authority Key Identifier:
                keyid:B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:4c:9f:83:01:42:9b:23:16:67:80:4e:7c:46:ea:c8:e3:b4:
         35:b8:a2:e3:db:38:39:24:e0:c1:6b:90:70:a0:34:e3:7c:4f:
         ad:cd:20:54:68:a4:d9:87:73:37:62:59:b8:16:de:15:7e:83:
         d3:e3:d0:e0:ed:2e:f0:2e:67:bb:8d:80:dc:04:f4:51:a7:d8:
         41:6b:c6:4d:bf:cd:16:f6:40:fb:ae:30:f8:a0:6c:ea:8f:f7:
         a3:3c:74:3d:b8:de:88:0b:f2:b8:2b:fc:40:49:da:9b:83:18:
         6f:e0:df:3a:32:07:73:d8:38:97:ec:f6:4a:3a:ca:8b:75:3f:
         a0:19:22:52:be:bf:1b:45:e9:f9:dd:f7:ea:a7:5e:76:9f:fb:
         99:05:b3:a0:08:01:b2:16:55:69:82:13:66:e9:73:87:d7:d9:
         1e:20:db:43:68:fc:8d:79:0b:77:e1:69:6e:ce:d2:8e:bd:64:
         fc:3f:f1:b3:7d:f6:e3:d8:81:43:c8:95:2c:7d:8c:21:c0:26:
         d3:2e:e8:0e:1c:c3:4f:c4:fe:76:46:89:d1:49:21:09:53:7b:
         b7:07:4a:32:ec:77:66:1a:59:14:0e:ba:f4:03:1f:cb:84:46:
         db:cf:06:c6:7a:c6:89:c8:ac:02:12:44:ed:4c:89:3b:7d:22:
         25:e1:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:35 2025 by rpki-client