Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa
File:                     3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          njm/UHp9ulIvElSJ/joVL5hxZqu5pMXcP6XDUXrtRsg=
Subject key identifier:   54:E0:49:18:D7:CD:E0:2E:A9:CA:96:06:46:FF:28:75:AC:4F:CA:40
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       2FC4F0C3922F5D2E369162DA34E2646571D05626
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa
Signing time:             Thu 06 Mar 2025 08:00:29 +0000
ROA not before:           Thu 06 Mar 2025 07:55:29 +0000
ROA not after:            Thu 05 Mar 2026 08:00:29 +0000
asID:                     263263
IP address blocks:        200.33.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c4:f0:c3:92:2f:5d:2e:36:91:62:da:34:e2:64:65:71:d0:56:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Mar  6 07:55:29 2025 GMT
            Not After : Mar  5 08:00:29 2026 GMT
        Subject: CN=54E04918D7CDE02EA9CA960646FF2875AC4FCA40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:b9:ab:7c:dd:fe:39:af:d9:50:69:89:8b:
                    4c:1b:79:56:30:75:d0:9b:b6:51:61:f4:d4:73:35:
                    4a:0c:e0:9f:90:49:d6:4f:7d:59:72:cd:97:eb:4c:
                    53:d7:f3:4e:ba:00:b5:9f:d8:8a:48:42:33:61:b9:
                    6b:52:22:84:78:9c:45:06:a0:5c:11:4e:bb:87:4b:
                    a0:ce:b2:24:60:f6:03:03:e0:4d:1e:fb:25:f9:46:
                    87:bf:06:ee:6f:9e:90:8e:f8:f2:74:84:c3:c6:3d:
                    08:7e:be:f9:44:ab:ef:be:0f:63:a3:48:84:22:ac:
                    a0:29:dd:f1:f0:44:ff:89:8c:c2:48:30:3d:7f:3a:
                    11:4f:e4:e6:45:75:f0:8d:7d:55:7a:79:0f:e8:4f:
                    8e:d9:cb:2c:bb:54:b0:6d:21:7c:59:cf:25:ab:d5:
                    53:b2:d6:42:f6:55:f7:d3:02:84:22:4c:ab:9a:a9:
                    03:16:15:70:19:0a:75:af:2a:21:b6:4e:89:85:76:
                    c6:59:19:f1:2f:c1:04:40:67:2d:00:91:df:e8:60:
                    ed:44:4c:9e:81:00:d5:87:71:a7:26:9e:95:f8:9b:
                    37:15:3d:a7:f2:e0:75:2f:cf:de:26:ef:8e:27:7f:
                    a1:29:c3:6a:e0:e4:87:b0:b4:69:6d:f8:a7:e3:a4:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E0:49:18:D7:CD:E0:2E:A9:CA:96:06:46:FF:28:75:AC:4F:CA:40
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:df:61:84:e8:82:19:2b:54:d0:b5:cb:19:cd:29:4f:b5:96:
         56:20:8d:56:27:ee:90:2a:da:b0:fa:17:4e:24:a1:45:8b:26:
         c9:67:d4:03:80:ef:de:52:1a:cd:be:be:0f:ff:db:de:a5:7e:
         12:a2:6c:db:de:d7:5e:84:1e:cd:87:40:ee:1d:cf:1b:62:b3:
         95:1a:46:75:dc:d9:20:0d:78:31:5a:8c:14:02:c2:65:e3:10:
         a7:1d:91:49:d3:da:85:1e:92:5f:31:10:fa:63:9d:5d:a5:1f:
         a8:6f:95:38:b1:a6:1b:06:d3:7f:3a:64:a5:76:8c:53:95:49:
         a8:13:35:e1:1f:fa:3a:be:14:f3:4b:53:2b:62:32:63:16:6d:
         07:cf:02:f6:cf:21:a2:c4:6f:c0:c2:fc:28:13:10:db:cc:6c:
         2c:38:8d:e1:f7:2d:ee:ac:75:95:60:b5:ab:8e:8a:17:19:c5:
         3c:e5:69:6b:e1:75:34:e9:af:7c:df:89:c9:d1:60:92:bc:97:
         ea:1d:a5:79:75:ad:2c:80:f9:f0:82:b7:8d:75:4c:a8:a5:16:
         5c:cd:f1:9d:02:24:73:bc:f7:3b:10:23:4b:ce:cc:c2:66:6a:
         20:5e:b8:ca:fb:5d:2d:42:d4:14:00:94:5e:3b:35:f2:3e:d9:
         52:7c:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:28:15 2025 by rpki-client