Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/34352e3233372e3230342e302f32322d3332203d3e20323638323930.roa
File:                     34352e3233372e3230342e302f32322d3332203d3e20323638323930.roa (raw, json)
Hash identifier:          4FKVP3VZNjldxQZK/IrFzQagWt5L5ukdF08zZLpTF/A=
Subject key identifier:   C0:75:42:41:23:C8:5E:B2:C6:B5:08:C7:58:E1:F2:B9:4D:20:47:AA
Certificate issuer:       /CN=52937F241DD078A0CCBA97C8DEB63507075B2045
Certificate serial:       2AB553AE7E339F7AD8B22505F20C201F9A04217E
Authority key identifier: 52:93:7F:24:1D:D0:78:A0:CC:BA:97:C8:DE:B6:35:07:07:5B:20:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52937F241DD078A0CCBA97C8DEB63507075B2045.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/34352e3233372e3230342e302f32322d3332203d3e20323638323930.roa
Signing time:             Thu 28 Nov 2024 20:41:30 +0000
ROA not before:           Thu 28 Nov 2024 20:36:30 +0000
ROA not after:            Thu 27 Nov 2025 20:41:30 +0000
asID:                     268290
IP address blocks:        45.237.204.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b5:53:ae:7e:33:9f:7a:d8:b2:25:05:f2:0c:20:1f:9a:04:21:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52937F241DD078A0CCBA97C8DEB63507075B2045
        Validity
            Not Before: Nov 28 20:36:30 2024 GMT
            Not After : Nov 27 20:41:30 2025 GMT
        Subject: CN=C075424123C85EB2C6B508C758E1F2B94D2047AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:35:2e:4f:4a:40:0b:51:a7:bc:22:0c:56:
                    26:fa:ae:76:4a:b8:d2:eb:b9:e2:f9:10:ed:1f:c4:
                    6e:10:12:02:e7:e6:c0:40:8c:4f:fe:bf:c4:21:6a:
                    a8:5a:d7:3b:83:4a:1b:62:29:8b:a9:7b:15:25:65:
                    76:f7:16:40:de:2d:2d:0e:a3:ab:2b:a4:1f:aa:64:
                    0b:0b:e0:a7:23:49:18:1b:0d:3f:d0:ad:03:83:bc:
                    7f:62:c7:9e:eb:c9:62:31:87:24:bf:5f:86:54:32:
                    72:a9:c7:07:19:50:a2:b1:8d:6b:4f:c3:37:05:ba:
                    48:cb:c0:e3:fe:29:e0:58:b6:9a:25:cb:d6:2c:b8:
                    20:01:63:49:a5:c7:4d:69:71:aa:ce:3c:ac:98:02:
                    7c:46:d6:de:50:f1:c7:47:28:c0:98:16:c1:1b:cf:
                    19:86:b5:72:56:ee:62:53:57:e1:38:de:90:7d:e7:
                    f0:e1:bb:32:9a:12:15:4c:71:88:57:b8:f3:95:6d:
                    dd:de:98:f5:57:76:8c:83:1a:60:4e:41:a7:4f:30:
                    d3:76:66:41:53:23:be:c6:36:2c:d5:04:5a:4c:5c:
                    fd:cf:e8:36:60:94:fb:a2:42:4a:33:7a:fd:38:49:
                    fb:c8:c9:48:90:38:cf:b6:21:47:ca:ea:57:30:f4:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:75:42:41:23:C8:5E:B2:C6:B5:08:C7:58:E1:F2:B9:4D:20:47:AA
            X509v3 Authority Key Identifier:
                keyid:52:93:7F:24:1D:D0:78:A0:CC:BA:97:C8:DE:B6:35:07:07:5B:20:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/52937F241DD078A0CCBA97C8DEB63507075B2045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52937F241DD078A0CCBA97C8DEB63507075B2045.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/34352e3233372e3230342e302f32322d3332203d3e20323638323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:30:05:91:a4:77:94:c9:27:73:36:2d:42:0a:d9:24:06:23:
         47:98:8f:4a:0c:e8:8f:d5:7b:6f:54:8c:e8:04:9c:81:d8:6b:
         eb:d7:15:b7:06:bc:80:31:ea:ca:fe:00:ba:a0:ef:ee:4c:7e:
         c0:22:cf:22:d2:e3:40:cd:8e:49:7c:09:e9:10:17:2c:c4:54:
         3b:01:23:c7:1b:03:71:81:d7:1f:47:f7:b9:f1:1a:e1:4c:5d:
         17:12:ad:17:6d:7a:2f:4e:9f:c3:99:81:81:4c:1f:60:87:b6:
         46:c2:c5:a9:cb:de:d2:da:23:d1:79:e7:f1:83:05:f4:3e:90:
         4e:4f:01:95:07:95:85:6f:78:13:72:c2:59:90:0c:8d:34:0f:
         95:b4:c6:a7:33:17:ee:c9:69:b8:56:d0:ac:55:9d:3a:7a:f9:
         0a:90:b1:8a:9e:5e:ba:2c:f7:45:05:c4:b7:26:4d:24:50:d0:
         2f:7b:21:62:ae:67:7e:8a:99:d3:c1:24:c5:5d:2f:71:20:5b:
         d7:b1:de:66:50:95:f7:3b:d3:dd:2b:d2:21:65:55:19:90:fa:
         6a:f1:40:2d:5e:28:52:11:36:fb:14:c6:25:40:3d:90:d5:41:
         d5:71:0c:ba:c6:36:e8:da:d8:c3:d0:53:df:40:ed:80:12:68:
         14:93:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:31 2025 by rpki-client