Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa
File:                     34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa (raw, json)
Hash identifier:          DvYCvZzAppwVexEnCAoGV/KpwMN3YLUbRdYfbt8+754=
Subject key identifier:   8E:5D:7D:5E:24:A1:EA:59:D6:E2:43:4E:0F:EB:D3:A5:C4:7C:94:DF
Certificate issuer:       /CN=636E414FA84D71600AE3616725B19B3EA6BCD75B
Certificate serial:       0F8BFEB7E84D6288DA0D36FD1542B11D36BAFDAA
Authority key identifier: 63:6E:41:4F:A8:4D:71:60:0A:E3:61:67:25:B1:9B:3E:A6:BC:D7:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636E414FA84D71600AE3616725B19B3EA6BCD75B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa
Signing time:             Tue 04 Mar 2025 17:42:55 +0000
ROA not before:           Tue 04 Mar 2025 17:37:55 +0000
ROA not after:            Tue 03 Mar 2026 17:42:55 +0000
asID:                     266972
IP address blocks:        45.225.208.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8b:fe:b7:e8:4d:62:88:da:0d:36:fd:15:42:b1:1d:36:ba:fd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636E414FA84D71600AE3616725B19B3EA6BCD75B
        Validity
            Not Before: Mar  4 17:37:55 2025 GMT
            Not After : Mar  3 17:42:55 2026 GMT
        Subject: CN=8E5D7D5E24A1EA59D6E2434E0FEBD3A5C47C94DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:90:7a:22:2e:91:b0:53:45:5b:36:d8:e9:
                    dd:ea:66:fd:91:96:5f:0e:70:ac:03:0f:e4:3e:0f:
                    a2:72:a9:b2:f0:6e:4a:47:9f:9c:12:4c:5b:d1:e8:
                    7a:7d:6e:60:bb:11:05:21:3e:3b:59:3e:80:f0:79:
                    9e:59:fa:30:8e:e5:c5:28:14:e2:24:b1:32:d2:d6:
                    6f:e7:43:c0:6a:c5:32:79:4f:e6:a6:03:94:e2:59:
                    8f:d4:80:54:b3:87:85:9c:58:6b:53:72:7d:35:79:
                    8e:6c:0a:d3:fb:6f:32:0a:a4:af:a5:a0:4e:ec:e1:
                    7e:22:f9:51:91:de:3e:1e:91:74:c0:1d:bc:37:69:
                    0e:6c:83:ef:29:40:7a:10:0d:c1:45:84:95:72:9c:
                    2c:d6:09:4c:6c:26:32:24:0c:d9:64:d6:b6:f6:81:
                    e7:f6:d1:a4:8b:42:8b:66:76:f2:58:1e:85:6f:10:
                    24:09:21:f9:5f:36:94:84:d3:a3:c1:16:73:0a:a6:
                    de:af:60:22:08:dd:c9:bc:cb:c1:2b:23:bd:d3:63:
                    4e:14:f8:e1:88:90:e8:7d:39:f3:61:7a:29:78:6e:
                    40:f1:8a:25:51:33:ab:8a:f1:98:bf:21:28:6e:86:
                    10:52:bb:d6:88:48:16:62:56:e5:05:ba:60:cd:02:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5D:7D:5E:24:A1:EA:59:D6:E2:43:4E:0F:EB:D3:A5:C4:7C:94:DF
            X509v3 Authority Key Identifier:
                keyid:63:6E:41:4F:A8:4D:71:60:0A:E3:61:67:25:B1:9B:3E:A6:BC:D7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/636E414FA84D71600AE3616725B19B3EA6BCD75B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/636E414FA84D71600AE3616725B19B3EA6BCD75B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:65:bc:db:81:a4:14:eb:17:37:cb:af:ef:5b:91:a2:cc:07:
         c9:46:a7:1b:16:5b:38:02:ac:59:85:df:ea:4f:2e:cb:eb:08:
         79:fa:15:88:d9:54:98:f2:fb:c3:92:2a:07:11:76:70:39:15:
         b4:ed:0d:1a:34:c3:8a:7c:cd:33:7d:4f:91:e9:be:d6:81:bf:
         bc:6c:1f:8c:b8:fb:41:e9:39:98:cd:26:ee:18:59:4c:d0:83:
         b9:eb:0c:99:70:47:b4:e7:62:df:c6:6f:c8:a0:90:56:29:17:
         51:cc:a7:78:52:87:72:29:f3:9f:04:e3:5f:8d:d7:ea:5b:60:
         fc:0b:12:5d:28:3f:cd:56:2a:02:30:3e:1e:b2:92:90:16:7e:
         62:cd:b4:67:d6:44:95:25:a6:96:f2:1f:cb:b8:e6:d3:2e:3a:
         ca:25:a7:40:a2:85:b8:ae:80:ac:e0:ad:a3:88:4d:14:c0:9a:
         7d:5b:4f:09:df:81:71:43:72:33:e1:24:85:cb:05:e0:a2:03:
         a0:8b:ad:d0:dd:13:be:59:b5:af:54:00:fa:be:37:52:db:41:
         8d:82:0a:cd:4d:31:f0:17:1e:29:b8:7a:88:84:66:1b:d5:21:
         e5:f9:7e:7b:ae:41:df:78:c0:6b:fc:52:e5:ec:4f:95:f6:5d:
         ea:87:7a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:18 2025 by rpki-client