Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32322d3332203d3e20323638323537.roa
File:                     34352e3233362e3234302e302f32322d3332203d3e20323638323537.roa (raw, json)
Hash identifier:          hIJEdLVowtwUb98828o0gbDyYckZCWfZ7vTnMjT2Yjk=
Subject key identifier:   73:84:4A:7A:4A:5E:0A:13:20:29:00:BB:4D:C6:AE:7C:33:38:CB:BD
Certificate issuer:       /CN=4DC92E67ED4D35C32F8C534BFB33A9893AD99FD2
Certificate serial:       79A4C9D9C715ABF881EB20E3B5F6B4F02E2A4B12
Authority key identifier: 4D:C9:2E:67:ED:4D:35:C3:2F:8C:53:4B:FB:33:A9:89:3A:D9:9F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DC92E67ED4D35C32F8C534BFB33A9893AD99FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32322d3332203d3e20323638323537.roa
Signing time:             Wed 24 Jan 2024 17:04:24 +0000
ROA not before:           Wed 24 Jan 2024 16:59:24 +0000
ROA not after:            Wed 22 Jan 2025 17:04:24 +0000
asID:                     268257
IP address blocks:        45.236.240.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a4:c9:d9:c7:15:ab:f8:81:eb:20:e3:b5:f6:b4:f0:2e:2a:4b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DC92E67ED4D35C32F8C534BFB33A9893AD99FD2
        Validity
            Not Before: Jan 24 16:59:24 2024 GMT
            Not After : Jan 22 17:04:24 2025 GMT
        Subject: CN=73844A7A4A5E0A13202900BB4DC6AE7C3338CBBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:80:b8:38:62:8f:d1:49:cf:10:22:c0:12:
                    66:bf:9c:3f:da:03:fa:61:a7:af:bf:70:57:35:e4:
                    49:b7:95:c9:fa:f0:05:4b:b1:b1:74:fa:4d:44:55:
                    09:30:f2:ca:2e:08:c9:c9:29:0d:2a:cf:1c:b1:68:
                    54:34:70:a7:09:d9:dc:af:35:38:a8:22:68:fa:77:
                    d6:02:4c:1d:da:2e:69:9a:f5:60:cb:05:c8:d0:6f:
                    66:b4:04:a0:d5:50:e8:c9:b9:3b:b1:9b:fc:2d:57:
                    d0:d2:6c:b0:ca:6c:d9:ee:82:9f:d5:bf:fd:3f:96:
                    5c:83:70:e6:08:97:a9:e8:a2:2e:f0:b5:70:19:2b:
                    a6:d6:94:18:14:09:3b:b5:11:f0:71:9a:1a:68:b9:
                    49:37:df:f9:84:2d:c3:80:24:8d:9e:a3:b0:97:fd:
                    cf:b8:05:d8:14:9f:f5:3d:a3:d7:a1:7b:28:12:e2:
                    9d:9b:1f:ea:4f:41:47:15:f6:f3:6b:50:9b:c5:7d:
                    a5:30:54:71:5b:8a:b5:96:8f:70:68:63:8c:70:89:
                    99:ae:c2:e1:61:65:dc:fd:e9:b1:27:35:0e:d2:5a:
                    0c:41:16:cb:28:81:66:c5:66:19:93:4f:8e:82:b3:
                    06:f5:43:5a:84:f7:d8:17:8c:9f:f3:7b:78:7c:f1:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:84:4A:7A:4A:5E:0A:13:20:29:00:BB:4D:C6:AE:7C:33:38:CB:BD
            X509v3 Authority Key Identifier:
                keyid:4D:C9:2E:67:ED:4D:35:C3:2F:8C:53:4B:FB:33:A9:89:3A:D9:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/4DC92E67ED4D35C32F8C534BFB33A9893AD99FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DC92E67ED4D35C32F8C534BFB33A9893AD99FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32322d3332203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:02:29:24:94:7c:5a:af:ff:b0:49:9c:6d:2e:2f:42:86:
         51:2f:8b:2c:96:30:30:0c:79:03:c7:90:f0:48:7a:ea:1f:f9:
         cb:98:17:a2:0a:40:14:66:04:a4:32:bc:d8:26:1c:c9:cd:ae:
         e0:28:58:17:ca:d9:07:00:b0:ff:e6:4d:a3:af:39:f9:1f:b4:
         b7:55:87:30:37:2d:65:fc:72:b5:5a:25:85:48:3f:bd:76:91:
         9a:a6:dd:32:b6:06:16:03:44:72:d0:52:ea:84:f7:2f:ff:3b:
         ec:74:a0:51:8f:14:ad:96:9f:3a:ac:ac:a3:9e:39:d6:7c:e6:
         ac:fb:59:4c:f7:e5:20:43:61:66:af:71:af:32:a1:05:95:10:
         6d:64:06:89:d4:d3:0b:08:a5:6c:34:28:47:9d:d1:54:80:ab:
         10:6a:f1:78:cf:23:04:3d:9e:9a:5a:1d:03:f9:a6:45:e9:d8:
         56:83:28:62:89:81:d2:a8:b3:36:a9:ee:39:bb:97:fc:4d:cd:
         e7:17:6a:08:ba:27:90:78:29:b1:9b:f0:0b:21:bf:57:e6:36:
         7f:43:e5:56:22:eb:41:d2:89:f7:3a:c8:c5:cc:76:ee:20:f6:
         4b:26:54:84:12:36:02:22:e1:aa:f7:68:6d:dd:eb:b1:4a:29:
         13:44:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:19:08 2025 by rpki-client