Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e32382e302f32342d3234203d3e20323638323633.roa
File:                     34352e3233372e32382e302f32342d3234203d3e20323638323633.roa (raw, json)
Hash identifier:          QKjX0DGZsyxb7KUYncEj5Pg05rYWEguCS/8ErCe3fpw=
Subject key identifier:   D8:B7:7A:BF:65:16:E9:2C:7C:94:97:74:C2:0B:79:A7:D6:D0:35:EE
Certificate issuer:       /CN=E22818D8F42D1506482150955FA216049875C2A8
Certificate serial:       22109479DE762D85186E15F0B44F73F97DA6A941
Authority key identifier: E2:28:18:D8:F4:2D:15:06:48:21:50:95:5F:A2:16:04:98:75:C2:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E22818D8F42D1506482150955FA216049875C2A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e32382e302f32342d3234203d3e20323638323633.roa
Signing time:             Mon 05 Feb 2024 19:47:23 +0000
ROA not before:           Mon 05 Feb 2024 19:42:23 +0000
ROA not after:            Mon 03 Feb 2025 19:47:23 +0000
asID:                     268263
IP address blocks:        45.237.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:10:94:79:de:76:2d:85:18:6e:15:f0:b4:4f:73:f9:7d:a6:a9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E22818D8F42D1506482150955FA216049875C2A8
        Validity
            Not Before: Feb  5 19:42:23 2024 GMT
            Not After : Feb  3 19:47:23 2025 GMT
        Subject: CN=D8B77ABF6516E92C7C949774C20B79A7D6D035EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:53:6c:84:6b:23:29:88:76:7f:9d:f5:a0:
                    59:96:c0:09:12:05:4f:c3:3e:3b:53:14:5d:30:17:
                    42:a3:e6:8b:1d:ee:67:e2:6e:5b:48:16:c4:81:6e:
                    37:44:19:ed:60:07:d7:1d:5e:c1:b5:79:dd:2e:56:
                    6c:b8:6c:f4:08:d5:4d:7a:55:7d:0e:48:4e:8c:1c:
                    98:db:fc:a9:6b:07:fd:8a:b6:1d:db:1b:35:1f:aa:
                    f3:c1:22:b7:a4:a2:67:30:9f:a9:0e:03:31:5f:7d:
                    92:3a:1a:a2:4c:6b:92:14:05:c8:d6:b8:47:78:04:
                    91:37:4a:3f:14:71:9d:a5:eb:0f:e2:b5:65:ac:02:
                    d4:68:15:f1:2b:3a:65:cd:8e:78:ea:b7:84:97:0d:
                    5c:f4:2c:2b:4a:76:fc:14:e2:dc:58:7e:37:e6:52:
                    0b:35:eb:01:eb:fe:a6:f9:a7:10:eb:47:34:bb:7c:
                    85:47:4a:3c:43:d2:f9:4a:2a:9a:73:46:05:ee:5c:
                    5f:19:48:14:cd:3a:c8:77:20:11:a1:d9:5e:85:46:
                    e8:41:2d:93:49:95:d6:73:80:0e:f4:7f:b5:64:28:
                    c8:82:d9:1b:18:95:db:49:bd:7e:ea:05:11:b0:93:
                    ea:30:83:78:ad:ea:4f:ac:2b:d5:c0:af:53:76:82:
                    9a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B7:7A:BF:65:16:E9:2C:7C:94:97:74:C2:0B:79:A7:D6:D0:35:EE
            X509v3 Authority Key Identifier:
                keyid:E2:28:18:D8:F4:2D:15:06:48:21:50:95:5F:A2:16:04:98:75:C2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/E22818D8F42D1506482150955FA216049875C2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E22818D8F42D1506482150955FA216049875C2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e32382e302f32342d3234203d3e20323638323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:6c:e9:99:fc:4e:f1:86:b7:92:06:dc:78:fa:47:72:9d:73:
         83:95:09:da:9d:1e:24:15:49:9f:32:7a:17:b7:fa:ed:61:3c:
         93:d1:b5:12:e4:0e:40:49:bb:69:38:ce:ae:36:ea:5c:9e:ab:
         bc:09:2c:04:8d:94:29:a9:ba:39:a5:e5:36:23:0b:64:3a:96:
         38:a2:af:a5:3a:bc:79:ef:9e:cf:9c:73:a0:b7:67:aa:9e:c5:
         cf:6d:c9:06:6e:62:85:a5:89:7c:73:f0:2a:38:eb:8d:06:64:
         c0:59:0d:26:3c:6b:48:58:99:dd:b5:89:8e:53:fb:73:21:02:
         9b:0a:4e:20:de:b6:4e:17:8f:d7:d3:7f:bb:bc:9d:95:3c:a3:
         8c:67:f9:88:2b:9c:d9:c0:67:a1:54:41:e3:c8:95:a3:6c:88:
         f0:c2:2d:1b:c0:29:19:9c:71:73:94:00:a1:45:a2:c6:29:7b:
         bb:ee:a2:96:29:92:42:18:4a:79:43:e8:e0:7b:40:75:52:f6:
         b8:84:9b:98:cf:2c:68:a1:5a:c6:71:dd:88:fb:71:64:ab:dd:
         eb:30:6e:a3:55:ab:17:4e:85:32:d0:b6:39:56:e9:c3:2b:8e:
         b8:63:94:a8:68:5b:ed:d6:8f:99:4c:a8:7f:58:4e:de:bd:7b:
         8b:ec:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:09 2025 by rpki-client