Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa
File:                     34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa (raw, json)
Hash identifier:          QbbfzTIDD/ekVkiR05upobcgp75c/RPMRMFYJyzZU9o=
Subject key identifier:   63:C0:0D:1A:9E:E7:2F:0C:A4:D8:B9:1F:CB:CE:0A:FF:E0:82:7C:31
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       6704314E3996DA5196EDC3D27146231B04E0AFB3
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa
Signing time:             Thu 06 Mar 2025 04:33:09 +0000
ROA not before:           Thu 06 Mar 2025 04:28:09 +0000
ROA not after:            Thu 05 Mar 2026 04:33:09 +0000
asID:                     267329
IP address blocks:        45.232.142.0/24 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:04:31:4e:39:96:da:51:96:ed:c3:d2:71:46:23:1b:04:e0:af:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Mar  6 04:28:09 2025 GMT
            Not After : Mar  5 04:33:09 2026 GMT
        Subject: CN=63C00D1A9EE72F0CA4D8B91FCBCE0AFFE0827C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:e6:50:d0:94:04:58:f7:06:9a:48:e8:4c:
                    85:fe:67:9c:fc:77:3b:3a:2c:6e:e3:2e:61:96:4c:
                    27:9b:92:a3:be:fc:2a:e9:88:fa:fd:0e:76:48:cb:
                    f2:25:ca:7e:61:e9:ee:aa:34:52:e6:4d:80:19:c2:
                    81:6a:e9:9a:37:79:c8:c4:52:7e:b9:27:f2:db:85:
                    71:3f:71:6b:42:75:36:92:dc:8d:a8:a6:b7:8e:7f:
                    13:f9:e7:3f:bc:07:7b:d1:34:50:d5:eb:77:c2:de:
                    a3:73:29:77:68:92:00:a8:72:50:78:30:4c:f8:56:
                    57:ec:38:c4:46:73:62:86:48:97:a3:54:cc:8c:fc:
                    49:e1:58:61:6c:58:ee:9a:33:be:86:77:b2:11:c8:
                    ea:d3:e0:37:a6:80:10:aa:53:7f:47:90:2d:da:8f:
                    cb:54:3b:4b:a3:fa:73:29:69:e8:0e:e6:38:52:03:
                    52:15:85:3b:d8:1c:08:ce:08:2f:51:60:44:87:93:
                    5e:61:67:c9:b1:31:0e:d5:c3:ae:7c:23:59:a9:67:
                    4f:2d:6a:b3:bb:56:29:63:6c:af:48:02:c5:36:04:
                    dc:38:cf:14:d9:a7:93:e9:6b:93:c7:b6:ba:c5:f4:
                    03:5c:5a:e7:e2:1e:88:55:96:5b:d6:49:9a:2f:6d:
                    86:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C0:0D:1A:9E:E7:2F:0C:A4:D8:B9:1F:CB:CE:0A:FF:E0:82:7C:31
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:87:c6:cf:f8:47:a3:54:67:ae:07:81:a3:b4:1c:8c:35:db:
         bc:50:b2:15:bc:d4:82:78:59:9a:93:0f:10:1c:49:e1:2b:e3:
         59:3b:c0:59:58:75:04:cf:3b:1a:26:75:72:d6:e0:3f:56:cb:
         c2:07:66:38:f3:e0:ba:94:9e:b8:51:0c:5a:37:d8:b4:fc:44:
         08:47:65:c9:d2:6f:3f:cb:b9:4d:cc:d7:e6:ce:09:03:14:38:
         08:e2:93:b2:76:f7:64:a7:28:05:0c:67:ec:cb:34:8e:dc:ba:
         73:84:84:10:56:d8:b1:fe:9c:87:9f:f2:c3:05:c1:e6:19:a7:
         7e:7d:59:ef:dd:2c:13:b4:f2:a9:e7:8c:7a:e3:ff:ab:83:73:
         a5:b9:ba:d0:b3:df:51:94:b4:dc:e0:a6:61:56:28:57:78:ef:
         d2:46:ef:ca:a4:dc:c7:c9:29:54:fb:a9:00:20:27:dd:6b:cf:
         fe:34:4f:db:4c:5d:77:73:80:76:25:4e:9e:15:98:f4:74:6b:
         59:8c:11:18:28:2b:10:33:7a:52:aa:48:6d:ea:57:66:f6:d3:
         6b:86:b6:0b:50:87:38:1e:35:1f:df:9e:64:95:71:e4:ca:b4:
         19:7d:d0:75:45:98:26:a6:3c:d7:fd:7e:5e:a0:a4:eb:5e:c6:
         1a:4a:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:33 2025 by rpki-client