Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135362e302f32322d3232203d3e20323637333838.roa
File:                     34352e342e3135362e302f32322d3232203d3e20323637333838.roa (raw, json)
Hash identifier:          5+hkoxJuWZqsW53HZgJu9PT4pB7GuU8iYoicraEoIfE=
Subject key identifier:   72:94:78:4B:ED:28:FA:02:38:4A:9F:A9:62:27:29:47:76:6D:0C:36
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       44E3592DFD66EBDED0C49115569F9D21213C6067
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135362e302f32322d3232203d3e20323637333838.roa
Signing time:             Mon 28 Oct 2024 14:40:56 +0000
ROA not before:           Mon 28 Oct 2024 14:35:56 +0000
ROA not after:            Mon 27 Oct 2025 14:40:56 +0000
asID:                     267388
IP address blocks:        45.4.156.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e3:59:2d:fd:66:eb:de:d0:c4:91:15:56:9f:9d:21:21:3c:60:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Oct 28 14:35:56 2024 GMT
            Not After : Oct 27 14:40:56 2025 GMT
        Subject: CN=7294784BED28FA02384A9FA962272947766D0C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c5:98:74:35:04:d4:c9:a6:53:f4:95:93:3b:
                    12:9a:5a:cc:5f:9e:7c:6c:c5:87:72:fb:60:9c:bc:
                    83:ec:a3:de:34:d4:a6:29:f4:8f:20:ab:1d:d8:4a:
                    01:b5:e9:89:18:47:35:0b:43:6a:76:cc:74:79:72:
                    e7:d4:cd:7a:b9:91:d2:0e:79:95:8c:21:35:26:72:
                    00:4e:92:78:89:af:f0:5c:26:a6:70:1e:0a:fc:e7:
                    47:8f:9c:dc:f7:26:14:2a:6f:ff:6b:1a:3f:19:40:
                    6f:aa:63:84:72:67:70:e8:94:0a:77:e1:58:94:e2:
                    cc:df:e8:9f:70:ab:cd:73:dc:3c:21:ae:f8:6f:14:
                    eb:8a:00:e5:7f:0b:ea:34:c6:11:09:88:87:86:00:
                    a8:9b:e6:e5:ad:8e:ca:6d:92:f3:fc:30:95:6c:af:
                    e4:b2:b9:f6:fb:62:a2:8c:41:f3:a1:56:e3:f6:bc:
                    b5:b1:80:69:48:e0:8a:50:1c:01:3d:ac:91:ba:61:
                    d4:17:da:d6:3b:24:c6:89:d5:29:3f:dd:83:06:0c:
                    de:68:8a:81:ec:67:51:c6:4a:97:13:c4:2b:ed:d2:
                    77:52:cd:bd:35:4e:96:b2:4e:17:d4:b7:78:1c:d8:
                    50:2a:93:0e:82:95:96:ab:7d:74:48:62:e9:66:61:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:94:78:4B:ED:28:FA:02:38:4A:9F:A9:62:27:29:47:76:6D:0C:36
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e342e3135362e302f32322d3232203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:3d:80:2b:eb:15:a7:98:f4:46:6a:1d:95:41:eb:ba:69:05:
         48:ee:9f:ee:7f:2d:80:c1:cd:77:9b:2e:bc:18:27:5d:4d:eb:
         4c:b1:5b:d0:0f:9c:21:75:b5:a7:12:09:62:ad:d5:f4:d9:ca:
         f4:30:eb:55:fa:62:aa:8d:fd:a3:7c:c0:f9:6e:a9:a7:b7:d2:
         24:ed:75:e6:c5:82:30:a9:ca:0e:16:fd:84:0a:e1:15:a7:3e:
         8f:f8:80:71:b2:14:b6:7b:d8:f8:69:a2:d5:22:77:5e:df:44:
         56:2c:87:cb:44:5f:73:76:66:11:1c:36:ae:20:72:33:64:f6:
         e3:72:3c:7a:4a:36:f5:94:de:ce:4a:cf:11:0c:85:b4:28:0f:
         ea:54:61:13:3d:77:0d:9b:5b:0d:2e:9f:fd:0d:65:4c:e3:f9:
         05:7d:f3:2c:3a:cf:29:8e:d8:8b:4c:28:03:4a:d9:d3:67:c3:
         5a:ac:99:4d:c9:ba:90:13:5f:44:37:50:73:b9:92:da:52:a4:
         36:96:7c:ef:1e:c6:2f:6d:ad:80:f1:e3:13:6a:8e:b6:53:fc:
         86:2d:c6:06:5f:c5:f6:79:8a:55:61:2e:0c:25:26:a5:8b:c4:
         f0:8b:82:5b:3e:7a:ee:d3:ef:24:2f:62:04:c5:6d:96:4d:c2:
         07:3d:1c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:11:45 2025 by rpki-client