Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32342d3234203d3e20323637333838.roa
File:                     34352e372e302e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          DEuD1IncSxPhbFOkrh7IYSehnBl1Nua+nhSVS4mG0l4=
Subject key identifier:   98:87:78:B5:6D:38:D1:A7:DF:7D:D1:55:0E:E1:C8:6E:83:E5:66:43
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       7813437FEB20B98C3196E1B071C8D54B91926172
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32342d3234203d3e20323637333838.roa
Signing time:             Mon 28 Oct 2024 14:40:57 +0000
ROA not before:           Mon 28 Oct 2024 14:35:57 +0000
ROA not after:            Mon 27 Oct 2025 14:40:57 +0000
asID:                     267388
IP address blocks:        45.7.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:13:43:7f:eb:20:b9:8c:31:96:e1:b0:71:c8:d5:4b:91:92:61:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Oct 28 14:35:57 2024 GMT
            Not After : Oct 27 14:40:57 2025 GMT
        Subject: CN=988778B56D38D1A7DF7DD1550EE1C86E83E56643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:34:cb:63:01:a8:cb:8e:ea:b7:5c:11:6b:
                    dc:e8:ac:9d:7f:55:7f:94:05:39:23:27:e5:99:63:
                    3b:c5:fe:db:5c:a7:1d:57:c1:c9:78:95:8d:05:0a:
                    b6:6c:58:d9:1e:77:6f:8b:0f:41:b3:23:9e:67:b7:
                    8e:b4:f4:48:16:72:d2:c1:38:eb:e0:ce:e7:57:9b:
                    f7:8f:b2:d7:71:6d:11:30:6a:aa:b2:f1:29:59:9d:
                    85:12:ca:12:be:3e:98:e2:6e:45:76:99:d1:91:c9:
                    20:16:a5:fe:c7:f3:fe:99:d7:6f:49:46:56:85:52:
                    d6:ec:d1:0c:e5:8d:f4:77:97:67:d3:55:c1:a9:c7:
                    2c:3b:5c:9d:1e:f6:64:2c:50:55:e7:63:72:69:48:
                    d0:75:e5:6f:4c:5d:32:c0:6b:ec:41:65:b6:7c:83:
                    a1:ee:8e:9c:d9:9c:33:c3:1f:9d:52:74:3f:22:50:
                    7c:ed:c4:68:ba:05:a0:eb:25:a6:82:12:0d:c7:cb:
                    83:de:1e:00:8d:6f:59:b0:47:4c:6f:e6:e5:a8:bf:
                    0d:11:79:24:62:b8:86:08:ed:bc:12:5d:e3:74:ed:
                    2f:2c:c7:e9:a7:5d:73:53:e1:35:b5:95:92:db:f2:
                    96:35:84:fe:b0:1d:e5:f6:6b:aa:ee:6a:f4:4e:ad:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:87:78:B5:6D:38:D1:A7:DF:7D:D1:55:0E:E1:C8:6E:83:E5:66:43
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32342d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ee:fa:9f:21:fe:89:ff:39:8b:b9:84:05:3a:10:0b:60:8f:
         65:90:eb:c0:1a:26:d9:f0:fc:1e:d6:b4:ac:d4:18:b0:9d:51:
         7e:04:19:af:f1:e2:f1:66:cd:5f:9d:88:d5:e7:a8:59:32:cd:
         ca:2c:13:18:d9:9d:0f:8c:f8:37:ce:40:8f:80:89:22:28:b9:
         02:c9:65:13:e7:3f:38:f5:41:c8:e0:ba:5c:19:05:0b:67:72:
         04:86:5c:a9:3d:19:c2:84:86:f5:c4:d1:64:79:0f:2c:23:51:
         36:29:9a:8f:a9:3a:5d:85:b6:0f:cb:55:68:78:27:db:88:48:
         b4:ee:c9:d1:51:56:05:62:9f:e2:8f:d4:81:5e:bc:c3:e7:7d:
         aa:4b:bb:36:37:65:6d:2c:9a:fb:e5:0f:ce:90:32:6e:a7:68:
         81:e1:5b:63:9a:e3:ae:b0:10:d3:ca:d1:d5:dd:22:30:19:92:
         2f:a0:5d:f7:ed:4c:60:1d:0d:1a:29:58:b6:cd:18:af:07:eb:
         34:d0:d2:18:21:81:6f:06:d8:2e:0a:bc:49:03:c4:16:16:26:
         bb:35:ea:01:3b:56:11:0f:b5:65:41:5f:1f:58:12:68:6c:3c:
         95:44:1d:ca:d0:82:39:90:61:24:5b:2a:48:ac:dd:7b:7c:cb:
         d8:9a:72:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:34:58 2025 by rpki-client