Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e32382e302f32342d3234203d3e20323638373839.roa
File:                     34352e3137332e32382e302f32342d3234203d3e20323638373839.roa (raw, json)
Hash identifier:          UsxExlf2KQOJUxGVeyFMEJQLpjXOn67nhGnv3BaYoik=
Subject key identifier:   7C:B4:70:F3:C8:C4:B5:EF:B0:47:83:3A:55:3A:31:CC:BB:41:FF:77
Certificate issuer:       /CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
Certificate serial:       490E0B3E2737E403E9C8E6259B048431555A0DCE
Authority key identifier: C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e32382e302f32342d3234203d3e20323638373839.roa
Signing time:             Thu 06 Mar 2025 12:33:17 +0000
ROA not before:           Thu 06 Mar 2025 12:28:17 +0000
ROA not after:            Thu 05 Mar 2026 12:33:17 +0000
asID:                     268789
IP address blocks:        45.173.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0e:0b:3e:27:37:e4:03:e9:c8:e6:25:9b:04:84:31:55:5a:0d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
        Validity
            Not Before: Mar  6 12:28:17 2025 GMT
            Not After : Mar  5 12:33:17 2026 GMT
        Subject: CN=7CB470F3C8C4B5EFB047833A553A31CCBB41FF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6b:b0:77:7d:1f:bb:3b:3b:c6:da:70:7d:c9:
                    d2:79:8c:4b:d5:f7:6b:4b:b4:8b:c7:6f:9e:a1:2c:
                    b0:5e:b9:dc:1d:89:66:70:3b:25:25:c4:4d:c4:a6:
                    c5:ab:d2:b8:a6:ac:bb:f6:bf:33:93:ee:55:cb:97:
                    84:44:45:94:f9:1c:cf:99:43:31:5c:dd:e1:f6:a3:
                    3a:9f:97:09:f4:8f:70:a1:59:a1:3a:9e:9d:10:17:
                    ea:3b:44:39:b3:70:19:60:c5:e4:ca:24:f2:61:6a:
                    fc:ea:38:e7:2c:dc:7c:9d:51:d0:78:cd:f5:e2:14:
                    ff:fc:20:06:52:6e:96:6f:25:56:22:53:09:b4:48:
                    64:b5:de:97:70:b1:26:c1:75:78:30:99:d9:e4:5e:
                    b6:71:89:84:fd:27:64:a3:86:35:da:88:55:0e:1e:
                    b8:6e:2d:63:ba:7d:2d:d2:a7:21:7c:c1:11:55:6e:
                    64:1f:e1:29:58:7e:f6:b4:80:48:4c:4f:5f:26:61:
                    13:2b:d3:15:7b:37:fc:a9:63:92:42:77:aa:14:eb:
                    df:de:69:5d:6b:6d:0c:59:b4:d4:d4:04:26:00:0a:
                    73:b1:05:30:c7:fb:fb:87:e9:f0:b4:40:ea:59:a5:
                    3e:ca:11:63:f2:21:15:48:7c:88:57:72:60:ae:84:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:70:F3:C8:C4:B5:EF:B0:47:83:3A:55:3A:31:CC:BB:41:FF:77
            X509v3 Authority Key Identifier:
                keyid:C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e32382e302f32342d3234203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:57:3c:d8:9c:a6:e0:62:fc:91:54:81:a9:c2:c0:ba:b9:82:
         83:cc:2a:42:a2:7b:ec:14:f1:a8:b4:f8:3a:27:f0:cd:19:2f:
         f2:87:d5:4a:9b:f2:1e:79:f8:d9:9f:99:77:3e:0f:2c:48:dc:
         e5:35:3d:1e:88:cd:3e:c4:4e:e2:93:8f:9e:80:d0:3e:92:87:
         03:9a:81:df:bf:d3:ce:df:40:30:68:89:ff:47:89:0f:6d:34:
         31:90:9d:d6:e7:1a:59:64:90:cf:a9:f6:28:86:17:59:2f:d3:
         46:39:41:45:f3:9e:04:0a:37:55:47:ea:b2:5d:c6:83:39:47:
         9f:6a:4f:a9:b1:ed:3f:b0:e2:a0:da:d3:55:de:a8:4d:29:68:
         a5:55:90:57:59:aa:f6:06:d2:90:f1:01:eb:f8:de:8a:45:45:
         23:07:a3:0d:12:3d:d7:3f:5a:94:65:bc:72:ea:e8:9c:ef:01:
         42:59:c8:ca:5f:28:56:56:2d:e7:8c:55:5b:b8:5c:b8:dc:8c:
         83:c2:aa:4a:37:64:f3:88:6b:d6:ba:e5:e5:f9:ce:a2:ad:86:
         78:cf:56:9e:1c:eb:ac:82:8e:0b:96:da:38:ea:04:d1:72:2c:
         20:f6:f1:17:f1:38:bf:1f:74:8f:2c:e6:88:04:6c:ef:85:e8:
         eb:9d:02:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:11:36 2025 by rpki-client