Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e33302e302f32342d3234203d3e20323638373839.roa
File:                     34352e3137332e33302e302f32342d3234203d3e20323638373839.roa (raw, json)
Hash identifier:          3heFZxcT0lFGx5PCfZdjFsRa7CXLAFR4RViwiVgEvig=
Subject key identifier:   5D:8F:44:36:E4:D6:33:1C:DA:F3:14:60:49:6E:08:96:67:E9:AD:F4
Certificate issuer:       /CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
Certificate serial:       218AE7A79D75B855696958F638F75D48B8497031
Authority key identifier: C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e33302e302f32342d3234203d3e20323638373839.roa
Signing time:             Thu 06 Mar 2025 12:33:17 +0000
ROA not before:           Thu 06 Mar 2025 12:28:17 +0000
ROA not after:            Thu 05 Mar 2026 12:33:17 +0000
asID:                     268789
IP address blocks:        45.173.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8a:e7:a7:9d:75:b8:55:69:69:58:f6:38:f7:5d:48:b8:49:70:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8
        Validity
            Not Before: Mar  6 12:28:17 2025 GMT
            Not After : Mar  5 12:33:17 2026 GMT
        Subject: CN=5D8F4436E4D6331CDAF31460496E089667E9ADF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:79:5e:02:0f:5b:4d:88:0a:f9:a1:72:90:
                    f1:71:d1:77:5f:8f:d6:27:28:4b:18:d7:2d:14:61:
                    bd:3e:5c:84:49:da:f7:6b:b8:af:a5:08:ed:07:6f:
                    05:3a:0a:6b:4d:82:c1:84:e4:6b:3f:66:fe:68:5d:
                    73:53:25:26:7c:98:00:44:40:20:e6:c4:7f:54:76:
                    9d:f3:0c:24:f9:18:41:0c:14:a7:ee:d2:ba:75:2b:
                    3c:ae:1b:41:73:9b:99:bd:a3:1d:ae:d5:92:32:c0:
                    e7:98:04:e8:8e:1b:38:1a:f6:80:f0:50:95:6b:cf:
                    94:d9:ff:ff:d7:85:f5:7b:7d:ae:40:35:d9:e5:7f:
                    0b:f2:d0:db:11:89:bf:62:d9:74:6d:fb:1e:10:ac:
                    9d:07:c7:9e:f5:34:e2:a7:47:0e:37:5a:be:bd:d0:
                    2d:1f:52:ec:5b:cf:0e:58:54:89:a5:cb:d0:99:89:
                    3f:3a:04:fc:dd:89:ce:ec:d0:15:2d:5f:7c:ac:dc:
                    4d:26:57:19:c7:bb:9f:53:75:08:bd:85:01:50:f3:
                    58:76:cd:89:6a:ec:2b:81:73:b0:00:c6:b7:b8:ac:
                    43:04:90:c5:82:40:12:21:94:aa:9b:34:5b:10:21:
                    a5:52:bb:b6:e2:38:c5:64:79:95:5b:fa:6f:ed:e5:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8F:44:36:E4:D6:33:1C:DA:F3:14:60:49:6E:08:96:67:E9:AD:F4
            X509v3 Authority Key Identifier:
                keyid:C6:E3:4A:58:4C:F6:8A:FD:DB:E3:B5:EE:7F:24:C9:0C:BB:D6:2E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6E34A584CF68AFDDBE3B5EE7F24C90CBBD62EB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/1/34352e3137332e33302e302f32342d3234203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:eb:30:4e:4b:8c:3d:72:36:d7:6f:96:e7:dc:c0:de:18:9e:
         01:bf:ba:52:4b:d5:b5:2d:97:7e:48:db:ff:03:0c:1d:1a:bf:
         87:2d:33:d4:81:2e:7f:a6:d6:80:c2:17:92:c4:5c:21:d6:aa:
         b7:5f:83:86:d4:cc:ac:b2:2f:15:e3:f4:0d:02:1c:4c:44:06:
         c2:41:bb:e3:48:65:c7:88:b8:4a:ea:a4:3f:3e:1c:3e:dd:58:
         05:25:49:cf:6c:90:40:df:49:b2:c7:09:29:32:1b:da:ef:27:
         70:2f:a8:9e:ce:6a:bf:f9:85:9b:9e:cd:2f:17:84:5c:1b:55:
         c3:a9:d6:ae:64:73:72:09:32:5f:a5:3a:e6:72:38:8e:5f:b6:
         54:93:42:71:18:11:38:70:c9:d6:81:79:de:70:75:fe:9e:8c:
         f6:ab:2b:1e:56:11:d0:39:58:49:a3:15:0f:57:06:ef:72:38:
         f9:30:52:a7:83:89:4c:e4:73:fe:97:05:09:2c:7d:6c:f5:56:
         a5:ef:fa:70:9f:aa:30:98:93:8b:91:b2:2d:de:f4:e8:91:6a:
         df:01:90:82:ff:c2:e0:92:a8:7b:b1:88:79:d5:17:cd:ac:7e:
         8d:d0:35:30:e1:cf:88:c5:41:3b:01:41:e3:51:fe:70:c3:22:
         0b:75:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:50 2025 by rpki-client