Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa (raw, json)
Hash identifier:          WlqKUf+e8iq/5tBLpD2lvcEf2Apmn2MgWLJn1ERPanc=
Subject key identifier:   D1:FF:96:F4:DF:A6:CA:3A:A8:34:65:ED:3A:E3:DF:67:62:BF:40:10
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       2FFD501CB6F9BE9B783CEA199F34F7DADACE0404
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa
Signing time:             Thu 06 Mar 2025 09:31:54 +0000
ROA not before:           Thu 06 Mar 2025 09:26:54 +0000
ROA not after:            Thu 05 Mar 2026 09:31:54 +0000
asID:                     268296
IP address blocks:        45.237.244.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fd:50:1c:b6:f9:be:9b:78:3c:ea:19:9f:34:f7:da:da:ce:04:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Mar  6 09:26:54 2025 GMT
            Not After : Mar  5 09:31:54 2026 GMT
        Subject: CN=D1FF96F4DFA6CA3AA83465ED3AE3DF6762BF4010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9b:9f:83:fa:d0:89:95:b2:b9:b1:65:98:83:
                    b1:d6:2a:d1:aa:9a:8f:0f:6e:32:ca:df:31:dc:ec:
                    24:77:fb:e0:c7:e6:9e:4c:43:05:2e:ca:6b:ef:83:
                    ad:87:72:7f:48:6d:f2:5d:34:f5:fb:21:e2:fe:cd:
                    51:7f:9d:21:cf:90:a0:93:c6:10:72:c6:70:31:a2:
                    d3:f1:bd:fe:5c:24:11:ff:3e:a3:e5:94:21:6a:d7:
                    76:27:7f:3c:eb:f8:76:36:1f:d5:41:ed:12:bf:35:
                    49:d7:fd:1a:eb:25:1e:af:0f:ab:7c:a1:0b:11:fe:
                    5f:9e:e4:1f:8e:16:10:36:64:ec:9c:b6:91:e0:10:
                    29:69:fd:83:0f:20:7b:04:eb:50:e9:75:e8:46:06:
                    1f:ea:eb:94:fd:18:2d:3c:25:42:4b:a5:2c:70:ab:
                    22:63:f7:dc:e2:92:4d:7c:a1:ba:3f:dd:ec:7e:c6:
                    b4:c8:49:be:7e:f0:6d:e2:3c:b6:a0:80:ce:6d:dd:
                    35:53:f3:94:0c:c0:f6:df:2e:8b:96:53:3a:a9:26:
                    23:da:46:01:ec:9b:6b:e3:d1:a7:b0:2c:99:f6:76:
                    67:2b:47:08:e8:a1:80:26:54:7b:e4:56:98:c1:1e:
                    c5:19:b6:dd:fe:35:62:79:7d:89:b9:86:35:d3:4b:
                    9a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FF:96:F4:DF:A6:CA:3A:A8:34:65:ED:3A:E3:DF:67:62:BF:40:10
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:17:d9:60:d8:34:74:77:bc:09:80:a5:88:da:2c:1c:9d:2e:
         e3:f0:ea:dc:96:5c:9f:97:4f:a4:74:c3:53:1d:a9:37:36:aa:
         dd:01:20:47:da:4d:2c:f8:7a:2e:1a:dc:93:12:e8:74:80:ce:
         48:f3:0d:3d:f7:05:6f:d7:27:5d:c3:b5:68:6e:c6:39:8c:a8:
         a3:12:19:5e:26:7c:9f:bd:68:52:6e:23:e8:84:f6:46:59:7a:
         c0:e2:c3:f4:ef:9a:31:98:14:cf:d6:da:e6:e6:34:9f:c1:ed:
         d6:ef:63:8f:4f:f2:14:8c:9f:43:84:13:1d:b6:4a:8b:e9:8c:
         1d:e7:cc:44:1f:bd:db:18:8d:9b:35:f4:1d:7d:8f:0c:66:c4:
         7d:f9:29:a6:86:7a:2b:00:5d:fa:b5:e0:f9:30:bf:92:53:73:
         8f:b8:a0:79:e6:d3:0e:9a:0e:46:c2:9e:ed:2d:9f:c5:91:46:
         8c:f2:bb:73:c5:44:44:13:0e:9c:b0:95:57:3b:d2:67:3b:e4:
         ff:98:d4:ed:cc:8b:85:19:b8:93:3b:da:c7:b2:4a:5e:5f:93:
         c9:0f:99:c7:fe:a0:96:ef:07:c3:f9:7a:a1:7c:5d:95:74:20:
         13:1c:82:a8:2c:c2:40:3b:b9:bc:9c:3c:3f:a9:42:1e:94:1c:
         43:d1:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:20:19 2025 by rpki-client