Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa
File:                     34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa (raw, json)
Hash identifier:          rffRqbXSDudukT1PmfoSb7Sdg58AKqcnYmtAsXIuuPw=
Subject key identifier:   C5:60:EB:44:A2:C3:0B:1A:43:B5:CA:74:F9:7A:36:89:70:9E:BC:A5
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       7B4D878DBCF1329D40FDE1012B1AF6E9C83AAD52
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa
Signing time:             Thu 06 Mar 2025 09:31:53 +0000
ROA not before:           Thu 06 Mar 2025 09:26:53 +0000
ROA not after:            Thu 05 Mar 2026 09:31:53 +0000
asID:                     268296
IP address blocks:        45.237.246.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4d:87:8d:bc:f1:32:9d:40:fd:e1:01:2b:1a:f6:e9:c8:3a:ad:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Mar  6 09:26:53 2025 GMT
            Not After : Mar  5 09:31:53 2026 GMT
        Subject: CN=C560EB44A2C30B1A43B5CA74F97A3689709EBCA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:0d:8b:59:40:0a:94:5c:63:d6:ab:92:e0:
                    bc:90:39:ce:a0:ee:b3:93:66:51:9b:c9:5b:7d:3b:
                    77:97:7b:9c:fa:f9:44:6b:8f:6c:1d:ee:40:1e:40:
                    c2:6a:18:3f:a2:76:f0:11:47:bf:73:f3:15:5e:b3:
                    44:1d:f7:d4:90:ad:23:81:6e:35:96:85:91:ee:ce:
                    85:3b:c4:61:80:93:78:fe:87:dd:42:43:56:ac:ce:
                    bb:67:48:1e:c1:8c:9d:ca:a8:95:b0:9e:7d:cb:d3:
                    fa:3f:da:78:8b:f5:ee:7e:c6:f2:d2:a5:09:15:d0:
                    6b:49:09:84:8d:9e:7c:88:64:8f:77:ed:84:de:58:
                    25:b9:65:2d:10:5a:c9:02:a8:cf:37:13:11:bf:bb:
                    3f:64:8b:59:3b:b3:33:8a:f7:2b:e9:80:ae:79:3d:
                    b8:aa:45:f1:e9:c8:9b:05:9f:8c:b0:b6:ff:58:47:
                    d1:14:8c:36:75:45:d5:ac:ea:c0:58:db:3c:b0:4d:
                    1c:16:1d:7d:0f:d4:f7:52:c3:23:e7:13:90:f0:2c:
                    ac:e3:b3:37:34:02:d0:7d:45:eb:c2:55:ef:5f:5c:
                    ca:e8:39:be:c7:2a:a2:4b:e2:6d:f6:9d:cf:8d:6a:
                    6a:d4:85:a0:42:a9:38:24:1f:c2:f3:d0:57:dd:b4:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:60:EB:44:A2:C3:0B:1A:43:B5:CA:74:F9:7A:36:89:70:9E:BC:A5
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234362e302f32332d3233203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:9e:1e:3e:ea:9f:80:50:33:ba:8f:e6:44:0b:ef:24:d4:fd:
         43:4d:6b:11:78:37:b1:96:df:4b:a8:17:22:df:69:c6:8f:cc:
         12:43:fc:09:fb:23:a0:08:fe:d9:cd:00:90:3d:d1:d4:e6:1b:
         63:47:60:b0:b8:a5:f7:23:e1:ff:5c:d7:77:9b:33:b9:86:2e:
         12:1d:c9:d2:3c:d7:c3:de:e1:18:60:5d:13:da:33:49:bc:e0:
         ce:e7:b3:09:a6:96:bc:88:52:28:7b:ba:1e:7a:2d:4d:7f:e2:
         46:07:54:5e:48:4e:68:54:ed:27:84:c7:52:ab:11:72:97:81:
         29:02:fc:d4:21:7a:ee:ca:ef:6d:b9:c7:97:fd:7a:06:55:ba:
         2a:63:30:ed:9d:ef:57:db:73:de:ff:9e:36:eb:f2:b0:9c:fd:
         ff:0d:7b:22:35:3d:9f:fb:1e:62:6d:90:28:22:82:d0:d3:f2:
         87:89:34:b8:0d:46:7d:7c:3b:38:4e:aa:fe:15:85:42:17:5c:
         00:31:7c:88:73:26:7b:2a:14:8f:60:c9:e6:bb:65:21:2b:ba:
         a3:66:a1:84:e9:69:cb:65:d7:1a:8e:ad:96:15:6c:7f:e3:5e:
         19:52:53:af:09:05:8c:e6:74:0c:1f:8f:be:6a:a3:40:52:2c:
         5a:d9:5a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:19:03 2025 by rpki-client