Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          4PfWE/SKY+EAUEUmAbb8bnKPHIGlis7vE5ycz52CqXA=
Subject key identifier:   47:EC:ED:94:5F:64:D8:AE:E5:8A:B6:DE:6B:37:7A:12:A8:3A:0B:08
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       14389C32B7F4119398432EFAA221EA95B6EE244C
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa
Signing time:             Thu 06 Mar 2025 09:31:55 +0000
ROA not before:           Thu 06 Mar 2025 09:26:55 +0000
ROA not after:            Thu 05 Mar 2026 09:31:55 +0000
asID:                     268296
IP address blocks:        45.237.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:38:9c:32:b7:f4:11:93:98:43:2e:fa:a2:21:ea:95:b6:ee:24:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Mar  6 09:26:55 2025 GMT
            Not After : Mar  5 09:31:55 2026 GMT
        Subject: CN=47ECED945F64D8AEE58AB6DE6B377A12A83A0B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:d8:8f:c6:85:fd:dd:11:ff:bb:f9:4f:2a:
                    e3:47:46:f4:13:e2:60:c7:da:49:29:9a:aa:e8:24:
                    c7:3d:fc:4f:64:36:07:60:1a:f0:d4:e2:35:95:f3:
                    0b:22:ee:34:1f:2c:27:6c:2d:74:84:18:df:47:36:
                    eb:51:3e:3e:e8:5a:2a:0e:33:da:c7:9f:a8:a2:f9:
                    8e:54:e1:ac:da:78:56:b3:e6:5c:9d:ea:ed:b9:7b:
                    ea:17:f9:f9:21:0a:a6:8b:3f:ec:8a:da:fc:de:f9:
                    0b:58:bf:9d:d4:c0:ba:05:ac:0b:c3:ec:78:41:dc:
                    c4:e3:99:56:dc:8a:60:b6:a7:25:1c:0a:fd:83:a0:
                    58:90:b6:b5:f0:3c:3a:06:e2:97:89:05:ed:ba:11:
                    79:3b:39:5f:11:4c:d4:95:e4:42:94:49:db:b6:2a:
                    e3:66:61:97:58:9c:fa:4a:55:3b:46:bd:f2:dc:2d:
                    5f:b2:c5:a0:f2:1b:b7:79:15:a3:7e:95:71:1f:e8:
                    3d:4c:d2:28:f7:e0:b3:06:51:d7:8f:59:e3:a2:22:
                    d0:e1:7c:a2:30:38:ba:d6:44:d3:e6:2a:b0:5a:fb:
                    8d:70:5d:3c:59:c5:a6:59:73:c7:c2:de:e4:07:76:
                    1d:20:49:8e:69:0e:9e:75:8a:26:34:95:ca:d6:7f:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EC:ED:94:5F:64:D8:AE:E5:8A:B6:DE:6B:37:7A:12:A8:3A:0B:08
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:5d:23:4e:74:e8:0c:30:cb:ba:7d:0d:fe:5d:5a:d7:cd:82:
         14:db:39:95:f4:76:ba:71:cd:ee:4a:30:5a:43:b7:45:a6:81:
         18:24:4b:d5:fd:e0:26:91:bb:29:e4:fb:b3:f5:f1:b5:15:17:
         c7:d2:ca:27:c8:35:e6:83:27:fa:ae:0a:a7:65:fa:b9:51:6b:
         bf:f9:a9:c6:e8:aa:c6:36:9d:be:bd:cf:6a:2a:dd:a5:b1:a0:
         c9:b6:96:8e:2a:c2:8b:7e:41:f1:f5:98:3b:d1:24:4b:e4:8d:
         78:85:22:30:19:8f:5e:f8:d0:f8:32:62:a0:cc:53:26:ba:05:
         56:f8:0a:19:76:46:31:ec:b2:01:05:78:e6:8a:55:f9:40:6e:
         2a:a0:e6:58:ab:71:1c:00:ad:ae:81:21:fa:ee:67:fd:d3:a3:
         a0:92:5a:18:99:9e:e6:f2:ac:58:b6:53:b2:d1:4c:10:db:95:
         09:60:0b:6c:bc:a7:36:2b:68:a8:e1:b2:8f:d3:54:12:c2:1c:
         de:a2:91:19:2d:93:ea:84:3f:ba:df:5e:7d:87:95:b5:01:88:
         ac:ca:1e:03:be:47:d6:59:be:ed:60:c9:26:d9:39:7e:fc:cb:
         9a:10:55:45:9b:c0:c5:ba:3b:8c:ee:00:9c:d1:6d:a7:f6:7c:
         8e:b2:4c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:53:18 2025 by rpki-client