Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33362e302f32332d3233203d3e20323636393735.roa
File:                     34352e3232362e33362e302f32332d3233203d3e20323636393735.roa (raw, json)
Hash identifier:          8G5A7N+ePAqGBFceWS4hfkx9y15QFKnqdlxSasIeOzg=
Subject key identifier:   1A:8A:7E:D2:8F:0F:A5:44:0D:12:04:2B:0E:E7:2F:16:12:01:7C:2F
Certificate issuer:       /CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
Certificate serial:       0C45E5A287C76236E5ACDC7F2E0DCB96D7229413
Authority key identifier: F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33362e302f32332d3233203d3e20323636393735.roa
Signing time:             Tue 04 Feb 2025 14:20:43 +0000
ROA not before:           Tue 04 Feb 2025 14:15:43 +0000
ROA not after:            Tue 03 Feb 2026 14:20:43 +0000
asID:                     266975
IP address blocks:        45.226.36.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:45:e5:a2:87:c7:62:36:e5:ac:dc:7f:2e:0d:cb:96:d7:22:94:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
        Validity
            Not Before: Feb  4 14:15:43 2025 GMT
            Not After : Feb  3 14:20:43 2026 GMT
        Subject: CN=1A8A7ED28F0FA5440D12042B0EE72F1612017C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:43:79:57:42:bb:6f:a7:aa:25:78:0c:ec:
                    e0:f7:15:9d:be:67:af:2d:a6:a4:dc:d5:db:ec:fb:
                    18:eb:bb:06:bd:d7:0c:14:3f:b0:05:9c:3d:b6:59:
                    e9:2b:2a:cd:dd:88:7f:f1:8e:26:86:1f:67:c6:62:
                    09:ce:64:b1:d1:e3:35:72:dc:88:b3:f8:c8:33:b6:
                    bb:c2:8e:eb:a1:e3:be:2a:36:a4:14:ad:ac:30:4e:
                    b7:4e:ec:d3:38:9b:0a:3f:66:4d:f6:01:2a:ff:c3:
                    e5:c6:61:ae:c3:6a:9b:f1:cf:f3:e2:a3:92:27:7e:
                    f4:b7:cd:d4:da:fc:60:67:a2:9c:ef:69:34:b6:86:
                    93:c3:4e:3f:d9:fc:a4:23:f4:dd:40:8d:58:20:e6:
                    62:1c:79:70:5d:9d:db:99:e3:0d:a4:85:47:22:9a:
                    c2:bf:92:cb:5d:f9:de:a2:cd:f1:a1:5a:d8:a5:b5:
                    df:75:27:51:ea:dd:d8:cb:a7:9a:6d:a6:78:4e:7f:
                    cc:13:04:00:79:a5:c7:cb:c0:98:02:18:4f:14:5b:
                    db:39:4b:3d:1d:36:f6:27:65:76:b3:ad:b1:f5:36:
                    ee:37:da:32:04:51:24:7c:95:29:39:d4:cd:8d:98:
                    42:28:12:36:de:8c:c6:0b:a9:36:b9:ce:53:b7:52:
                    ec:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8A:7E:D2:8F:0F:A5:44:0D:12:04:2B:0E:E7:2F:16:12:01:7C:2F
            X509v3 Authority Key Identifier:
                keyid:F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33362e302f32332d3233203d3e20323636393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:b0:08:a9:c5:61:cf:f7:c2:43:9e:ce:69:53:b0:ac:f5:fe:
         cc:0e:36:65:2e:3f:fa:33:79:28:08:2a:d1:2b:16:fa:f9:a6:
         b1:9c:dc:a5:f6:35:94:c1:42:d0:11:cb:31:bc:3d:cd:b8:57:
         ae:a4:d3:ce:74:a0:f7:5b:fb:23:0e:94:76:43:19:a2:fd:7a:
         fd:49:02:86:f7:08:3d:9c:63:6f:4e:2d:1b:0c:11:2b:28:0e:
         e8:55:70:f0:62:8f:fa:d0:34:35:ca:95:b7:19:4c:69:97:a6:
         32:41:d5:df:0c:6a:1e:38:c3:a7:74:dc:74:99:0c:23:50:27:
         79:32:ae:74:28:07:da:a4:61:30:9a:de:d9:a6:14:45:0c:16:
         d8:68:a0:ea:83:d0:a6:04:40:65:5d:31:aa:39:8f:60:e5:ad:
         37:38:64:0f:c8:d0:6f:c3:fd:88:68:1c:b5:82:8a:05:6c:8e:
         74:c4:85:eb:61:ed:31:5a:3a:e3:e9:68:12:c0:38:00:fc:09:
         5e:df:4c:df:dc:9a:b9:76:d5:e5:dd:9c:a4:f6:ee:79:6b:ba:
         74:da:7a:82:81:16:62:38:ea:07:20:71:a1:6b:de:93:d9:93:
         e7:a3:15:23:95:0c:58:8c:88:36:c2:ac:cf:bd:d3:89:f3:18:
         1f:8e:28:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:43 2025 by rpki-client