Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33392e302f32342d3234203d3e20323636393735.roa
File:                     34352e3232362e33392e302f32342d3234203d3e20323636393735.roa (raw, json)
Hash identifier:          KzCKpw5mIFeFb94y6gsKFGSO0Cu1Sdy/aNoSSFyv63w=
Subject key identifier:   28:16:B3:F2:ED:65:51:C6:C7:30:B6:0C:4C:20:A7:49:19:E1:F5:B5
Certificate issuer:       /CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
Certificate serial:       7DA4EAD0583D496D7AAEB39A9D5EDD37AE17F552
Authority key identifier: F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33392e302f32342d3234203d3e20323636393735.roa
Signing time:             Tue 04 Feb 2025 14:20:43 +0000
ROA not before:           Tue 04 Feb 2025 14:15:43 +0000
ROA not after:            Tue 03 Feb 2026 14:20:43 +0000
asID:                     266975
IP address blocks:        45.226.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a4:ea:d0:58:3d:49:6d:7a:ae:b3:9a:9d:5e:dd:37:ae:17:f5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F346A2DF3646E1D5462B83A19F3C56C660FEB218
        Validity
            Not Before: Feb  4 14:15:43 2025 GMT
            Not After : Feb  3 14:20:43 2026 GMT
        Subject: CN=2816B3F2ED6551C6C730B60C4C20A74919E1F5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:56:f9:54:b9:1a:2a:00:96:ff:c5:b3:a1:
                    51:62:e5:95:9d:b6:c4:2e:e9:c3:d8:e2:39:a8:b1:
                    9d:b0:81:b2:37:d2:b6:4d:8e:83:a4:98:c3:1f:ba:
                    bc:2b:8e:0e:fd:8e:6f:1e:af:1d:7d:a2:cf:c2:8f:
                    f4:d1:87:54:d7:93:1a:83:58:21:47:9a:3b:0a:dd:
                    14:38:98:90:23:8c:f0:eb:f4:c1:88:8f:f1:53:eb:
                    32:83:a1:8e:bd:52:6c:94:e3:46:18:0d:7a:66:31:
                    61:02:0f:60:91:5c:d8:21:ef:e4:a1:f4:62:33:7b:
                    ed:67:0c:63:c1:85:58:6f:06:7d:cc:bb:c0:02:c3:
                    8b:60:1a:66:1f:c4:0c:81:65:fe:a3:4a:86:2d:ea:
                    7f:f2:33:e5:8a:99:48:f8:45:20:4e:14:1d:ac:c5:
                    8e:62:00:a3:fd:5f:20:71:3f:b8:8e:b3:f3:e4:c6:
                    0b:f3:ce:07:84:47:ec:72:46:62:31:85:a7:67:fb:
                    da:6c:e7:4f:1d:4c:b2:b9:da:27:57:4b:5d:b4:e7:
                    a7:ea:39:9f:81:b7:19:81:14:02:b7:85:f8:81:a6:
                    4d:fe:7e:b2:a1:b8:b8:87:c4:90:7f:18:c0:7b:d4:
                    07:2e:2a:8a:79:e3:b9:c4:9f:b5:10:bd:92:2b:18:
                    56:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:16:B3:F2:ED:65:51:C6:C7:30:B6:0C:4C:20:A7:49:19:E1:F5:B5
            X509v3 Authority Key Identifier:
                keyid:F3:46:A2:DF:36:46:E1:D5:46:2B:83:A1:9F:3C:56:C6:60:FE:B2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/F346A2DF3646E1D5462B83A19F3C56C660FEB218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F346A2DF3646E1D5462B83A19F3C56C660FEB218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kHCNLPK8RKwjwLBqBqERSh68ynhDJoqF9PbtMKXoAE7/0/34352e3232362e33392e302f32342d3234203d3e20323636393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:85:3e:75:26:5c:25:68:64:b5:9c:86:bb:8b:cb:07:0e:48:
         60:5e:34:b2:1f:64:99:a3:9b:f4:fa:61:03:4b:c1:b9:b4:82:
         71:e1:44:5d:6e:12:37:e9:50:5c:d5:c4:45:29:ce:ae:27:78:
         ba:21:79:2b:38:01:75:5d:f7:c8:1a:25:ce:41:c9:0a:ee:16:
         77:0e:63:33:40:d5:70:29:45:68:f6:a1:1e:ec:21:40:27:b6:
         d6:46:8a:72:45:af:3a:de:13:ea:b8:85:70:6e:a6:12:b1:e1:
         04:c3:45:eb:9b:d4:ac:53:8d:42:b3:b9:b1:1e:fa:00:41:66:
         e1:e0:0f:c7:d0:e5:79:db:ac:92:a9:a5:13:d1:3e:b9:43:73:
         96:79:57:38:62:46:0c:49:fe:b7:28:3a:d5:95:6f:4b:ae:ab:
         ce:b1:31:bb:38:e1:77:1a:8e:5b:3f:30:08:8c:ca:2d:de:5c:
         4f:6a:4e:93:5e:ce:e9:7f:39:15:11:66:9b:02:21:f7:da:1c:
         c7:3b:48:2b:a9:b5:2e:19:a8:89:b7:52:b2:b8:85:43:e1:4f:
         95:1e:87:60:da:14:88:fc:a0:db:9c:87:24:c3:d0:e5:d4:78:
         0a:7b:ee:7a:52:d6:61:cd:4a:5f:87:ae:76:32:9e:41:a2:d5:
         72:7c:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:27:01 2025 by rpki-client