Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133342e302f32332d3233203d3e20323638363736.roa
File:                     34352e3136352e3133342e302f32332d3233203d3e20323638363736.roa (raw, json)
Hash identifier:          c86CRBtvFdlbZ8vT0IsRhv1F1O3D0AErTIWSjmKWnFQ=
Subject key identifier:   C7:44:77:2F:67:A7:C6:38:2E:98:4F:93:3C:39:E6:77:F2:34:FC:B8
Certificate issuer:       /CN=EFECFF06B567336335B796BF5ACABEA67659A437
Certificate serial:       4F2293CB5E3C5EFEA9246B198EA355F51BF54416
Authority key identifier: EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133342e302f32332d3233203d3e20323638363736.roa
Signing time:             Mon 06 May 2024 14:09:14 +0000
ROA not before:           Mon 06 May 2024 14:04:14 +0000
ROA not after:            Mon 05 May 2025 14:09:14 +0000
asID:                     268676
IP address blocks:        45.165.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:22:93:cb:5e:3c:5e:fe:a9:24:6b:19:8e:a3:55:f5:1b:f5:44:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFECFF06B567336335B796BF5ACABEA67659A437
        Validity
            Not Before: May  6 14:04:14 2024 GMT
            Not After : May  5 14:09:14 2025 GMT
        Subject: CN=C744772F67A7C6382E984F933C39E677F234FCB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:a2:1d:7f:10:2d:53:ca:6c:f3:29:c6:47:
                    f7:b1:ec:1b:44:83:fa:0b:39:ef:3c:29:05:25:2f:
                    58:d4:25:cf:e2:99:60:46:75:dd:33:aa:f8:86:b6:
                    23:79:15:e4:02:59:18:41:dd:96:9b:e2:04:7a:1a:
                    92:4f:11:dd:0b:f8:36:1a:52:6a:9d:48:9b:bb:f3:
                    69:fb:cd:cf:15:37:c3:68:12:3f:f3:90:1b:ab:25:
                    c3:3f:0f:e6:86:41:df:bf:94:3e:57:db:70:33:a2:
                    5a:aa:92:38:3f:55:a0:4f:2e:36:0d:91:75:f1:dc:
                    e7:4e:b0:5b:48:47:d2:21:41:df:0c:32:bb:ab:47:
                    c7:31:f6:41:89:2d:ba:60:54:7c:4e:a2:8c:a1:77:
                    97:23:39:70:8f:54:80:bf:2d:3f:16:9c:7d:82:f1:
                    4e:3c:53:f6:9c:25:07:13:fc:8c:e9:2c:56:0a:8e:
                    b8:a4:92:9b:b6:3e:30:8c:e5:1b:f8:29:71:96:d1:
                    e9:34:d3:d4:8c:c3:f2:cb:7f:88:60:d4:c2:02:92:
                    95:b0:cb:3c:b0:b5:80:3b:4d:27:1d:a9:fa:9b:13:
                    65:cc:a1:7d:6c:74:ff:39:9f:a0:00:f7:53:39:9c:
                    b7:c6:81:6d:48:b6:a4:68:7d:a4:1c:52:64:bd:23:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:44:77:2F:67:A7:C6:38:2E:98:4F:93:3C:39:E6:77:F2:34:FC:B8
            X509v3 Authority Key Identifier:
                keyid:EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/EFECFF06B567336335B796BF5ACABEA67659A437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133342e302f32332d3233203d3e20323638363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:c4:d8:26:b9:ca:09:32:a5:c4:71:49:94:a5:ac:32:23:5f:
         1c:fe:a5:5c:cb:6f:a9:2a:a8:af:56:04:7b:a1:97:ad:f1:96:
         39:ca:8e:15:54:a4:38:e4:02:08:d9:e8:3c:3f:cf:68:c5:37:
         f4:1c:f2:25:81:15:74:f4:eb:e0:61:dc:d1:9e:6b:3f:8d:10:
         8a:5c:5b:98:2e:c5:18:5c:2e:df:f6:73:4a:97:f4:99:9e:e6:
         ab:c0:3a:d7:dc:b2:8a:89:af:28:66:0c:d0:19:f8:ac:71:8f:
         e4:c1:b4:02:0e:2b:8e:9f:df:67:18:28:70:14:2a:2d:58:3a:
         b1:c0:75:8b:99:db:30:82:96:c1:c0:87:59:ff:67:39:f4:92:
         fc:94:24:a6:5b:7c:27:be:70:62:ea:ce:a9:66:a2:7f:02:80:
         7d:9d:fe:54:f8:f2:52:9d:ce:48:b1:3a:db:21:93:71:67:fb:
         80:bf:1e:00:33:1e:38:75:66:dd:7f:22:8a:18:0d:ff:90:a1:
         83:da:d9:3e:c3:a1:a7:72:8d:5c:04:1d:01:4e:e7:34:81:e0:
         53:b9:a8:f3:03:6d:63:9f:fe:f7:15:3d:62:c0:fd:1e:75:bd:
         94:18:1f:b2:51:89:6b:8e:8e:02:c4:d8:15:2f:a7:fb:c6:77:
         0b:9a:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:03 2025 by rpki-client