Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcLWByRETn7csFpYwVkidtrNV8JyT8UhuXh6rtfWDepi/0/34352e3233352e3130382e302f32322d3234203d3e20323637343136.roa
File:                     34352e3233352e3130382e302f32322d3234203d3e20323637343136.roa (raw, json)
Hash identifier:          kAxjA0fCu/+gyK0taboVerMbsh5nKg4iuefSsACKOsI=
Subject key identifier:   30:BB:E4:3E:32:17:68:65:CC:E3:D6:6A:AD:4C:ED:39:0D:16:56:38
Certificate issuer:       /CN=6DEEE8EF6C7A1CB91CE4CE2B3C8A2507C8F91A91
Certificate serial:       5790A47BD223B559C6562AC0BDEEE0CAF3DA49DB
Authority key identifier: 6D:EE:E8:EF:6C:7A:1C:B9:1C:E4:CE:2B:3C:8A:25:07:C8:F9:1A:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DEEE8EF6C7A1CB91CE4CE2B3C8A2507C8F91A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcLWByRETn7csFpYwVkidtrNV8JyT8UhuXh6rtfWDepi/0/34352e3233352e3130382e302f32322d3234203d3e20323637343136.roa
Signing time:             Mon 23 Dec 2024 16:13:33 +0000
ROA not before:           Mon 23 Dec 2024 16:08:33 +0000
ROA not after:            Mon 22 Dec 2025 16:13:33 +0000
asID:                     267416
IP address blocks:        45.235.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:90:a4:7b:d2:23:b5:59:c6:56:2a:c0:bd:ee:e0:ca:f3:da:49:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DEEE8EF6C7A1CB91CE4CE2B3C8A2507C8F91A91
        Validity
            Not Before: Dec 23 16:08:33 2024 GMT
            Not After : Dec 22 16:13:33 2025 GMT
        Subject: CN=30BBE43E32176865CCE3D66AAD4CED390D165638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:89:ab:88:b6:19:06:5a:a1:22:53:b1:d5:
                    71:85:a4:f3:41:82:f1:b3:c2:8c:84:24:c8:c1:db:
                    3d:cd:26:a3:7c:10:55:56:29:1a:12:c2:1c:f4:9a:
                    24:9a:69:90:86:86:6c:f3:b1:fb:48:95:b5:f7:50:
                    cd:87:2d:69:77:e4:d8:f1:c4:70:0d:a9:c4:7e:59:
                    97:73:69:eb:fb:16:2b:60:cd:22:0f:aa:02:c5:23:
                    21:8d:11:5c:45:98:19:79:58:5e:e3:40:71:74:bb:
                    46:7f:ca:54:f3:1a:b2:ff:55:9c:1c:79:9d:77:1e:
                    a9:38:60:20:c6:72:ef:ae:e3:2a:94:2d:3b:73:20:
                    81:b5:5f:6d:74:11:2a:b6:cd:6f:b5:ab:66:f8:3b:
                    e8:ed:d5:51:d0:50:ff:9a:3d:25:32:a0:71:85:ea:
                    b2:5e:54:f9:b4:dc:d6:1b:49:d8:64:cc:64:ab:dd:
                    c3:8e:66:02:54:ff:d5:44:29:d5:78:45:13:ea:58:
                    f8:64:35:1c:f4:61:d2:03:6f:47:dc:8e:d0:28:d2:
                    76:33:f2:9f:a6:05:86:59:4d:55:8e:11:51:e9:eb:
                    12:97:c9:ed:00:12:c3:84:94:01:c6:35:a7:29:d6:
                    53:dd:04:ef:40:a9:2f:60:ec:11:b3:e0:9b:1c:6b:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BB:E4:3E:32:17:68:65:CC:E3:D6:6A:AD:4C:ED:39:0D:16:56:38
            X509v3 Authority Key Identifier:
                keyid:6D:EE:E8:EF:6C:7A:1C:B9:1C:E4:CE:2B:3C:8A:25:07:C8:F9:1A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcLWByRETn7csFpYwVkidtrNV8JyT8UhuXh6rtfWDepi/0/6DEEE8EF6C7A1CB91CE4CE2B3C8A2507C8F91A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DEEE8EF6C7A1CB91CE4CE2B3C8A2507C8F91A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcLWByRETn7csFpYwVkidtrNV8JyT8UhuXh6rtfWDepi/0/34352e3233352e3130382e302f32322d3234203d3e20323637343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:45:ab:50:03:c6:3c:1f:4d:31:b2:b5:4c:fb:26:f3:9c:2a:
         03:e5:f8:eb:7d:f4:06:5a:04:02:f1:77:0d:b9:f3:57:64:49:
         09:d4:89:e8:31:96:14:86:5a:56:48:e3:5f:f3:86:3e:b0:2d:
         e5:a5:24:f5:8d:7e:dd:6e:58:0d:6e:4f:28:7b:31:93:20:06:
         60:fe:57:8a:4d:cb:fe:96:e7:a7:db:95:cb:b4:bd:3d:aa:28:
         68:ab:aa:b3:aa:ff:ca:2c:12:88:0c:3e:5f:23:77:36:2a:85:
         16:9c:58:88:3d:f3:e6:90:e0:64:c3:43:1f:4c:2e:65:12:85:
         be:ff:79:6c:64:09:b1:3b:91:8e:4a:c7:a6:bd:c6:e9:da:d3:
         51:b5:a7:d6:47:de:ad:20:15:f1:42:31:8f:96:c5:8b:66:75:
         48:e9:50:e3:98:62:24:21:57:0a:28:24:11:65:02:64:96:f3:
         25:4d:be:fe:67:69:85:39:82:a4:a5:d7:a1:56:d5:98:97:7b:
         dd:93:79:2f:95:5f:94:ef:cb:e7:f5:88:dc:27:3c:06:d5:7d:
         4a:2e:3d:4e:10:6a:36:50:f4:b1:ff:1e:66:dc:3c:d8:34:99:
         a7:3a:47:30:3a:1e:45:93:03:0d:6d:74:46:a8:f5:2f:75:93:
         01:64:d0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:32:08 2025 by rpki-client