Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32322d3232203d3e20323636323332.roa
File:                     34352e362e3138302e302f32322d3232203d3e20323636323332.roa (raw, json)
Hash identifier:          MOLYTypHL9HL3joce0iYvNJWyrLbpuuaXspRA5YkMhs=
Subject key identifier:   1A:AD:24:F4:C0:50:01:60:73:88:88:7E:2E:86:4A:FB:6E:C1:02:E6
Certificate issuer:       /CN=E850C4DA829AA4AD90F631DEF784C6044D89B7B6
Certificate serial:       6AAAD3C9FBB7F9D2C95D6EF4A44DE2454386BC66
Authority key identifier: E8:50:C4:DA:82:9A:A4:AD:90:F6:31:DE:F7:84:C6:04:4D:89:B7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32322d3232203d3e20323636323332.roa
Signing time:             Fri 06 Sep 2024 14:17:05 +0000
ROA not before:           Fri 06 Sep 2024 14:12:05 +0000
ROA not after:            Fri 05 Sep 2025 14:17:05 +0000
asID:                     266232
IP address blocks:        45.6.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:aa:d3:c9:fb:b7:f9:d2:c9:5d:6e:f4:a4:4d:e2:45:43:86:bc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E850C4DA829AA4AD90F631DEF784C6044D89B7B6
        Validity
            Not Before: Sep  6 14:12:05 2024 GMT
            Not After : Sep  5 14:17:05 2025 GMT
        Subject: CN=1AAD24F4C05001607388887E2E864AFB6EC102E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:79:7b:bd:ec:78:c0:ce:d9:90:06:b4:1e:6f:
                    51:7b:85:bd:f2:a7:ba:b1:cc:b3:73:c0:58:bd:ef:
                    cc:ea:c7:39:b2:85:5f:4b:d4:73:b5:29:3f:17:22:
                    a2:f1:5c:20:62:aa:a2:75:a4:a4:dd:e0:79:df:64:
                    3f:0f:93:36:6a:b7:88:8b:cc:0d:69:b4:f5:82:cf:
                    e5:42:37:2e:cc:97:4f:2a:52:74:90:31:c9:af:44:
                    de:3d:7a:69:0b:f7:f8:87:9d:ad:60:96:2c:f4:f1:
                    dd:c6:42:01:36:9d:8b:7b:7f:27:47:65:ab:7a:bd:
                    d5:2d:35:be:8b:1b:69:17:1d:f7:bd:a9:30:7d:44:
                    b1:a6:4a:a4:01:3d:57:6f:1f:5a:5c:9e:27:1a:1e:
                    92:1f:a5:42:e1:02:73:ae:51:d2:82:82:b2:27:79:
                    35:f6:4d:61:a5:b7:bc:ea:f6:23:f0:c8:5b:2c:b0:
                    b6:df:1a:a5:db:15:c8:83:86:25:87:52:8a:58:03:
                    60:77:1d:43:9b:b3:fe:44:e4:b0:5a:76:63:da:55:
                    67:15:fe:8b:f0:fd:a1:5b:d9:02:86:2a:30:7b:02:
                    7f:ac:db:6e:24:52:d9:ab:03:c9:aa:2f:81:19:b2:
                    4e:b0:b8:ca:42:cc:61:94:46:73:18:d1:14:c5:86:
                    90:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AD:24:F4:C0:50:01:60:73:88:88:7E:2E:86:4A:FB:6E:C1:02:E6
            X509v3 Authority Key Identifier:
                keyid:E8:50:C4:DA:82:9A:A4:AD:90:F6:31:DE:F7:84:C6:04:4D:89:B7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32322d3232203d3e20323636323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:02:dd:c2:e3:30:c7:0d:f8:5c:7a:cc:97:77:65:0d:5d:ff:
         a7:41:00:bd:29:b2:49:6a:0b:2e:0c:76:2e:ac:eb:c7:fb:ff:
         73:b9:91:ba:0c:ed:1a:bf:4f:be:46:71:d3:c5:06:19:db:e8:
         4b:61:c4:44:1b:a2:55:e3:fc:0b:eb:6f:27:d5:1d:c2:af:5a:
         bd:54:18:0f:ae:e9:bc:6d:c5:1e:da:9f:cd:94:a0:1f:6f:05:
         48:0a:e6:5f:9b:1f:5b:51:d1:40:f3:68:a4:c9:78:1d:bd:65:
         50:9d:c7:52:62:43:65:86:a4:41:56:55:16:62:3d:38:47:c5:
         10:d2:22:56:c0:d1:2c:a5:4e:27:fe:bf:40:b6:5f:e4:62:71:
         7f:fc:78:dd:8b:82:af:df:2c:c8:18:cc:26:98:24:41:6f:48:
         2e:42:6d:bb:22:6c:3d:1f:b1:c1:e9:79:e5:4c:49:c9:f4:6e:
         be:97:53:48:13:9d:bd:c0:fa:3a:6d:39:44:0c:a3:3c:1d:25:
         5d:d4:45:e5:0c:18:35:c3:1e:f1:7d:03:47:e1:5e:bb:56:20:
         49:6a:95:12:10:86:42:39:72:9a:41:a3:ed:f7:ed:89:93:e9:
         5d:ca:d3:e6:15:3c:ce:cd:bf:f3:60:35:5f:db:87:df:11:cb:
         35:d1:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:49:14 2025 by rpki-client