Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/34352e3233332e35362e302f32322d3234203d3e20323637323839.roa
File:                     34352e3233332e35362e302f32322d3234203d3e20323637323839.roa (raw, json)
Hash identifier:          fV0eJbjm3TJ4QtJ3pZj8BM+jE3Im9d7+HeHYW4NKdeI=
Subject key identifier:   66:F1:30:5E:9C:38:37:06:A0:42:A7:10:48:C0:0C:7D:59:6E:17:5E
Certificate issuer:       /CN=21690242975CC26690E3137226394CCBDBDBCFC8
Certificate serial:       52C6556645895D138EC59D00C3386E1B7DB29538
Authority key identifier: 21:69:02:42:97:5C:C2:66:90:E3:13:72:26:39:4C:CB:DB:DB:CF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21690242975CC26690E3137226394CCBDBDBCFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/34352e3233332e35362e302f32322d3234203d3e20323637323839.roa
Signing time:             Tue 25 Mar 2025 20:02:26 +0000
ROA not before:           Tue 25 Mar 2025 19:57:26 +0000
ROA not after:            Tue 24 Mar 2026 20:02:26 +0000
asID:                     267289
IP address blocks:        45.233.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c6:55:66:45:89:5d:13:8e:c5:9d:00:c3:38:6e:1b:7d:b2:95:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21690242975CC26690E3137226394CCBDBDBCFC8
        Validity
            Not Before: Mar 25 19:57:26 2025 GMT
            Not After : Mar 24 20:02:26 2026 GMT
        Subject: CN=66F1305E9C383706A042A71048C00C7D596E175E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:c0:9f:1b:a9:e0:c9:d8:08:7a:0d:28:58:
                    e8:e3:d6:bd:f0:ad:92:cb:13:47:6a:9e:91:92:16:
                    a3:f3:bd:55:49:4d:f3:d9:86:81:01:a9:23:e7:56:
                    68:df:39:5f:86:5d:60:8c:fa:66:fd:7f:47:26:97:
                    6c:68:f9:53:8b:9b:90:c1:f2:5d:08:11:7d:fc:d6:
                    aa:c8:e1:41:d2:47:ca:dd:94:86:8a:25:54:80:eb:
                    7a:51:39:aa:28:58:16:79:06:62:cd:6c:e1:58:6d:
                    6d:ad:ff:97:95:35:9b:95:fd:f9:ac:82:4e:b3:79:
                    6c:10:c2:58:a2:46:72:6f:fd:25:27:bb:0c:7e:34:
                    24:30:2a:b2:f7:11:0d:53:38:e8:c8:f2:bd:d5:3e:
                    31:6d:47:b0:74:55:7a:03:c5:af:02:b5:07:34:17:
                    ee:25:1a:5c:bd:6a:a1:91:7d:c9:c7:6f:1c:0f:c4:
                    42:06:39:1f:75:d1:c1:f3:08:bb:e3:aa:8b:59:07:
                    7d:0f:1a:09:0f:48:7e:60:f3:65:03:0a:8b:5a:6f:
                    c6:66:4a:b0:a9:2b:46:3d:39:3f:3e:28:01:02:21:
                    bc:72:89:ef:fe:50:ce:7c:a3:64:19:39:18:a8:fc:
                    0a:c0:23:9d:ac:2d:42:c3:e0:61:67:ad:ce:55:6a:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F1:30:5E:9C:38:37:06:A0:42:A7:10:48:C0:0C:7D:59:6E:17:5E
            X509v3 Authority Key Identifier:
                keyid:21:69:02:42:97:5C:C2:66:90:E3:13:72:26:39:4C:CB:DB:DB:CF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/21690242975CC26690E3137226394CCBDBDBCFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21690242975CC26690E3137226394CCBDBDBCFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/34352e3233332e35362e302f32322d3234203d3e20323637323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:0e:72:fb:d0:3b:31:23:f6:9d:a6:75:91:15:a6:1b:1f:
         0c:cb:b9:ff:fd:f6:ff:f4:ac:a7:a0:88:f1:8f:d9:be:ee:f1:
         03:7a:97:6a:41:e0:8d:f0:dd:69:3d:64:77:c0:34:38:82:cf:
         0b:34:5a:d9:e5:eb:4c:34:51:91:9d:98:ad:af:5a:b0:97:45:
         e5:79:6d:88:90:06:ed:08:de:42:d4:4c:b0:01:ec:da:1b:8e:
         cc:80:bb:5a:23:28:af:82:c1:84:d9:15:4e:00:54:52:34:6e:
         7b:22:26:c2:5d:b7:88:4c:1b:e6:8b:43:67:38:9f:fe:2f:5f:
         0c:2f:a3:e5:7c:83:b7:45:c6:2d:26:dd:d2:84:bc:64:f8:10:
         af:64:ae:b4:c1:50:fa:e3:43:38:d5:a7:eb:70:4e:f4:fa:7a:
         4a:ab:b1:8d:70:37:aa:63:64:4a:eb:7d:98:bd:81:93:15:a1:
         e6:9e:d8:ba:ed:a9:79:eb:24:9c:0f:f5:e9:8c:65:27:da:99:
         56:74:f7:ee:ab:9b:f0:2a:c4:d7:ec:9c:ee:e9:32:d9:c1:78:
         88:4e:16:db:7e:eb:47:c9:df:21:27:1f:d7:50:c2:34:48:de:
         5d:55:6c:98:26:9d:16:0c:11:ff:fe:22:6d:70:21:16:ba:50:
         bc:56:6f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:35 2025 by rpki-client