Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/1/34352e362e3132382e302f32322d3234203d3e20323636313335.roa
File:                     34352e362e3132382e302f32322d3234203d3e20323636313335.roa (raw, json)
Hash identifier:          t93riZKdLZqseALUCVFs/ACjibbmzF78ycd2Dyx63oQ=
Subject key identifier:   58:FA:A7:23:4C:4D:3C:F9:4F:83:68:1C:71:FF:BA:56:70:D5:42:59
Certificate issuer:       /CN=2F6553DA4EC5A8697B4CD995957F729F58F51C9A
Certificate serial:       3704F5D5293BE11E9FD5A5097A0922D5B4C445CD
Authority key identifier: 2F:65:53:DA:4E:C5:A8:69:7B:4C:D9:95:95:7F:72:9F:58:F5:1C:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6553DA4EC5A8697B4CD995957F729F58F51C9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/1/34352e362e3132382e302f32322d3234203d3e20323636313335.roa
Signing time:             Thu 06 Mar 2025 14:14:39 +0000
ROA not before:           Thu 06 Mar 2025 14:09:39 +0000
ROA not after:            Thu 05 Mar 2026 14:14:39 +0000
asID:                     266135
IP address blocks:        45.6.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:04:f5:d5:29:3b:e1:1e:9f:d5:a5:09:7a:09:22:d5:b4:c4:45:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F6553DA4EC5A8697B4CD995957F729F58F51C9A
        Validity
            Not Before: Mar  6 14:09:39 2025 GMT
            Not After : Mar  5 14:14:39 2026 GMT
        Subject: CN=58FAA7234C4D3CF94F83681C71FFBA5670D54259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:94:2a:d0:66:7f:29:20:ad:9b:23:f2:c8:
                    1a:dc:91:34:79:35:db:b6:db:49:fd:17:1a:b4:a7:
                    53:69:c0:4e:05:94:cf:65:6b:81:eb:82:4c:91:29:
                    3e:2a:8e:e5:77:46:67:47:6f:22:3f:96:f5:14:14:
                    82:2e:b2:d7:26:10:1b:a6:eb:b2:1c:86:e0:21:cd:
                    6c:24:c9:ba:db:21:c8:4c:50:e9:fb:d2:12:fa:57:
                    12:2f:42:97:6a:d3:50:1a:4d:ce:29:4b:94:a4:84:
                    c1:b3:3a:41:38:25:80:4c:44:23:f6:20:fd:f1:de:
                    50:09:f3:94:23:08:fe:20:c3:f7:80:53:1f:b9:77:
                    46:72:02:90:8d:97:e7:06:0e:6e:1d:de:5e:d7:32:
                    79:33:35:a6:d9:4d:7f:c9:3e:66:d8:55:17:7c:08:
                    61:0e:5a:23:a9:7e:d1:61:fd:af:a6:ea:f8:05:9c:
                    a9:e2:fc:fd:d4:55:f7:1b:a9:4f:6f:6d:0d:46:17:
                    39:f1:72:a7:29:e8:c0:69:33:91:25:48:18:76:99:
                    ed:c7:35:fc:2c:62:55:00:88:4a:60:db:fe:23:25:
                    e5:83:00:5e:ba:e7:ac:e3:51:c0:02:b4:d4:d2:58:
                    3c:e0:51:d2:c8:8a:dd:82:55:28:1a:b0:ab:b4:ab:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FA:A7:23:4C:4D:3C:F9:4F:83:68:1C:71:FF:BA:56:70:D5:42:59
            X509v3 Authority Key Identifier:
                keyid:2F:65:53:DA:4E:C5:A8:69:7B:4C:D9:95:95:7F:72:9F:58:F5:1C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/1/2F6553DA4EC5A8697B4CD995957F729F58F51C9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6553DA4EC5A8697B4CD995957F729F58F51C9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/1/34352e362e3132382e302f32322d3234203d3e20323636313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:a7:7c:19:10:4e:34:eb:70:51:27:d9:cf:c9:4c:20:d8:
         5d:3d:83:94:3a:7c:7d:f6:53:1a:8e:37:9a:1d:15:d1:7f:98:
         89:96:1c:26:82:0a:7b:08:83:79:3f:f2:ed:23:f0:cb:b4:60:
         33:c5:86:2b:ae:1b:c5:80:26:a0:ad:c0:d4:bc:ba:51:60:7e:
         b5:07:aa:4e:90:32:ef:7d:ea:f1:e7:f8:c4:41:da:3a:ee:28:
         d6:27:5c:e4:db:26:a9:65:43:dd:93:54:12:c8:85:69:2b:1f:
         e9:91:01:3b:8a:b6:30:39:d5:17:e4:cc:56:68:99:09:35:eb:
         2a:1f:ea:ff:16:7a:e7:d9:16:65:50:2d:45:b2:9c:f5:bf:ef:
         9e:01:96:98:90:f5:ae:ba:2d:a8:24:6e:a0:80:29:ba:4a:93:
         84:32:2b:6c:8e:67:d2:52:79:5d:1a:da:53:75:0e:09:3a:7b:
         1a:bd:ed:8e:7f:00:8f:67:e5:7d:b2:ef:ca:bf:4c:4b:87:1d:
         c4:53:c7:90:8a:19:00:81:db:65:fb:6f:e9:a6:ff:8c:95:05:
         c0:33:05:58:37:5a:1c:49:6e:cb:79:91:67:92:d5:a5:75:7e:
         60:45:7d:14:4b:b9:fd:39:50:f8:2c:68:96:af:5f:a8:3a:b4:
         39:54:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:04:55 2025 by rpki-client