Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32322d3232203d3e20323636393532.roa
File:                     34352e3232352e3235322e302f32322d3232203d3e20323636393532.roa (raw, json)
Hash identifier:          f9thZPJfFNFIPHxk9PWyAydH/izpxxCpFfxJlwqx4tA=
Subject key identifier:   33:B7:19:4E:5F:72:C7:F4:85:1A:00:B8:90:39:0B:16:91:B1:CB:60
Certificate issuer:       /CN=0F44F5750AB24A7D6E844281A724F470994C316E
Certificate serial:       2EB5ED8BB4D1925E849E6BA750F7142A833DA863
Authority key identifier: 0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32322d3232203d3e20323636393532.roa
Signing time:             Fri 27 Dec 2024 02:39:14 +0000
ROA not before:           Fri 27 Dec 2024 02:34:14 +0000
ROA not after:            Fri 26 Dec 2025 02:39:14 +0000
asID:                     266952
IP address blocks:        45.225.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b5:ed:8b:b4:d1:92:5e:84:9e:6b:a7:50:f7:14:2a:83:3d:a8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F44F5750AB24A7D6E844281A724F470994C316E
        Validity
            Not Before: Dec 27 02:34:14 2024 GMT
            Not After : Dec 26 02:39:14 2025 GMT
        Subject: CN=33B7194E5F72C7F4851A00B890390B1691B1CB60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:79:59:4a:b6:8f:e6:2e:71:87:7c:3e:6e:
                    fa:de:65:aa:0a:fa:cb:db:80:f0:0c:74:26:07:8a:
                    cf:7b:c9:4e:53:02:d8:b2:49:6d:3e:49:53:f7:6a:
                    81:5e:44:33:25:fc:53:8b:78:00:f3:e7:ef:f0:1c:
                    84:a7:96:ce:5c:6e:26:de:22:de:e5:af:ee:ae:c2:
                    11:10:a5:71:c4:1a:03:08:c5:ab:1e:3f:c7:5a:ce:
                    d7:4e:32:81:c2:3e:29:9d:4c:e7:a2:d6:46:42:06:
                    db:1f:55:86:3d:fb:d3:e3:da:f0:0e:b1:84:dd:e7:
                    78:4b:d6:18:88:8a:7f:57:ef:62:ff:49:20:51:93:
                    3d:3b:c0:01:28:df:ce:02:58:8f:d4:00:e2:eb:c3:
                    6d:77:15:87:ad:25:94:5d:95:12:dd:50:2e:95:c2:
                    f4:ea:4c:1f:df:05:67:fe:c5:12:4f:69:fa:97:29:
                    d4:56:c5:5f:ab:d9:bd:26:66:a6:d9:a8:83:20:e2:
                    58:3a:c8:7d:a8:b2:7d:63:c7:5c:d2:15:43:f9:67:
                    6f:f2:06:c7:9f:c9:b6:92:e6:42:8e:d4:5e:6a:c2:
                    65:8c:5b:65:6a:54:a3:b7:a9:5b:8c:a3:23:4c:53:
                    dd:46:a4:33:ce:cc:3a:82:38:48:67:d2:d6:c1:28:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B7:19:4E:5F:72:C7:F4:85:1A:00:B8:90:39:0B:16:91:B1:CB:60
            X509v3 Authority Key Identifier:
                keyid:0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/34352e3232352e3235322e302f32322d3232203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:44:e4:b4:96:5f:67:5d:c5:8a:26:a9:a3:d6:95:bd:e8:
         9e:55:76:51:55:d2:be:9b:86:82:ca:1d:f3:22:43:0b:c8:88:
         d3:0e:fd:43:5a:1f:f7:30:42:bc:13:1d:7b:ed:7e:95:1c:3c:
         a1:a9:b0:8a:1c:03:47:63:73:92:f3:0c:e0:72:ab:65:71:3a:
         42:87:b7:be:25:38:79:ba:88:32:ff:c7:91:4f:e3:eb:77:3b:
         fd:4b:55:99:52:10:4b:a1:ec:40:0e:78:65:90:77:a1:54:58:
         ec:40:a6:e6:5f:54:ae:50:15:e5:ce:3a:94:54:58:f0:d3:82:
         30:56:27:b5:c1:92:55:d2:6c:5f:5b:35:90:ab:e3:67:a0:28:
         d3:f7:b5:35:4a:8f:3d:57:03:f0:99:48:b0:6f:0b:de:3d:fd:
         7a:cc:57:6c:9a:55:ed:44:71:26:be:c3:ca:87:d5:bd:3b:4e:
         cc:96:64:65:cb:2a:d8:59:30:c9:e2:60:70:64:c1:31:aa:89:
         34:94:ee:26:d8:42:63:5b:c2:49:06:15:9f:40:4d:57:71:dd:
         c4:cb:c1:5c:f2:d5:c7:1a:bb:19:c1:9f:6d:8a:92:99:55:d2:
         0e:9e:1c:96:8f:8e:39:81:02:67:7a:18:90:62:fb:be:19:48:
         a9:70:f4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:40:56 2025 by rpki-client