Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31362e302f32322d3232203d3e20323636393230.roa
File:                     34352e3232352e31362e302f32322d3232203d3e20323636393230.roa (raw, json)
Hash identifier:          3Bi+cYCtJvTqjLLDZ+TdykuWqtXvguGUylg/hmRtchM=
Subject key identifier:   2B:F4:B6:DD:AE:93:1C:EB:10:D3:8A:B4:F3:73:4D:75:A9:96:2D:37
Certificate issuer:       /CN=F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5
Certificate serial:       5F0E002CF03F45F86CC6E4BE21A23B353C5FAF0B
Authority key identifier: F6:C8:14:5E:EF:98:61:91:6E:BD:BF:83:7D:B6:A8:A7:78:8E:7F:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31362e302f32322d3232203d3e20323636393230.roa
Signing time:             Mon 04 Mar 2024 19:12:19 +0000
ROA not before:           Mon 04 Mar 2024 19:07:19 +0000
ROA not after:            Mon 03 Mar 2025 19:12:19 +0000
asID:                     266920
IP address blocks:        45.225.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0e:00:2c:f0:3f:45:f8:6c:c6:e4:be:21:a2:3b:35:3c:5f:af:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5
        Validity
            Not Before: Mar  4 19:07:19 2024 GMT
            Not After : Mar  3 19:12:19 2025 GMT
        Subject: CN=2BF4B6DDAE931CEB10D38AB4F3734D75A9962D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:2a:e0:27:52:e7:60:4e:70:a0:34:a2:ef:
                    f9:48:b7:02:cd:c3:4c:9b:d9:28:37:b3:3b:cf:e6:
                    f1:eb:7f:99:d0:ab:bc:29:00:a6:44:29:0e:89:f1:
                    2e:4b:b6:f7:ea:15:65:8f:00:e5:a7:04:82:d6:21:
                    38:66:4f:bc:23:3f:69:c6:af:54:7b:d0:57:aa:38:
                    4e:b8:d8:6f:92:f6:d5:a7:5a:82:fd:6f:b0:df:50:
                    eb:29:ab:c8:af:1a:96:0a:68:16:92:a0:02:91:93:
                    fa:85:59:0e:c3:d2:8c:e4:36:33:85:59:73:d1:6f:
                    dd:ff:e7:5e:12:8c:a1:ff:9a:32:e4:80:51:59:e1:
                    ec:56:4f:bb:19:3b:43:56:20:c4:41:06:36:1e:9a:
                    0e:46:9d:e1:c4:10:a1:30:bd:9d:d2:f4:55:bc:22:
                    73:1e:cd:ec:d2:3d:6a:24:44:bc:3a:04:c6:36:9e:
                    92:58:67:e0:d2:cb:8a:b4:da:48:28:27:54:7b:a6:
                    81:e7:0c:50:5c:d8:ff:d8:91:d7:35:7e:7f:73:30:
                    bc:f2:be:19:ec:46:52:7d:fe:af:e6:1b:db:31:78:
                    0b:a6:49:a1:39:0d:77:8f:98:d9:0e:9f:af:e6:b1:
                    d5:3d:d4:d7:7a:df:16:35:ba:9e:41:8b:bd:5a:f6:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F4:B6:DD:AE:93:1C:EB:10:D3:8A:B4:F3:73:4D:75:A9:96:2D:37
            X509v3 Authority Key Identifier:
                keyid:F6:C8:14:5E:EF:98:61:91:6E:BD:BF:83:7D:B6:A8:A7:78:8E:7F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31362e302f32322d3232203d3e20323636393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:99:36:2e:36:f5:81:dd:dc:97:39:50:6c:d0:7f:e9:33:80:
         8d:55:5f:3a:83:9b:b6:b0:e2:17:2a:73:47:6a:04:67:3b:b5:
         ae:e9:89:e1:f5:ce:1c:b9:12:8a:38:e5:4e:e4:3a:ca:a8:82:
         e1:9c:6c:6c:2a:4e:95:90:d2:63:2f:ce:b0:27:60:e1:8e:ec:
         28:87:a5:69:8b:f2:7e:ee:b0:95:f5:35:7f:89:9b:13:2a:f6:
         4a:5a:0c:68:da:d4:b9:20:58:e6:d9:e1:74:46:c4:de:99:d8:
         3b:da:e8:bc:2e:3a:b3:ba:23:aa:eb:89:00:e7:93:2d:43:8a:
         4a:f1:49:ed:8c:61:48:25:ba:93:b3:b5:d8:9b:dd:c1:93:14:
         4b:fe:d9:8e:8c:fb:c0:e0:ab:b8:26:ee:91:26:c5:35:4f:3d:
         73:b4:ea:fd:e5:2c:4b:fe:8f:09:8a:05:2f:42:ab:e3:e3:70:
         76:b0:1c:83:12:3b:de:5d:cf:56:c0:62:64:26:f5:a1:f6:b5:
         fe:18:5b:9b:2d:c2:ad:79:0d:ea:09:40:8c:78:65:cf:34:a1:
         92:09:99:be:ce:ab:35:33:1a:99:4b:e5:25:44:22:85:f9:3a:
         7f:a9:a3:34:11:5c:6c:2a:2d:b3:6e:83:4a:46:af:ab:8b:99:
         63:79:f1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:16:26 2025 by rpki-client