Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31382e302f32342d3234203d3e20323636393230.roa
File:                     34352e3232352e31382e302f32342d3234203d3e20323636393230.roa (raw, json)
Hash identifier:          TpDjyjMYBshBsxtUyu/EkgTyOf6g2ezPlqnQpT4uTxo=
Subject key identifier:   73:E8:4A:9C:4F:E0:24:88:96:A1:8A:71:8C:D9:BE:46:EC:50:23:B7
Certificate issuer:       /CN=F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5
Certificate serial:       22021BFB5523F3BB3E26B43F4E2EB36507787F66
Authority key identifier: F6:C8:14:5E:EF:98:61:91:6E:BD:BF:83:7D:B6:A8:A7:78:8E:7F:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31382e302f32342d3234203d3e20323636393230.roa
Signing time:             Mon 04 Mar 2024 19:12:22 +0000
ROA not before:           Mon 04 Mar 2024 19:07:22 +0000
ROA not after:            Mon 03 Mar 2025 19:12:22 +0000
asID:                     266920
IP address blocks:        45.225.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:02:1b:fb:55:23:f3:bb:3e:26:b4:3f:4e:2e:b3:65:07:78:7f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5
        Validity
            Not Before: Mar  4 19:07:22 2024 GMT
            Not After : Mar  3 19:12:22 2025 GMT
        Subject: CN=73E84A9C4FE0248896A18A718CD9BE46EC5023B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:8c:ee:63:cf:77:22:f3:0f:45:7e:94:35:
                    3e:f4:60:9e:e6:5b:77:e6:8d:bb:32:05:6f:4c:2a:
                    23:9d:f1:97:4f:2e:20:9f:71:ab:73:3f:d9:21:5e:
                    7a:b4:25:1e:f9:91:b2:fd:5f:d2:ac:ca:a9:30:28:
                    4e:44:93:34:63:c7:a7:4a:58:01:01:06:3d:b8:87:
                    10:17:31:5c:a9:49:92:be:1d:13:23:e9:7d:a9:66:
                    3f:f7:18:f3:98:fe:80:40:62:7e:a3:0a:67:d8:4a:
                    22:59:16:40:70:ce:87:a9:87:87:43:97:c5:58:ca:
                    e9:f9:88:66:ca:3e:eb:af:a0:27:88:fb:83:da:3c:
                    09:2e:d0:95:ee:e1:08:44:6d:c6:fb:cd:f6:25:bc:
                    fb:61:4c:c9:f2:ee:29:c4:24:24:76:c1:00:54:88:
                    05:d1:f7:1c:e7:a2:0e:a4:b0:69:5f:d7:1c:77:a2:
                    d1:4f:60:ef:16:20:82:06:aa:d9:a4:28:f5:73:d9:
                    c2:06:1e:c2:19:ca:97:80:7c:42:e7:04:71:de:38:
                    74:dd:b2:26:ba:9b:d0:da:3b:fc:d0:3c:e7:71:d5:
                    1e:59:56:72:43:fe:46:3d:ab:9e:47:6f:77:2e:15:
                    72:69:ff:dd:65:b0:ba:0c:2d:37:55:97:0d:2a:72:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E8:4A:9C:4F:E0:24:88:96:A1:8A:71:8C:D9:BE:46:EC:50:23:B7
            X509v3 Authority Key Identifier:
                keyid:F6:C8:14:5E:EF:98:61:91:6E:BD:BF:83:7D:B6:A8:A7:78:8E:7F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31382e302f32342d3234203d3e20323636393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:20:a2:20:1a:6b:03:93:28:bb:16:08:8b:e2:56:0a:7f:b8:
         72:b4:2e:aa:92:20:bd:27:37:73:41:de:20:0a:3c:61:44:d9:
         e5:34:9d:98:91:4a:be:0c:52:17:db:a4:0b:63:ef:10:94:14:
         09:5e:c1:7c:40:b9:6c:6f:a4:b4:39:74:5e:87:29:b0:25:d4:
         dd:bc:c9:e3:d8:83:16:bd:c5:2e:37:d0:19:0d:53:00:1a:6d:
         d4:37:f3:93:0c:a3:9a:29:b2:38:0a:01:5a:a8:85:b1:0a:fd:
         63:2a:b0:7b:fd:0a:f2:73:7d:aa:1a:e9:a4:c7:3c:29:a7:7e:
         84:ce:df:1e:c5:5d:f7:74:bc:20:09:25:46:40:8e:5d:1c:0d:
         7d:c4:53:a0:f7:a8:6b:c7:82:67:70:2c:f2:e7:14:87:f1:5e:
         21:f8:e4:d9:54:02:38:40:de:4c:34:3f:79:ba:aa:cc:97:99:
         9b:1f:73:5c:79:25:40:8f:ae:51:a4:ed:b7:10:e6:41:2e:6d:
         49:85:fb:cd:31:df:0e:e6:9e:a6:03:26:46:c5:4c:f9:63:10:
         63:1f:c4:f4:7d:b3:7a:fc:a0:5e:75:66:fb:6f:67:ed:2c:4c:
         5f:93:a4:25:30:35:71:f4:b8:67:d7:46:a1:8a:d2:18:c0:b3:
         ad:38:0c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:16:20 2025 by rpki-client