Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31392e302f32342d3234203d3e20323636393230.roa
File:                     34352e3232352e31392e302f32342d3234203d3e20323636393230.roa (raw, json)
Hash identifier:          Q08caC7kloQyemL0mDZTh0KJmnCgczF8OMWppccofAE=
Subject key identifier:   3F:B1:E7:CA:EE:56:21:8B:5E:04:4D:A5:6C:28:3F:79:42:1C:7D:38
Certificate issuer:       /CN=F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5
Certificate serial:       5F5B786ED9760313E39EE1DDB66FD36D6D2C62F4
Authority key identifier: F6:C8:14:5E:EF:98:61:91:6E:BD:BF:83:7D:B6:A8:A7:78:8E:7F:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31392e302f32342d3234203d3e20323636393230.roa
Signing time:             Mon 04 Mar 2024 19:12:25 +0000
ROA not before:           Mon 04 Mar 2024 19:07:25 +0000
ROA not after:            Mon 03 Mar 2025 19:12:25 +0000
asID:                     266920
IP address blocks:        45.225.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5b:78:6e:d9:76:03:13:e3:9e:e1:dd:b6:6f:d3:6d:6d:2c:62:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5
        Validity
            Not Before: Mar  4 19:07:25 2024 GMT
            Not After : Mar  3 19:12:25 2025 GMT
        Subject: CN=3FB1E7CAEE56218B5E044DA56C283F79421C7D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:95:b5:dd:6e:9f:ed:7f:0c:9f:60:03:07:9a:
                    39:5f:f9:13:bf:26:4c:1b:a8:d9:c5:51:35:c2:ec:
                    29:94:80:58:cd:14:6d:93:d4:b9:70:61:24:df:6c:
                    81:3f:bb:e4:7f:61:41:c6:92:74:e8:33:ea:f0:e4:
                    45:a7:dd:c3:63:1f:f7:eb:7d:36:0b:e2:e2:69:26:
                    c7:95:5e:6e:ce:19:51:f4:56:3f:80:c9:af:63:f7:
                    9b:13:e7:b1:d5:93:96:fb:b4:4c:3a:b0:76:59:78:
                    33:cb:2b:d7:5f:d2:e0:3b:8c:30:89:4b:5f:8f:11:
                    8e:89:c0:45:62:e1:38:5f:20:f1:a4:56:c9:f4:2c:
                    96:dd:8c:8e:35:3e:8e:58:19:e8:3b:c2:8a:62:df:
                    7a:86:82:80:60:7a:4d:17:4c:42:8b:e1:a4:48:7e:
                    c8:e4:c9:55:ce:b7:cf:34:ed:84:2c:24:3c:fd:01:
                    95:52:75:64:01:3e:b8:99:79:b2:a0:3a:80:0c:96:
                    fa:5d:49:11:76:ba:3c:10:37:36:18:ca:b5:e9:4a:
                    24:36:82:c2:39:3f:3c:78:3f:bb:9c:e1:72:9d:e8:
                    5b:14:b4:51:1a:76:a5:a1:3e:ea:84:39:e6:11:2a:
                    c2:59:fc:37:c9:98:3a:64:cb:9a:59:b9:36:72:58:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B1:E7:CA:EE:56:21:8B:5E:04:4D:A5:6C:28:3F:79:42:1C:7D:38
            X509v3 Authority Key Identifier:
                keyid:F6:C8:14:5E:EF:98:61:91:6E:BD:BF:83:7D:B6:A8:A7:78:8E:7F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6C8145EEF9861916EBDBF837DB6A8A7788E7FF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/0/34352e3232352e31392e302f32342d3234203d3e20323636393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:92:13:ca:77:b1:66:24:b8:8a:35:cf:8d:ac:46:65:f1:3e:
         e3:46:99:c2:65:71:98:07:b1:e9:f9:a5:60:ef:e3:b6:dd:d2:
         44:1b:c0:bc:ed:3d:af:83:e9:92:11:5f:f0:1f:3c:51:3e:15:
         e1:a9:2c:1e:1f:95:0b:97:07:5b:02:a7:3d:ac:b9:d4:03:ef:
         99:3f:f4:5a:bd:59:ef:58:bf:b6:ad:29:03:4d:09:75:a2:f0:
         ba:e4:bf:55:94:c7:96:37:d9:c1:bd:ed:54:41:f8:d1:24:5a:
         32:38:bd:cd:7e:85:dd:d4:59:24:21:c6:02:6c:0c:e6:87:c0:
         d6:39:61:94:25:f6:c0:03:9b:84:42:9f:33:b0:bb:0b:8e:cb:
         26:84:2f:d4:6c:f1:83:a4:a7:c6:0a:c8:a6:ec:c7:b0:db:aa:
         9b:2a:ae:f4:8e:42:f5:00:38:00:5e:01:ad:f6:43:25:cb:4d:
         cd:cf:7b:7c:d8:e0:87:01:1f:a5:e2:a5:69:f6:5f:ba:be:8e:
         d1:f4:98:65:74:92:f2:7f:f9:3e:06:d5:4c:74:ff:00:ce:0a:
         24:5a:e9:1e:32:6a:ff:21:a6:76:2e:af:28:9c:80:4f:d8:a2:
         bd:f6:59:75:a0:75:42:72:41:40:98:19:23:01:81:2f:2d:2d:
         76:00:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:16:14 2025 by rpki-client