Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33362e302f32342d3234203d3e20323636393231.roa
File:                     34352e3232352e33362e302f32342d3234203d3e20323636393231.roa (raw, json)
Hash identifier:          mFT/nC1sQsF9K4P+uMNbR63dWoZI+388SQjpxgx/YPs=
Subject key identifier:   68:46:DE:DA:6D:65:07:DC:2B:D9:D3:E6:92:02:53:B1:85:63:F3:CD
Certificate issuer:       /CN=5682495E51D353D705DB42C2671D958F655DB83F
Certificate serial:       5AA1374A5CC8F3B3B9293F2E1BCF9AD38374A31B
Authority key identifier: 56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33362e302f32342d3234203d3e20323636393231.roa
Signing time:             Tue 09 Jul 2024 14:15:28 +0000
ROA not before:           Tue 09 Jul 2024 14:10:28 +0000
ROA not after:            Tue 08 Jul 2025 14:15:28 +0000
asID:                     266921
IP address blocks:        45.225.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a1:37:4a:5c:c8:f3:b3:b9:29:3f:2e:1b:cf:9a:d3:83:74:a3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682495E51D353D705DB42C2671D958F655DB83F
        Validity
            Not Before: Jul  9 14:10:28 2024 GMT
            Not After : Jul  8 14:15:28 2025 GMT
        Subject: CN=6846DEDA6D6507DC2BD9D3E6920253B18563F3CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:a6:54:f0:cc:5d:50:9f:cb:5e:0b:ea:6f:
                    38:47:7b:5a:15:13:29:1c:26:b9:23:8f:f6:31:a0:
                    6b:61:81:f6:57:2b:8c:87:da:2a:ac:70:5c:10:8b:
                    2e:84:2c:4b:67:4f:14:e5:d2:a8:75:1a:2e:4f:c5:
                    3a:2c:fa:47:c7:9d:65:fb:f7:88:c9:87:79:35:92:
                    22:c2:a8:68:6d:9c:d9:bb:75:98:76:65:e7:e1:55:
                    89:da:ec:b7:84:18:38:6f:56:a3:e6:73:17:b8:42:
                    3e:a4:16:15:bb:16:ce:2f:d2:9c:b4:eb:21:8b:45:
                    b1:93:53:40:93:c7:45:fe:17:63:5d:6e:ea:3b:0e:
                    f3:27:f3:76:db:67:0f:61:f0:80:f8:0a:80:a1:8d:
                    56:37:dc:73:81:b2:27:3a:72:1b:66:94:b4:ae:9f:
                    a5:b9:b2:5a:c7:d9:28:d6:69:cf:b8:4e:3d:b1:7c:
                    50:e8:46:8f:bc:51:db:b1:26:61:17:37:70:a2:37:
                    e1:2e:92:72:08:39:98:5e:d0:ae:ad:46:23:a9:a7:
                    66:5a:18:46:60:25:b1:b0:a3:8d:fb:01:36:e0:db:
                    0b:c3:ea:b1:29:37:80:fd:b3:8d:20:38:31:ac:d9:
                    98:c5:0d:d8:1a:c7:b5:45:c7:0b:76:29:a5:dc:f9:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:46:DE:DA:6D:65:07:DC:2B:D9:D3:E6:92:02:53:B1:85:63:F3:CD
            X509v3 Authority Key Identifier:
                keyid:56:82:49:5E:51:D3:53:D7:05:DB:42:C2:67:1D:95:8F:65:5D:B8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/5682495E51D353D705DB42C2671D958F655DB83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5682495E51D353D705DB42C2671D958F655DB83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/34352e3232352e33362e302f32342d3234203d3e20323636393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:0e:6b:45:2b:79:24:b3:fb:1a:7c:35:11:7d:43:a8:ee:
         0b:dc:45:a0:8b:3e:84:4a:7e:f6:9f:70:13:21:be:4f:9b:59:
         d9:cc:0d:f4:ff:96:fe:f8:d6:15:e4:68:c0:bb:ba:e3:d7:a7:
         5c:8d:8f:d3:5d:84:d0:2c:2f:c2:42:9c:27:f2:7e:7f:42:0f:
         89:ad:d8:21:aa:1a:1d:b4:fb:b1:e7:36:c5:16:d3:bd:dd:3a:
         f3:e2:e8:a5:fa:d9:cd:4a:6e:34:3f:99:3e:c8:89:ef:e4:5d:
         ff:5e:f6:a2:c8:c7:41:08:db:0a:4f:6d:65:16:92:ef:6c:55:
         ed:66:ac:03:2e:0f:d1:8a:84:63:4c:16:22:68:bd:4f:81:e1:
         cf:7d:4b:49:ac:56:97:58:ee:5c:54:27:6c:b3:2f:26:71:a9:
         2a:00:54:f4:40:04:38:1f:fe:9a:d1:c1:fb:f1:48:3d:cd:e4:
         82:de:b8:56:68:be:66:85:00:2f:cf:9c:87:05:f9:7f:51:7d:
         ef:a2:eb:43:41:68:cc:07:41:83:00:b2:d9:e5:f2:e6:94:a6:
         30:1a:94:5f:14:2f:0c:49:f8:b6:cf:34:de:ac:91:c7:b7:1a:
         af:51:b7:b0:53:1e:36:1f:cc:e8:05:c1:da:1e:ee:de:60:0c:
         75:3d:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:24 2025 by rpki-client