Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/34352e3232342e3136302e302f32322d3332203d3e20323637363631.roa
File:                     34352e3232342e3136302e302f32322d3332203d3e20323637363631.roa (raw, json)
Hash identifier:          bX5ID4DAM8VlWKPmv8Uux2ZStU4xrpVPwBp8a3e7Y7g=
Subject key identifier:   AA:7E:14:DF:5A:C3:37:07:F3:A1:DE:08:F3:38:DE:99:90:AA:05:2F
Certificate issuer:       /CN=C6ADB802BCCFCEC151B83466267414CBE6846BE6
Certificate serial:       04B5AC1B11E52068D7F845B743892AE473DD66C0
Authority key identifier: C6:AD:B8:02:BC:CF:CE:C1:51:B8:34:66:26:74:14:CB:E6:84:6B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6ADB802BCCFCEC151B83466267414CBE6846BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/34352e3232342e3136302e302f32322d3332203d3e20323637363631.roa
Signing time:             Fri 01 Mar 2024 17:01:37 +0000
ROA not before:           Fri 01 Mar 2024 16:56:37 +0000
ROA not after:            Fri 28 Feb 2025 17:01:37 +0000
asID:                     267661
IP address blocks:        45.224.160.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b5:ac:1b:11:e5:20:68:d7:f8:45:b7:43:89:2a:e4:73:dd:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6ADB802BCCFCEC151B83466267414CBE6846BE6
        Validity
            Not Before: Mar  1 16:56:37 2024 GMT
            Not After : Feb 28 17:01:37 2025 GMT
        Subject: CN=AA7E14DF5AC33707F3A1DE08F338DE9990AA052F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:fc:ad:7a:d3:bb:30:7a:29:a4:13:74:56:
                    cd:d9:ab:52:f7:57:75:27:22:23:43:db:23:98:a8:
                    d8:b7:72:d7:b2:3c:34:4d:a0:1b:90:e5:47:ba:a5:
                    e5:f9:7b:71:1a:10:61:5c:bc:8a:55:d0:76:81:ad:
                    8d:b1:c7:00:1f:de:75:3f:9f:66:d6:90:3b:bf:e0:
                    47:85:a9:4c:e1:69:db:5b:3f:b7:a0:c2:7b:f2:14:
                    a5:d3:1d:e4:15:44:f5:e7:d1:58:e6:bc:be:dc:d7:
                    3b:43:e1:ee:41:47:68:63:8c:93:ab:90:66:d7:a3:
                    ff:a8:ac:52:36:86:2d:ad:fe:7a:e5:f6:d3:80:08:
                    04:b3:c4:a3:39:50:a6:a6:dc:b3:e9:ca:6d:bf:ae:
                    b8:4d:b0:02:f3:fe:f7:0a:d3:7f:4d:90:40:2f:2c:
                    70:8f:0a:35:2c:2c:66:58:31:c4:0c:88:4b:15:71:
                    3f:2a:a1:55:8b:07:f6:54:fd:a2:be:4d:f5:ea:d0:
                    cc:74:db:a3:c2:6c:9a:cb:78:0f:03:60:09:35:04:
                    20:a5:2c:cd:03:ab:ab:08:e1:e3:09:92:da:65:e8:
                    da:19:3b:e7:56:31:d0:fa:3e:5a:84:4b:1f:a9:18:
                    46:31:95:ca:5a:53:b3:8e:2f:f1:c3:af:23:26:9a:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7E:14:DF:5A:C3:37:07:F3:A1:DE:08:F3:38:DE:99:90:AA:05:2F
            X509v3 Authority Key Identifier:
                keyid:C6:AD:B8:02:BC:CF:CE:C1:51:B8:34:66:26:74:14:CB:E6:84:6B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/C6ADB802BCCFCEC151B83466267414CBE6846BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6ADB802BCCFCEC151B83466267414CBE6846BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E7u6QLVVU5UrHQD7xRxmKRqkW2pkADaRuRjtDRbZQTCS/0/34352e3232342e3136302e302f32322d3332203d3e20323637363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:9c:b2:72:72:b7:d9:2e:93:00:8d:7f:5c:79:47:c2:ac:4b:
         79:f1:76:cb:63:b5:0e:94:1c:54:2f:22:7a:f6:1b:75:c6:33:
         ba:8e:f8:eb:b3:95:cb:a8:13:19:00:17:1a:98:6a:b9:53:d4:
         68:e3:93:a3:5a:11:41:b2:92:ba:c4:86:5f:b2:18:f8:0b:6b:
         9a:0f:e0:ee:16:a6:66:66:43:49:a6:76:c4:4f:b8:ae:d9:58:
         ba:74:19:2f:a1:90:4d:0e:86:1d:fb:a6:f9:18:ed:0a:57:47:
         aa:06:d0:02:fb:0a:f4:c3:2d:4b:62:02:fb:c0:47:90:c0:f1:
         52:58:b7:84:47:83:25:c4:65:a0:ef:4b:00:65:34:38:14:06:
         d0:52:81:c7:95:81:95:fd:7d:1b:fc:ce:81:ef:6a:87:22:55:
         bc:5e:76:6a:cf:cc:13:c9:fb:d7:41:dd:2a:3e:6d:99:8f:d1:
         dc:cf:be:ce:87:a2:54:88:86:65:4c:79:6d:8f:ed:18:94:df:
         34:32:67:ff:37:fa:12:29:14:0e:b1:c4:f3:85:ca:d4:a3:cc:
         68:a9:aa:ae:a0:45:dd:01:98:b8:37:1d:56:ac:9b:90:ed:a2:
         2e:c8:a5:c2:7b:a4:20:d2:f7:10:38:3a:00:24:60:03:87:b5:
         ab:63:27:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:24 2025 by rpki-client