Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/34352e3136322e35362e302f32322d3332203d3e20323638353033.roa
File:                     34352e3136322e35362e302f32322d3332203d3e20323638353033.roa (raw, json)
Hash identifier:          TMHDzXbapuflG1u3YCZLYuDSPKlpGhaf9LcaKYemtSA=
Subject key identifier:   B6:EE:52:89:74:6B:27:4D:43:42:BF:D8:A4:DE:9B:C6:D2:D1:87:46
Certificate issuer:       /CN=18DCCEA5C6BF437DCFFE2889017BF3DFD253EFBE
Certificate serial:       69776D81E617BBEBC7AC3AB3396CB2987DE316F7
Authority key identifier: 18:DC:CE:A5:C6:BF:43:7D:CF:FE:28:89:01:7B:F3:DF:D2:53:EF:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18DCCEA5C6BF437DCFFE2889017BF3DFD253EFBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/34352e3136322e35362e302f32322d3332203d3e20323638353033.roa
Signing time:             Mon 09 Dec 2024 17:57:28 +0000
ROA not before:           Mon 09 Dec 2024 17:52:28 +0000
ROA not after:            Mon 08 Dec 2025 17:57:28 +0000
asID:                     268503
IP address blocks:        45.162.56.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:77:6d:81:e6:17:bb:eb:c7:ac:3a:b3:39:6c:b2:98:7d:e3:16:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18DCCEA5C6BF437DCFFE2889017BF3DFD253EFBE
        Validity
            Not Before: Dec  9 17:52:28 2024 GMT
            Not After : Dec  8 17:57:28 2025 GMT
        Subject: CN=B6EE5289746B274D4342BFD8A4DE9BC6D2D18746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:35:c7:e0:8b:75:8d:20:c5:ad:9f:09:05:
                    c3:94:78:aa:41:3a:b3:c0:d9:fc:d5:2a:9a:6d:5a:
                    d3:f1:df:91:9b:f2:30:f2:81:b3:30:45:2e:46:68:
                    e2:86:05:d2:1e:2a:52:8b:ba:19:1c:68:58:a4:26:
                    d9:2c:72:ca:6b:7e:f4:cc:a5:3b:a6:e2:d1:bb:41:
                    4d:48:d1:20:e4:6e:5c:e1:83:2f:d2:4b:57:fd:ba:
                    da:18:a6:d5:42:bb:f6:25:c5:f3:4b:96:ce:b4:90:
                    51:ea:93:c0:f5:be:e5:f1:20:6c:b2:64:c7:07:ab:
                    5b:a5:9e:b8:1a:21:de:46:5f:80:ce:51:41:43:e9:
                    d3:12:f3:1f:5c:20:49:cc:e7:c7:34:52:32:53:2b:
                    2b:68:0e:b3:9a:bf:cf:2e:e1:12:a0:10:f9:5b:05:
                    be:7d:42:44:b4:81:2c:f0:d8:d8:be:3d:f4:35:a7:
                    69:2c:66:12:20:07:a8:45:da:df:b5:22:c1:c3:a9:
                    e9:41:33:5e:f6:6a:ab:21:1f:61:c6:d9:3c:87:a0:
                    c0:d8:28:61:d6:27:3f:77:1b:bf:cb:10:21:af:16:
                    56:f2:c5:81:30:29:87:4a:d5:ed:29:ea:f4:49:f7:
                    7f:1d:17:2f:c8:e5:f7:b7:0f:e0:a4:85:0f:b7:96:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EE:52:89:74:6B:27:4D:43:42:BF:D8:A4:DE:9B:C6:D2:D1:87:46
            X509v3 Authority Key Identifier:
                keyid:18:DC:CE:A5:C6:BF:43:7D:CF:FE:28:89:01:7B:F3:DF:D2:53:EF:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/18DCCEA5C6BF437DCFFE2889017BF3DFD253EFBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18DCCEA5C6BF437DCFFE2889017BF3DFD253EFBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/34352e3136322e35362e302f32322d3332203d3e20323638353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:2d:7b:34:b7:b8:a5:99:e7:6b:e3:37:1f:ea:b2:40:35:
         9f:94:89:b0:9c:f3:11:51:e7:5a:88:eb:02:97:0b:d7:13:f0:
         57:6b:1a:72:c1:f2:f9:86:2d:99:58:85:4e:1c:39:ce:0c:d4:
         c7:bb:25:d2:0b:08:71:22:22:c6:e1:18:64:93:6f:94:bc:5a:
         37:23:19:2c:12:92:69:34:14:34:d1:2e:12:cf:bd:0c:3d:ab:
         51:60:6d:16:62:39:c0:6f:82:d6:dc:82:6b:a3:13:2e:c7:38:
         50:95:ad:66:0c:aa:01:78:51:c0:f1:f1:33:bf:60:fe:b0:66:
         e1:8f:00:b7:f7:61:d5:51:6b:89:33:6c:6a:94:db:d7:a3:5b:
         41:67:9b:c9:51:0b:59:63:4d:c5:cd:82:58:c9:77:96:b6:32:
         5a:82:9e:b4:c7:73:6d:62:43:f7:67:da:29:47:01:b9:da:17:
         f6:22:47:ef:30:85:d8:69:90:7b:23:7c:89:15:6c:8b:2d:b5:
         4a:84:08:58:6f:d9:b8:8b:ad:2f:c8:5d:90:f8:08:e8:cd:30:
         a9:f1:e8:55:7d:d4:d0:23:39:39:fb:79:94:cc:8e:0b:55:13:
         47:b9:73:1f:6d:04:bb:07:72:6b:52:9e:81:29:62:5a:22:33:
         3a:9e:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:06:52 2025 by rpki-client