Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32322d3232203d3e20323638323533.roa
File:                     34352e3233362e3234382e302f32322d3232203d3e20323638323533.roa (raw, json)
Hash identifier:          u1pE8NjIBeHzI5gXDQbs8woaOantgwe7lmVBisb0ucg=
Subject key identifier:   38:E3:AC:43:23:4F:03:8C:11:B0:5A:BE:33:78:D4:E6:C4:9C:5B:74
Certificate issuer:       /CN=5554B6ED4969AC940F590D2A6010C4406D254087
Certificate serial:       5BB7E3FDEE9C47BD4E1631AF7F92EF4C14D3AB2F
Authority key identifier: 55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32322d3232203d3e20323638323533.roa
Signing time:             Thu 09 Jan 2025 17:47:09 +0000
ROA not before:           Thu 09 Jan 2025 17:42:09 +0000
ROA not after:            Thu 08 Jan 2026 17:47:09 +0000
asID:                     268253
IP address blocks:        45.236.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b7:e3:fd:ee:9c:47:bd:4e:16:31:af:7f:92:ef:4c:14:d3:ab:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5554B6ED4969AC940F590D2A6010C4406D254087
        Validity
            Not Before: Jan  9 17:42:09 2025 GMT
            Not After : Jan  8 17:47:09 2026 GMT
        Subject: CN=38E3AC43234F038C11B05ABE3378D4E6C49C5B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:11:bd:e3:50:54:de:8f:3d:0d:ae:ed:c3:
                    a6:52:d3:8f:05:46:be:e1:3b:4b:d5:90:fd:e9:74:
                    50:fc:62:4b:57:9e:ee:ea:00:f0:6f:16:10:b0:be:
                    65:c3:35:87:51:ef:fd:a9:db:7a:fc:27:ff:6c:c2:
                    90:fc:c9:69:09:04:23:e2:e6:eb:d3:af:7f:be:e9:
                    24:f9:17:05:03:1f:55:f0:2a:19:8b:74:c6:41:85:
                    e3:c0:ed:6a:4a:c9:9f:61:89:cf:c0:60:f6:01:32:
                    02:bb:dd:8f:bd:5e:18:a4:c2:cc:35:99:d3:07:67:
                    6f:ba:8b:dc:51:60:1d:08:21:93:a1:f8:95:7d:a8:
                    55:ce:0f:84:1d:4c:18:fa:ce:dd:bd:a7:91:93:b6:
                    c2:4f:1c:4e:6d:9f:ab:b5:c5:3f:4c:60:47:c9:90:
                    35:a5:a6:6f:2b:5f:23:4a:5f:d3:d4:cb:02:b2:9b:
                    5e:90:ad:a1:fa:ee:d1:c3:53:8e:fb:af:6b:2c:f7:
                    7a:c0:61:28:56:e8:ce:9b:1a:3b:e2:1e:79:d3:4a:
                    02:24:f6:9f:f8:fd:21:a2:9a:08:a5:37:25:c2:26:
                    ea:66:d4:0e:e5:4d:3a:a0:4f:02:0e:6e:89:95:e8:
                    9a:76:5a:2d:c6:c0:fc:5e:0b:bb:cc:72:97:10:b9:
                    29:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E3:AC:43:23:4F:03:8C:11:B0:5A:BE:33:78:D4:E6:C4:9C:5B:74
            X509v3 Authority Key Identifier:
                keyid:55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/5554B6ED4969AC940F590D2A6010C4406D254087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32322d3232203d3e20323638323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:e7:dd:80:5a:dd:64:8a:2c:67:83:79:2e:a0:aa:a4:6f:d6:
         d1:cc:50:8c:ae:10:20:9f:ba:7c:bd:9a:ba:29:16:8f:92:dc:
         59:81:a4:46:28:eb:04:11:95:c1:f3:cb:00:b1:d4:b3:2b:6f:
         dc:47:86:4f:67:9e:da:80:dd:61:5c:8c:a5:3d:ca:26:09:e0:
         c8:12:aa:e9:f6:be:69:08:77:b4:2c:3e:05:29:02:8f:3c:1b:
         3f:d8:b4:87:dd:40:d0:ea:26:43:33:8c:1d:93:dc:4b:d5:83:
         35:ac:b5:d4:37:fe:b2:81:1f:7f:5d:28:da:51:ad:ac:7d:5c:
         47:3a:5f:69:b5:48:52:31:93:bb:a2:2b:71:11:65:38:da:be:
         79:35:d6:67:ea:e9:51:92:69:e5:a9:22:f4:b8:ea:a4:43:fc:
         f8:a1:d6:d7:5a:66:b7:12:b0:47:27:1a:82:44:24:ea:54:b9:
         39:96:5b:16:19:a2:99:89:d6:80:4f:6c:e2:a5:ef:54:4c:18:
         26:80:d4:0d:14:28:11:9c:b5:29:a2:2a:a3:0d:bd:ef:51:35:
         a3:cf:d0:93:72:65:29:cd:f5:d1:b6:e8:25:25:f0:2f:bd:d1:
         a8:0d:41:13:31:01:b5:c2:e2:9d:e1:48:ca:a1:98:c5:c1:e8:
         22:fe:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:07:59 2025 by rpki-client