Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32322d3332203d3e20323638323533.roa
File:                     34352e3233362e3234382e302f32322d3332203d3e20323638323533.roa (raw, json)
Hash identifier:          wp5Y2CmdENpkZ5QXlfX5AW7S10wq9FjUCST++Umi+2U=
Subject key identifier:   C1:00:11:BD:23:76:3F:9A:5E:00:4B:97:D1:6B:FD:99:5F:01:6D:FB
Certificate issuer:       /CN=AD3AEE6D0F6670021EECC39215F89978080B77E0
Certificate serial:       15814863C48D8841EDBAECF66D6AA10D9794ADB9
Authority key identifier: AD:3A:EE:6D:0F:66:70:02:1E:EC:C3:92:15:F8:99:78:08:0B:77:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3AEE6D0F6670021EECC39215F89978080B77E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32322d3332203d3e20323638323533.roa
Signing time:             Thu 13 Mar 2025 16:39:17 +0000
ROA not before:           Thu 13 Mar 2025 16:34:17 +0000
ROA not after:            Thu 12 Mar 2026 16:39:17 +0000
asID:                     268253
IP address blocks:        45.236.248.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:81:48:63:c4:8d:88:41:ed:ba:ec:f6:6d:6a:a1:0d:97:94:ad:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD3AEE6D0F6670021EECC39215F89978080B77E0
        Validity
            Not Before: Mar 13 16:34:17 2025 GMT
            Not After : Mar 12 16:39:17 2026 GMT
        Subject: CN=C10011BD23763F9A5E004B97D16BFD995F016DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:49:b1:cf:eb:b8:e3:b5:19:d8:10:c2:5e:
                    af:d0:be:95:db:aa:c8:27:3b:41:12:9b:26:c3:c7:
                    f1:4c:ea:25:a2:fa:af:fd:b3:53:9c:3b:45:12:f4:
                    e4:ad:fd:bc:bd:85:e0:2f:12:71:54:42:fc:f6:ce:
                    d8:eb:99:54:bd:e7:bd:66:b0:f5:31:da:7d:ce:cf:
                    d6:b4:29:c2:3e:ad:6b:52:c9:60:ca:58:08:d3:8d:
                    80:e0:46:21:10:ff:bc:85:d1:e9:72:25:7b:6f:a5:
                    a2:a9:59:2c:eb:6a:b1:2a:ad:26:ab:e4:f8:a0:0f:
                    73:95:d5:d1:54:71:e3:d7:4a:74:58:ea:34:20:a8:
                    fc:3c:d1:44:ad:5e:63:63:5a:99:51:b4:75:52:ab:
                    11:6f:7b:59:70:5e:15:37:07:c6:30:83:47:92:1f:
                    06:91:ac:ba:f9:69:16:64:cc:1d:30:42:89:8b:7b:
                    95:92:5e:d4:ce:8a:9b:75:42:32:d1:cd:01:27:fc:
                    bc:5c:d8:df:03:ef:25:b5:cf:21:4b:09:72:d0:70:
                    0c:eb:0e:35:a5:de:22:d4:11:41:be:e6:3d:9a:ba:
                    b9:75:3d:db:04:d1:51:df:db:ce:10:db:c5:4a:76:
                    2f:3f:83:d6:e1:aa:64:2c:96:12:8a:0e:47:8e:2b:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:00:11:BD:23:76:3F:9A:5E:00:4B:97:D1:6B:FD:99:5F:01:6D:FB
            X509v3 Authority Key Identifier:
                keyid:AD:3A:EE:6D:0F:66:70:02:1E:EC:C3:92:15:F8:99:78:08:0B:77:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3AEE6D0F6670021EECC39215F89978080B77E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32322d3332203d3e20323638323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:aa:d5:c4:14:5d:d7:1b:49:b6:0c:a8:c5:d6:59:e0:ac:d6:
         92:47:50:69:54:eb:14:47:aa:fc:32:6d:10:9f:e0:94:a2:82:
         ef:a4:d4:5e:a0:a6:72:87:fb:cc:fe:5b:fd:0f:ca:9b:5d:24:
         1e:20:76:c4:e7:54:e9:a6:0a:a6:a7:39:f5:d6:33:f1:23:36:
         1c:76:88:1a:d9:d8:8d:58:18:e2:d2:d6:a4:00:1f:3b:5b:e3:
         87:d0:80:48:e9:e7:d8:59:9b:eb:31:a9:8f:d9:b0:e8:6e:49:
         09:cc:07:37:79:f1:94:2b:36:67:4e:bb:ff:40:f8:90:3f:13:
         ed:b7:2c:48:a9:1d:84:3a:84:06:4f:d2:83:54:6e:bb:42:5a:
         ab:a0:b4:f1:a7:ff:ae:77:37:d2:53:70:c7:4c:1f:03:4a:f5:
         2c:b5:2a:d4:34:62:7d:9b:a7:06:23:b2:a2:e4:19:1b:fd:7f:
         da:3d:f2:62:35:bc:d2:fd:a4:ce:38:9c:84:4b:ba:f0:61:98:
         f6:47:80:4b:ba:e6:65:97:49:aa:c6:0a:6a:1e:83:41:22:cf:
         3c:a8:7f:b3:5d:f2:5b:50:3d:73:a8:10:c9:4b:e3:24:3a:d4:
         da:4f:12:dd:18:71:2d:d9:74:d7:01:98:a6:57:40:48:63:1b:
         d5:a8:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:48:00 2025 by rpki-client