Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32332d3233203d3e20323638323533.roa
File:                     34352e3233362e3234382e302f32332d3233203d3e20323638323533.roa (raw, json)
Hash identifier:          EXBVHys2xrT4ujcteZWoz9wwtvWaC77cEu3agp+9JjI=
Subject key identifier:   6E:48:96:78:3C:5C:C3:5D:AF:56:C8:33:D4:CB:F6:83:63:14:A6:F8
Certificate issuer:       /CN=5554B6ED4969AC940F590D2A6010C4406D254087
Certificate serial:       4F4D9B16EFCF9D70D65A57A16562450C8374E9F5
Authority key identifier: 55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32332d3233203d3e20323638323533.roa
Signing time:             Thu 09 Jan 2025 17:47:11 +0000
ROA not before:           Thu 09 Jan 2025 17:42:11 +0000
ROA not after:            Thu 08 Jan 2026 17:47:11 +0000
asID:                     268253
IP address blocks:        45.236.248.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4d:9b:16:ef:cf:9d:70:d6:5a:57:a1:65:62:45:0c:83:74:e9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5554B6ED4969AC940F590D2A6010C4406D254087
        Validity
            Not Before: Jan  9 17:42:11 2025 GMT
            Not After : Jan  8 17:47:11 2026 GMT
        Subject: CN=6E4896783C5CC35DAF56C833D4CBF6836314A6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:cf:ad:46:9a:b1:9c:d3:a5:d8:cd:43:2a:
                    96:ae:66:ac:04:f5:ec:ed:0d:7d:d3:13:3a:e0:80:
                    45:21:b5:d1:99:b7:2a:c7:f1:30:62:c0:70:d2:58:
                    ea:5e:85:99:a1:77:a0:2c:75:f8:73:5d:74:b2:b5:
                    74:02:14:ef:ce:e4:0f:39:6e:a1:f3:f2:9a:72:8f:
                    21:2c:13:2c:2a:41:92:eb:1d:82:8b:3e:f5:65:d2:
                    54:d3:1a:1b:79:ed:b5:fe:12:b7:bf:5c:40:24:0c:
                    54:df:2c:b1:bd:5a:55:a0:7c:fb:05:9d:47:68:ff:
                    02:da:04:4c:4e:56:17:61:d8:d5:d7:59:78:a9:09:
                    d6:25:9f:6f:b2:64:38:05:00:ff:73:f5:bc:c9:8c:
                    79:7d:55:3c:eb:f3:67:d8:b3:d6:4e:32:eb:be:c2:
                    23:4a:f6:a5:f1:41:66:05:c4:08:5d:42:9d:c6:97:
                    b0:5c:dd:4d:f9:21:22:a4:db:fe:35:ad:0b:bc:41:
                    d3:c5:de:f2:bd:7a:2e:ac:1c:b4:9a:0a:5c:a4:40:
                    1a:85:5c:62:f4:ee:98:62:5c:01:71:01:78:7b:de:
                    be:f4:e8:9f:75:cd:7c:0b:a2:2c:91:25:f5:fa:e9:
                    5c:f6:71:72:b1:66:3c:c1:a5:89:be:2e:37:75:06:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:48:96:78:3C:5C:C3:5D:AF:56:C8:33:D4:CB:F6:83:63:14:A6:F8
            X509v3 Authority Key Identifier:
                keyid:55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/5554B6ED4969AC940F590D2A6010C4406D254087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32332d3233203d3e20323638323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:e4:b7:90:4d:ef:50:75:e3:24:cb:d3:bd:2d:23:70:46:23:
         f7:2b:7a:bb:7b:0a:a7:38:cf:12:9d:2e:79:47:7e:73:21:f1:
         df:19:e3:67:39:cf:25:b9:06:66:9d:5c:e4:60:d5:09:20:b3:
         a6:0a:85:56:92:d3:6f:4d:b3:c3:51:23:71:8e:c0:77:0f:95:
         ab:ba:b6:59:e6:88:15:72:e8:bf:39:55:13:ba:73:f2:bc:35:
         10:2c:7b:4d:2a:fc:18:c7:a8:a3:19:80:a1:17:ae:87:eb:a6:
         19:1c:d4:62:bb:8e:68:90:00:2a:3c:8b:2e:71:00:a3:9c:87:
         49:de:ca:7b:dd:03:55:97:6a:5c:33:75:a2:6e:88:b8:b5:18:
         a9:72:63:97:da:b3:bf:93:5a:ce:23:d8:89:d8:65:bd:03:32:
         1f:d9:c4:92:1e:41:b3:39:e0:ad:bd:56:16:eb:ca:e9:1a:8b:
         f7:50:cf:36:ff:b6:a1:69:c1:a2:9f:20:dd:93:d6:f1:d6:a3:
         ab:08:3a:87:3a:68:fe:03:8a:21:fe:63:3c:a9:53:df:7d:62:
         bf:6a:99:9e:41:2e:41:f2:8a:0f:83:ae:c3:cd:1f:c0:02:3a:
         1c:2a:08:34:44:45:25:1c:9a:f6:eb:6b:7f:9f:34:25:6b:a3:
         7b:33:e4:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT02bFu/PnXDWWlehZWJFDIN06fUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU1NEI2RUQ0OTY5QUM5NDBGNTkwRDJBNjAxMEM0NDA2
RDI1NDA4NzAeFw0yNTAxMDkxNzQyMTFaFw0yNjAxMDgxNzQ3MTFaMDMxMTAvBgNV
BAMTKDZFNDg5Njc4M0M1Q0MzNURBRjU2QzgzM0Q0Q0JGNjgzNjMxNEE2RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78c+tRpqxnNOl2M1DKpauZqwE
9eztDX3TEzrggEUhtdGZtyrH8TBiwHDSWOpehZmhd6AsdfhzXXSytXQCFO/O5A85
bqHz8ppyjyEsEywqQZLrHYKLPvVl0lTTGht57bX+Ere/XEAkDFTfLLG9WlWgfPsF
nUdo/wLaBExOVhdh2NXXWXipCdYln2+yZDgFAP9z9bzJjHl9VTzr82fYs9ZOMuu+
wiNK9qXxQWYFxAhdQp3Gl7Bc3U35ISKk2/41rQu8QdPF3vK9ei6sHLSaClykQBqF
XGL07phiXAFxAXh73r706J91zXwLoiyRJfX66Vz2cXKxZjzBpYm+Ljd1BpfZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbkiWeDxcw12vVsgz1Mv2g2MUpvgwHwYDVR0j
BBgwFoAUVVS27UlprJQPWQ0qYBDEQG0lQIcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUJIcmp6QXhIb0ZySFlEVnhZcGV6dkJmallnSFM0V0ZTcGtmRGY4M1lH
cG8vMC81NTU0QjZFRDQ5NjlBQzk0MEY1OTBEMkE2MDEwQzQ0MDZEMjU0MDg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1NTRCNkVENDk2OUFDOTQw
RjU5MEQyQTYwMTBDNDQwNkQyNTQwODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VCSHJqekF4SG9GckhZRFZ4WXBlenZCZmpZZ0hTNFdGU3BrZkRmODNZR3BvLzAv
MzQzNTJlMzIzMzM2MmUzMjM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7PgwDQYJKoZIhvcNAQELBQADggEBACbkt5BN
71B14yTL070tI3BGI/crert7Cqc4zxKdLnlHfnMh8d8Z42c5zyW5BmadXORg1Qkg
s6YKhVaS029Ns8NRI3GOwHcPlau6tlnmiBVy6L85VRO6c/K8NRAse00q/BjHqKMZ
gKEXrofrphkc1GK7jmiQACo8iy5xAKOch0neynvdA1WXalwzdaJuiLi1GKlyY5fa
s7+TWs4j2InYZb0DMh/ZxJIeQbM54K29Vhbryukai/dQzzb/tqFpwaKfIN2T1vHW
o6sIOoc6aP4DiiH+YzypU999Yr9qmZ5BLkHyig+DrsPNH8ACOhwqCDRERSUcmvbr
a3+fNCVro3sz5M0=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:47 2025 by rpki-client