Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32342d3234203d3e20323638323533.roa
File:                     34352e3233362e3234382e302f32342d3234203d3e20323638323533.roa (raw, json)
Hash identifier:          AxbhPzKdjpQODkPdBpN68HFcAkJCIwO2mFmb4fnPcqI=
Subject key identifier:   0C:7D:FC:D4:81:9D:5B:B6:B3:CE:33:EB:E4:60:0C:D8:A5:17:C6:A5
Certificate issuer:       /CN=5554B6ED4969AC940F590D2A6010C4406D254087
Certificate serial:       4DB269979CD5135A032828EAC9FC959DCD33E322
Authority key identifier: 55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32342d3234203d3e20323638323533.roa
Signing time:             Thu 09 Jan 2025 17:47:12 +0000
ROA not before:           Thu 09 Jan 2025 17:42:12 +0000
ROA not after:            Thu 08 Jan 2026 17:47:12 +0000
asID:                     268253
IP address blocks:        45.236.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b2:69:97:9c:d5:13:5a:03:28:28:ea:c9:fc:95:9d:cd:33:e3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5554B6ED4969AC940F590D2A6010C4406D254087
        Validity
            Not Before: Jan  9 17:42:12 2025 GMT
            Not After : Jan  8 17:47:12 2026 GMT
        Subject: CN=0C7DFCD4819D5BB6B3CE33EBE4600CD8A517C6A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:36:09:bd:fc:2d:be:e9:a1:e2:3f:33:5b:
                    f9:45:e6:c1:21:ba:6b:43:2b:73:4d:c4:04:49:ad:
                    8e:00:96:10:92:43:2e:09:cf:a0:96:c0:e3:d8:21:
                    5d:dd:4a:a2:a6:54:f8:f2:93:32:95:80:f2:79:6c:
                    8e:70:fb:ed:07:83:76:cc:c5:2f:26:26:9f:f8:da:
                    f3:00:9f:e3:54:ab:a6:39:07:7b:ec:b2:26:c0:26:
                    41:00:11:cb:0b:04:0f:d7:31:74:4e:78:36:5d:38:
                    7f:91:c4:7d:5e:5e:df:38:c0:4b:a3:7b:79:e0:b0:
                    46:b6:a9:91:ac:8e:d4:cb:b9:5b:77:f8:91:a5:72:
                    80:0f:14:80:68:68:95:d4:ee:4d:6f:4b:e7:66:90:
                    57:87:de:41:7a:35:b9:de:cb:73:0f:3a:af:5b:02:
                    0b:11:38:7f:47:50:70:c6:a9:c6:8f:e6:17:eb:48:
                    2d:7b:b6:2b:cf:f6:25:e5:3d:be:27:46:82:4e:b2:
                    f1:23:52:03:5f:62:df:57:ce:b4:2f:5d:f9:e5:a8:
                    46:9e:e7:f3:c4:ca:2d:d6:c6:60:85:1f:fc:0d:d1:
                    d4:e0:06:0d:a5:f6:38:a2:90:31:c3:6c:7f:65:68:
                    49:02:b2:51:20:91:68:9e:05:69:1d:9e:58:ce:8b:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7D:FC:D4:81:9D:5B:B6:B3:CE:33:EB:E4:60:0C:D8:A5:17:C6:A5
            X509v3 Authority Key Identifier:
                keyid:55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/5554B6ED4969AC940F590D2A6010C4406D254087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3234382e302f32342d3234203d3e20323638323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:ac:b3:aa:75:92:b8:71:90:c2:9f:6a:1f:b8:b3:1a:2d:90:
         72:5b:a4:10:b7:b7:5a:59:b5:53:9d:d7:db:a2:d3:19:46:80:
         c2:34:15:d6:23:fe:a1:fd:f0:0e:89:63:ca:5b:0e:c2:5e:2e:
         8f:86:15:6d:56:42:8b:20:c0:5d:1e:9b:35:53:99:65:f5:35:
         f2:4a:5d:ea:20:ce:87:6e:33:c8:c8:9d:dc:89:57:e7:d6:33:
         66:8e:8c:a3:83:ba:14:a6:07:75:ab:72:0c:71:ea:e9:7e:60:
         de:51:f1:89:ca:5d:96:a6:bb:5d:72:c4:ae:e4:16:f7:2b:44:
         2d:71:ae:7e:23:e0:03:4c:8b:a0:5b:f0:45:de:33:cb:01:68:
         f2:5a:cf:96:13:0c:8b:e7:eb:78:23:e0:00:93:63:fa:88:fc:
         cf:94:c0:7a:46:74:b0:fa:db:14:e2:16:2d:7b:82:d9:41:cf:
         61:c3:47:63:60:bf:32:2d:24:fd:2e:45:f2:31:45:cb:63:f6:
         0a:d5:b3:50:a4:76:df:86:02:f4:d3:41:19:53:08:7c:1f:8a:
         49:41:6f:30:bf:17:00:4a:63:84:46:85:3d:d0:a2:df:13:64:
         f8:90:42:4d:17:8b:b7:56:4a:01:1a:0b:2c:42:8a:bf:86:4b:
         49:80:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:02:49 2025 by rpki-client