Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3235302e302f32342d3234203d3e20323638323533.roa
File:                     34352e3233362e3235302e302f32342d3234203d3e20323638323533.roa (raw, json)
Hash identifier:          cwcVhDYO7mpGuJ/hemZ9qvWKlxDNmVKMyjN7vkBJLCg=
Subject key identifier:   F7:B7:0D:CD:3F:27:2A:94:05:E3:08:0B:93:96:D1:49:5C:21:1D:B4
Certificate issuer:       /CN=5554B6ED4969AC940F590D2A6010C4406D254087
Certificate serial:       25C72F189B768A5B6C1AA5101334B016851411B1
Authority key identifier: 55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3235302e302f32342d3234203d3e20323638323533.roa
Signing time:             Thu 09 Jan 2025 17:47:08 +0000
ROA not before:           Thu 09 Jan 2025 17:42:08 +0000
ROA not after:            Thu 08 Jan 2026 17:47:08 +0000
asID:                     268253
IP address blocks:        45.236.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c7:2f:18:9b:76:8a:5b:6c:1a:a5:10:13:34:b0:16:85:14:11:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5554B6ED4969AC940F590D2A6010C4406D254087
        Validity
            Not Before: Jan  9 17:42:08 2025 GMT
            Not After : Jan  8 17:47:08 2026 GMT
        Subject: CN=F7B70DCD3F272A9405E3080B9396D1495C211DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:8d:ad:68:ae:52:bc:d9:84:73:1c:cc:c0:
                    5f:59:1f:fd:a3:4a:14:ce:fe:f3:75:f4:1b:88:cc:
                    fe:41:5f:74:91:ab:df:0c:c4:c3:0c:e9:53:08:56:
                    0c:59:49:d4:eb:c4:3c:5a:71:46:6b:84:1f:24:5a:
                    6b:a5:9f:77:98:7b:4e:24:b9:32:df:68:d1:e4:32:
                    a2:cd:a8:53:5a:9b:10:0e:46:39:c4:1c:7d:34:81:
                    3a:04:00:30:fd:45:df:69:b2:c9:bc:64:e1:db:f5:
                    92:1b:17:86:0e:a1:cc:8d:e3:5b:9c:9e:74:e2:8a:
                    f6:93:d9:4f:22:11:b2:a5:a8:01:70:f5:fa:1b:2e:
                    0a:1c:ab:2e:39:db:e5:ec:1b:a0:fb:82:9b:b5:86:
                    a4:0d:a9:80:8c:57:ab:c3:91:3b:d7:c2:05:37:05:
                    4c:ff:57:de:fe:a1:cd:4f:6c:ee:ee:a4:ce:b7:cc:
                    0d:4a:d8:e5:21:ad:e1:d3:66:8b:27:29:61:2f:81:
                    ce:31:7a:96:94:f8:f4:c6:33:d8:f3:ca:e8:b8:ba:
                    7c:e0:3b:c0:4a:69:5f:5e:9f:30:68:a7:51:d7:89:
                    16:e8:8e:4a:aa:b7:2e:09:33:ee:72:66:57:c9:cc:
                    b1:a0:56:29:04:b3:54:19:84:af:da:82:f6:ac:77:
                    b5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B7:0D:CD:3F:27:2A:94:05:E3:08:0B:93:96:D1:49:5C:21:1D:B4
            X509v3 Authority Key Identifier:
                keyid:55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/5554B6ED4969AC940F590D2A6010C4406D254087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3235302e302f32342d3234203d3e20323638323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:8e:6a:4b:89:52:c0:76:04:e7:11:73:00:6b:5d:1b:41:51:
         87:4c:ad:bf:69:ad:a6:7c:e6:29:e3:4f:c8:71:c9:8e:94:bd:
         f5:4f:14:25:dd:26:c4:4b:22:8b:4e:ac:d1:c6:b1:a8:9e:df:
         23:b3:ac:66:29:b5:20:96:42:7e:bc:9d:7c:b1:20:55:22:c2:
         7b:74:0b:7d:06:aa:77:5b:41:56:b5:21:2c:da:d2:84:0e:7d:
         73:09:d8:ef:82:3a:20:9b:9a:93:2b:d5:45:fc:96:1a:1e:e5:
         ca:9b:7f:06:7b:be:15:31:2a:af:a1:01:c6:26:25:59:a0:23:
         f0:61:66:77:0a:bc:af:ef:b9:6e:c4:61:b4:83:5c:4f:8e:8b:
         df:78:c5:24:e0:1f:b2:16:76:e7:5b:7c:a9:6f:61:cb:3a:71:
         b6:db:f8:a7:5e:79:1f:6a:fc:c6:3e:cb:18:64:10:c0:d0:8b:
         0c:6c:e9:f0:90:7b:b0:a3:68:da:33:71:0d:94:8a:b7:21:5f:
         89:5a:a2:4f:dd:9b:78:e9:09:c9:a2:69:b4:12:80:f0:d5:7f:
         82:67:8f:eb:f0:2c:e9:9a:98:0e:96:d1:b3:11:fb:79:d5:5a:
         db:f6:43:f3:4a:b4:63:a3:05:aa:56:85:3f:67:f5:c4:99:cc:
         3d:bb:fc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:00:25 2025 by rpki-client