Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3235312e302f32342d3234203d3e20323638323533.roa
File:                     34352e3233362e3235312e302f32342d3234203d3e20323638323533.roa (raw, json)
Hash identifier:          aYLMCicYRVEbZoHDRYfRuDhq17GeZlQ7JU7G6uKrtJg=
Subject key identifier:   B3:F9:63:68:E9:2C:5D:7D:C4:E3:B5:51:5D:EB:E5:F0:92:79:E8:2A
Certificate issuer:       /CN=5554B6ED4969AC940F590D2A6010C4406D254087
Certificate serial:       5230AD2014C78EB63A950148056A8F2E88C8C616
Authority key identifier: 55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3235312e302f32342d3234203d3e20323638323533.roa
Signing time:             Thu 09 Jan 2025 17:47:08 +0000
ROA not before:           Thu 09 Jan 2025 17:42:08 +0000
ROA not after:            Thu 08 Jan 2026 17:47:08 +0000
asID:                     268253
IP address blocks:        45.236.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:30:ad:20:14:c7:8e:b6:3a:95:01:48:05:6a:8f:2e:88:c8:c6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5554B6ED4969AC940F590D2A6010C4406D254087
        Validity
            Not Before: Jan  9 17:42:08 2025 GMT
            Not After : Jan  8 17:47:08 2026 GMT
        Subject: CN=B3F96368E92C5D7DC4E3B5515DEBE5F09279E82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:4c:0b:2e:f1:64:08:90:d0:7f:58:2e:b7:
                    e3:18:29:97:ae:91:b6:0a:6b:b2:3f:82:e8:12:6b:
                    3f:ea:ef:d7:f8:0b:8b:c2:d2:16:e0:f7:e4:cf:30:
                    de:99:27:3f:3f:c5:6a:7e:6b:24:4e:42:a4:a9:f1:
                    c0:b2:7d:29:79:a9:88:c3:7b:53:3a:7d:8e:9b:49:
                    1a:05:9c:e2:0a:ac:2e:ca:43:46:49:48:25:74:ca:
                    92:ab:62:28:d3:0d:9d:47:a3:c3:fc:19:ce:d4:8c:
                    d4:06:8d:d7:bf:52:7f:21:50:ba:e9:5a:8f:87:97:
                    32:94:38:73:e7:64:05:14:ae:73:f6:ce:15:99:ab:
                    07:50:65:2e:26:01:5b:74:7c:98:71:c8:90:aa:e6:
                    61:ba:65:af:e2:7c:33:2e:e0:1c:98:bf:84:71:61:
                    87:fd:08:15:ca:7d:33:27:26:de:eb:e6:69:10:2f:
                    7e:d2:c4:ba:55:41:b6:ca:f2:09:ee:56:ba:01:90:
                    06:01:a9:d3:93:53:b3:67:a3:95:99:84:82:3e:39:
                    eb:1c:1e:4c:e4:f6:7c:fb:87:bd:a6:3b:49:18:40:
                    4d:5b:95:c2:55:19:6d:6a:85:2c:d6:86:7a:f9:b8:
                    93:94:5c:44:a9:18:64:e8:9c:e9:89:1c:9b:2d:be:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F9:63:68:E9:2C:5D:7D:C4:E3:B5:51:5D:EB:E5:F0:92:79:E8:2A
            X509v3 Authority Key Identifier:
                keyid:55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/5554B6ED4969AC940F590D2A6010C4406D254087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/34352e3233362e3235312e302f32342d3234203d3e20323638323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:e1:f2:b0:0f:af:fb:97:7f:24:28:dc:88:54:59:ca:42:d9:
         5a:1b:f5:c5:1d:1b:29:a2:bb:3a:98:74:bd:61:13:6f:a3:c5:
         6e:48:6a:69:44:0f:c3:31:1e:d5:ac:9f:5d:05:39:1d:e5:9d:
         b8:4c:28:bd:d5:03:d2:a6:3c:2d:59:98:4d:a5:91:ae:16:79:
         a1:72:57:13:60:07:8f:d4:d8:da:37:fa:5c:d7:43:56:a1:35:
         e9:76:6f:40:7f:e1:01:39:3e:27:02:3f:a4:ae:17:51:c8:a8:
         35:a2:bb:dc:58:ba:a7:20:d4:27:17:8b:c3:f7:ac:a3:4f:0e:
         e6:ec:2f:b3:75:9c:cb:27:38:31:29:11:bb:fb:80:bf:b6:ae:
         22:1e:6f:21:df:40:b7:65:fe:30:c0:90:04:08:0d:48:95:d5:
         d6:66:6d:96:97:10:be:69:b6:10:bf:d6:be:41:66:23:bb:ad:
         8c:b4:de:8e:77:b8:11:1a:31:fe:95:b4:81:d7:4e:23:fd:64:
         e1:fc:d1:5d:25:2f:b8:01:63:72:bd:bc:fb:09:89:53:78:a5:
         ab:a6:ce:1b:4e:c8:b4:c8:44:28:03:48:32:37:d2:e8:e8:4b:
         90:e4:11:f5:41:bf:78:39:31:3b:a7:94:35:8b:c0:44:02:7a:
         68:49:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:09:57 2025 by rpki-client