Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136312e302f32342d3234203d3e20323637353735.roa
File:                     34352e37302e3136312e302f32342d3234203d3e20323637353735.roa (raw, json)
Hash identifier:          4kUGbZvuMrzPpjLA/4/QvUKVAGileRrHmzLa4qXVRZY=
Subject key identifier:   51:4D:7A:B4:BF:FD:B6:83:01:0E:A4:2C:90:34:12:5D:D1:72:70:7A
Certificate issuer:       /CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
Certificate serial:       7BB985EF1CCB9081FBB2FE6E525E17C4A235C76A
Authority key identifier: E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136312e302f32342d3234203d3e20323637353735.roa
Signing time:             Wed 18 Sep 2024 12:17:30 +0000
ROA not before:           Wed 18 Sep 2024 12:12:30 +0000
ROA not after:            Wed 17 Sep 2025 12:17:30 +0000
asID:                     267575
IP address blocks:        45.70.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b9:85:ef:1c:cb:90:81:fb:b2:fe:6e:52:5e:17:c4:a2:35:c7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
        Validity
            Not Before: Sep 18 12:12:30 2024 GMT
            Not After : Sep 17 12:17:30 2025 GMT
        Subject: CN=514D7AB4BFFDB683010EA42C9034125DD172707A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:8e:a7:b1:61:8d:a9:d4:3f:1f:33:71:d3:
                    78:a5:13:52:5f:4a:c4:9d:f8:02:40:a4:01:f7:ed:
                    da:97:95:7b:8b:85:a8:44:31:3a:d7:a0:c9:4f:b7:
                    48:96:68:06:bd:00:31:b8:40:68:1f:0a:81:55:2b:
                    52:4a:c2:9b:07:7a:95:57:7c:27:69:4f:4c:de:67:
                    91:8c:7c:fb:25:1d:e1:88:19:96:ca:13:3e:c0:0d:
                    1e:3b:ee:16:4d:d4:b6:7b:31:ae:83:87:7b:ea:ec:
                    fb:49:18:78:d5:ec:02:f2:cc:8f:63:c6:36:1c:75:
                    e9:d9:9c:8a:11:a0:89:1a:4d:aa:b8:75:b3:6c:aa:
                    2f:b3:8f:05:2e:73:64:c2:47:a6:f7:fe:75:f8:2d:
                    e7:ec:97:e0:a1:b5:36:79:6c:85:59:ac:28:93:e7:
                    25:28:2c:2b:dc:8c:f0:51:89:4b:45:85:e6:b9:c6:
                    70:ce:aa:10:ea:de:bf:d1:01:c5:a4:59:f2:7a:6f:
                    71:17:08:fb:3c:f6:f2:7c:f4:58:c3:4a:e3:3f:d3:
                    dc:8c:f4:86:95:23:b5:2a:cb:fd:d9:e1:f9:d5:b7:
                    55:58:40:c4:f9:4a:27:51:62:c2:ae:1a:f9:77:e1:
                    81:52:2c:93:5d:79:cf:94:b0:9a:c4:ad:4a:05:24:
                    21:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4D:7A:B4:BF:FD:B6:83:01:0E:A4:2C:90:34:12:5D:D1:72:70:7A
            X509v3 Authority Key Identifier:
                keyid:E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136312e302f32342d3234203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:17:cd:e5:a2:ff:5c:a5:f5:85:b2:12:b1:ad:81:cf:ef:a3:
         0f:6f:df:cb:1a:f8:9e:b5:d5:ff:11:88:e0:19:d3:84:8f:c6:
         0f:89:47:48:5a:ed:c0:a3:90:e5:7e:1a:e9:b2:6e:78:ff:b1:
         3a:d1:fd:a9:07:9c:42:c8:13:48:d1:ad:73:dc:05:ba:11:27:
         50:c9:9a:d8:e7:43:06:23:ee:21:3a:51:0a:87:0d:08:c2:c2:
         40:0a:bd:c8:e2:45:09:10:da:6e:c8:46:76:48:b1:01:e9:0f:
         4a:5e:3f:25:4e:cf:fe:0f:fe:35:69:f0:41:c9:05:84:a1:fd:
         63:be:f1:46:63:5a:68:db:26:3f:6e:cd:72:08:58:59:67:c4:
         9b:10:1a:8d:65:83:2d:9e:92:4a:f2:cb:ad:34:5a:44:cc:94:
         84:61:77:a4:96:8a:96:bc:d4:be:a2:98:17:bd:a7:43:66:0e:
         2c:25:9e:51:73:1e:29:bd:81:dd:d3:3e:75:fc:0c:2d:c7:6b:
         2e:34:33:72:a3:0d:f2:89:ea:64:7e:c6:54:1d:57:78:60:82:
         2e:ff:6c:a8:8b:8b:7f:15:9a:1e:07:6e:df:4a:c1:d7:da:d8:
         b4:e2:3c:8b:4e:cc:5e:2c:91:54:75:9c:e5:de:41:f0:99:76:
         37:80:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:17 2025 by rpki-client