Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37342e302f32342d3234203d3e20323637363638.roa
File:                     34352e3232342e37342e302f32342d3234203d3e20323637363638.roa (raw, json)
Hash identifier:          ztvGZz46v5yAPTHR/SXjCW4QRRBWmiNNbAfXkmzJ2ZQ=
Subject key identifier:   0D:EC:7F:38:4A:04:19:EA:5A:39:3F:FD:AE:2C:12:11:B8:59:DC:22
Certificate issuer:       /CN=D04F30B05726FA543C147DA94BFBD44C1D936300
Certificate serial:       193B003350C0721FF116DF42528FE8A5C7891B65
Authority key identifier: D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37342e302f32342d3234203d3e20323637363638.roa
Signing time:             Tue 13 Feb 2024 19:17:02 +0000
ROA not before:           Tue 13 Feb 2024 19:12:02 +0000
ROA not after:            Tue 11 Feb 2025 19:17:02 +0000
asID:                     267668
IP address blocks:        45.224.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3b:00:33:50:c0:72:1f:f1:16:df:42:52:8f:e8:a5:c7:89:1b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04F30B05726FA543C147DA94BFBD44C1D936300
        Validity
            Not Before: Feb 13 19:12:02 2024 GMT
            Not After : Feb 11 19:17:02 2025 GMT
        Subject: CN=0DEC7F384A0419EA5A393FFDAE2C1211B859DC22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:ef:21:82:54:86:6c:56:dd:e9:e3:d3:cd:
                    28:c5:cf:4b:94:f0:ad:27:13:de:50:c1:33:a5:71:
                    ac:41:fa:c5:c0:ef:50:0f:51:1e:1f:f1:0b:13:67:
                    0b:9f:8b:c7:63:6a:f2:5a:85:1d:07:81:6a:4c:42:
                    67:0d:e4:25:db:ec:15:5d:da:34:ef:2b:d9:a9:16:
                    2e:68:73:3e:95:4a:27:c4:91:dd:38:6a:8d:ef:14:
                    b9:bd:08:2b:80:f6:ba:f5:86:c4:95:f2:98:11:60:
                    02:a6:0c:46:1a:0a:9b:80:f4:87:df:8f:98:27:0e:
                    56:d5:91:64:29:72:5c:33:9f:88:b7:e1:37:48:8d:
                    6c:cc:86:e1:58:84:0a:24:78:62:2c:c7:5c:35:36:
                    58:c8:cd:8b:00:bd:5b:3b:76:6e:be:77:5b:fb:1a:
                    8b:04:10:bf:ab:11:c1:76:15:c1:06:83:28:51:34:
                    80:3f:e9:c1:81:86:bf:01:fb:5c:86:8a:58:1c:3d:
                    97:b4:77:6e:47:5c:1a:13:78:04:84:0f:f8:4e:b9:
                    9c:37:66:fc:04:f2:3a:4e:bd:2d:a7:86:de:74:5c:
                    7e:f6:2c:0d:df:f8:ad:39:3e:03:87:37:97:2a:96:
                    74:4b:dc:f2:15:e7:9e:17:2e:95:d7:86:a0:d9:23:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EC:7F:38:4A:04:19:EA:5A:39:3F:FD:AE:2C:12:11:B8:59:DC:22
            X509v3 Authority Key Identifier:
                keyid:D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37342e302f32342d3234203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:fc:a6:d2:03:3f:60:d4:c4:da:84:f3:3f:43:91:ad:f3:9c:
         66:c1:0e:7b:1d:bf:5e:07:54:a1:c1:1b:6e:85:7d:84:d5:e9:
         1b:26:df:92:97:6e:77:e6:f7:a1:a4:a2:cc:62:49:27:59:48:
         f4:99:75:ec:98:4c:62:8e:32:f2:50:be:50:ca:f8:ae:0b:a1:
         d2:ed:37:39:4f:60:05:5e:93:13:14:40:e1:d2:de:ff:5c:00:
         e5:be:2e:16:44:25:97:c3:75:41:b0:fb:ad:54:ad:f0:0c:b7:
         38:db:dc:8c:6f:7e:3f:5d:bb:3d:32:cd:0b:e8:67:98:47:e5:
         71:d4:91:e2:4e:58:5d:c5:42:c5:4d:27:1b:52:68:7b:6e:6d:
         51:6b:df:be:e0:39:79:f6:38:a7:0f:ca:40:2e:1f:57:20:ca:
         e8:30:7d:be:b2:9f:df:6d:db:fc:f4:aa:f6:7e:d9:55:4a:53:
         18:5b:86:56:0f:04:e5:6d:c6:af:7e:30:b4:34:1a:ee:e5:79:
         fd:87:f7:00:7a:b4:5b:1c:47:00:66:b7:a8:12:22:74:16:34:
         09:0f:a0:5e:25:ef:32:f8:f3:54:54:a0:d3:8d:b5:39:e7:f2:
         20:fc:57:84:5d:0a:de:56:33:cd:85:da:0c:bf:e3:73:38:bb:
         6f:96:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:16 2025 by rpki-client