Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa
File:                     34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa (raw, json)
Hash identifier:          DYcVhZZ0ZXTOVX9Aef2ClXF9tZXWQywaTRTWsfE2mQY=
Subject key identifier:   91:C7:3A:62:5E:BD:AF:73:97:6C:14:F8:FC:59:60:F9:DA:DE:4E:23
Certificate issuer:       /CN=E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5
Certificate serial:       77B72E4A5A7128AB921CA0D2D3A0FBE338D6448B
Authority key identifier: E3:BD:40:1A:6D:36:7E:82:1B:7A:C7:E5:AB:B5:10:B6:DE:66:49:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa
Signing time:             Thu 13 Mar 2025 18:18:37 +0000
ROA not before:           Thu 13 Mar 2025 18:13:37 +0000
ROA not after:            Thu 12 Mar 2026 18:18:37 +0000
asID:                     268726
IP address blocks:        45.171.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b7:2e:4a:5a:71:28:ab:92:1c:a0:d2:d3:a0:fb:e3:38:d6:44:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5
        Validity
            Not Before: Mar 13 18:13:37 2025 GMT
            Not After : Mar 12 18:18:37 2026 GMT
        Subject: CN=91C73A625EBDAF73976C14F8FC5960F9DADE4E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:a9:a0:24:a4:8a:c7:74:a4:ae:b4:57:07:
                    48:f4:ea:c9:68:02:bd:f9:a2:fd:ce:5c:6c:e6:63:
                    19:f9:be:ec:15:a1:c5:5c:eb:0c:60:43:db:7a:a1:
                    77:ec:06:9e:f2:6a:c6:de:ef:c9:de:6e:66:1b:e3:
                    a7:ed:ef:b3:b3:14:f5:b3:4c:58:f3:28:1f:91:ef:
                    d7:21:3f:f4:59:b0:bd:17:bf:c9:5a:c8:42:4c:53:
                    3c:63:19:24:ed:4d:8f:5d:d7:3c:a4:69:0d:ca:b7:
                    b4:65:ef:4b:5a:f7:7c:2e:fb:28:6d:56:53:65:4f:
                    4f:46:a6:c4:37:f1:69:8c:ef:d7:e1:45:92:e7:c9:
                    08:32:16:0d:d0:5b:c7:86:0a:ba:6e:fe:0e:62:0f:
                    fc:dd:0c:3e:f7:1f:01:c5:0e:b7:18:58:94:4a:03:
                    b5:19:15:fb:1e:51:c4:a0:f9:f5:b5:9c:f9:17:95:
                    be:68:ef:86:8e:19:91:e5:28:f0:40:9f:52:56:f2:
                    b5:41:30:75:cf:d7:bb:01:51:b1:83:9a:31:2d:01:
                    72:cb:06:a6:cf:a1:26:31:f8:15:f9:2d:ca:f4:a8:
                    3d:e5:b7:e3:01:84:40:a2:aa:17:ea:f1:7f:3c:47:
                    43:0c:3b:ab:73:c6:74:27:24:85:78:56:82:2e:d0:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C7:3A:62:5E:BD:AF:73:97:6C:14:F8:FC:59:60:F9:DA:DE:4E:23
            X509v3 Authority Key Identifier:
                keyid:E3:BD:40:1A:6D:36:7E:82:1B:7A:C7:E5:AB:B5:10:B6:DE:66:49:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138342e302f32322d3232203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:e9:f5:5f:65:54:2a:e1:31:c1:78:cc:52:d5:dd:80:88:53:
         3b:ce:14:c1:81:57:d0:3b:62:96:54:43:b1:c7:66:70:60:6a:
         88:e6:5c:2e:32:c2:01:41:b3:7f:8e:cc:e5:f1:4e:ad:60:af:
         e4:13:09:b3:1a:c8:32:f5:bd:0f:6d:e9:dd:95:be:86:77:10:
         c5:ff:a9:2e:17:53:02:35:4d:db:59:45:88:d6:39:14:3a:db:
         2b:e4:eb:5e:67:84:b0:a8:53:80:68:5b:d4:36:8f:3e:b6:12:
         a7:55:55:68:09:34:c1:eb:93:65:2e:e7:34:50:95:8a:e7:d3:
         43:9e:e7:27:0c:dd:0f:85:15:9f:fd:79:63:52:9f:97:6c:3a:
         9b:93:7a:3a:79:f9:ad:d1:3b:fa:d8:53:50:df:92:01:5f:c1:
         42:95:17:86:29:8e:f6:ca:4a:f9:e8:a8:bf:9e:15:1c:ba:1d:
         39:d2:c7:0b:ba:46:8b:d2:49:7f:76:61:de:fb:10:c7:6c:91:
         7b:eb:1e:0e:52:5e:ab:18:60:78:6c:5e:7e:ce:eb:60:12:af:
         25:a1:70:31:8c:ed:65:a3:d5:2a:94:11:2a:36:cf:ef:37:ff:
         c8:09:56:1a:8d:c5:36:aa:c2:7e:31:60:3c:2b:5f:51:64:e6:
         eb:b1:1b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:09 2025 by rpki-client