Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa
File:                     34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          Mn4FRWaoSmiJg/tN0fuPn5tXtY3kLc+NG2HraHJnNog=
Subject key identifier:   7D:11:8F:F3:38:EE:83:E1:A8:D3:57:EB:28:C4:0A:0D:EA:51:4E:91
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       4610DA6B0C64682F3B79ABF2A2E0D26201D8FDCA
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa
Signing time:             Mon 24 Feb 2025 14:56:04 +0000
ROA not before:           Mon 24 Feb 2025 14:51:04 +0000
ROA not after:            Mon 23 Feb 2026 14:56:04 +0000
asID:                     263661
IP address blocks:        45.190.140.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:10:da:6b:0c:64:68:2f:3b:79:ab:f2:a2:e0:d2:62:01:d8:fd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Feb 24 14:51:04 2025 GMT
            Not After : Feb 23 14:56:04 2026 GMT
        Subject: CN=7D118FF338EE83E1A8D357EB28C40A0DEA514E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:8b:e4:9c:93:a0:3b:90:c8:8e:e2:10:a1:
                    2b:1c:a7:7a:dc:f4:af:32:73:8e:8e:58:80:b7:18:
                    99:48:13:91:58:e1:b9:5f:2e:41:cb:39:b1:d5:74:
                    15:92:29:22:85:18:95:f9:6d:82:46:12:0d:e4:2f:
                    c5:87:a5:e4:60:5d:1f:93:80:66:57:42:8b:d8:29:
                    4d:a9:7a:a8:af:26:b8:4c:f0:4a:ce:9f:8e:6f:93:
                    2f:02:7e:7e:96:7f:e7:e3:64:ee:23:d5:39:27:53:
                    00:25:ca:82:a3:47:5a:6e:ee:48:17:05:3e:1d:80:
                    76:cd:29:27:e4:54:9d:92:3e:cf:a6:cd:6b:4f:f5:
                    cd:25:b5:37:6e:16:8c:c9:13:76:fa:ed:67:0f:dd:
                    ab:db:1a:e1:0f:ec:52:e7:1d:58:51:a3:4f:2d:92:
                    b5:e2:d8:f1:67:66:7a:4e:9a:06:82:49:34:29:4b:
                    89:4e:23:5e:27:b0:d1:f4:77:73:5e:44:2e:6d:fb:
                    f2:28:61:71:50:86:7a:0e:5f:c7:a6:0c:26:5c:c4:
                    a4:35:4d:39:be:16:26:50:0d:ad:53:71:08:d4:22:
                    9c:59:b2:29:88:0b:41:5d:d5:60:d1:c8:40:84:48:
                    7d:a6:8e:09:7e:8c:39:b4:a7:5e:48:cd:18:63:4e:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:11:8F:F3:38:EE:83:E1:A8:D3:57:EB:28:C4:0A:0D:EA:51:4E:91
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:df:6b:33:cb:a9:27:76:3c:64:a0:bb:e9:69:87:00:34:
         49:49:84:78:ae:a6:ff:b6:6f:c3:25:03:14:7d:c4:9c:4c:6d:
         8c:de:1c:92:f6:a2:94:0e:61:4f:2a:fd:d6:8e:80:b7:2a:8d:
         38:9b:f8:ef:ce:95:0b:b8:8a:46:6b:64:a4:06:f3:3f:2b:38:
         12:e5:2b:31:2b:41:aa:65:6e:4b:dc:ed:84:3d:f3:a3:4b:1a:
         c0:58:d3:4d:4b:e3:5f:6c:a7:59:00:76:ad:65:21:6d:2a:ce:
         04:44:c4:0a:2b:26:b0:cd:49:42:f8:b6:ee:47:7e:9e:52:1e:
         12:a4:a0:af:32:b2:8b:c8:52:41:30:23:88:14:1b:9e:3a:36:
         6d:28:c3:99:13:2a:0a:75:a8:44:61:04:3a:36:c7:e7:7c:2d:
         2c:c5:25:f1:d2:ea:a3:12:75:72:b6:40:91:c4:09:77:2d:1e:
         01:6b:5f:3a:22:6d:64:1e:35:5f:2d:e5:47:10:ec:ff:3f:3f:
         d8:68:dd:9e:11:d9:2b:7c:c6:1f:1c:65:1c:36:bc:2d:c3:84:
         20:14:84:2d:9d:32:e4:2e:ae:91:2f:ad:a1:77:6d:cb:de:4f:
         a3:b0:64:01:04:fb:f5:58:a8:57:72:64:e0:c6:7d:38:97:ca:
         05:78:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:11:27 2025 by rpki-client