Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233332e3139382e302f32332d3233203d3e20323733363833.roa
File:                     34352e3233332e3139382e302f32332d3233203d3e20323733363833.roa (raw, json)
Hash identifier:          +NNmPlXklynSI6TZkP5VQJRx0PzJJ9hXCzYOU5uBJdM=
Subject key identifier:   63:35:2F:D6:E8:92:63:40:47:DD:EA:AB:6B:E9:7A:46:B5:55:E5:E5
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       0C70A14BD527DA406778FD769DF1307F58B2C019
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233332e3139382e302f32332d3233203d3e20323733363833.roa
Signing time:             Tue 26 Nov 2024 08:05:35 +0000
ROA not before:           Tue 26 Nov 2024 08:00:35 +0000
ROA not after:            Tue 25 Nov 2025 08:05:35 +0000
asID:                     273683
IP address blocks:        45.233.198.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:70:a1:4b:d5:27:da:40:67:78:fd:76:9d:f1:30:7f:58:b2:c0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Nov 26 08:00:35 2024 GMT
            Not After : Nov 25 08:05:35 2025 GMT
        Subject: CN=63352FD6E892634047DDEAAB6BE97A46B555E5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:f4:a1:70:dd:83:77:ad:be:6e:74:c5:66:
                    b8:fa:19:84:6f:3a:e2:bc:cd:89:da:0c:b3:ac:5f:
                    71:17:a8:16:e2:ee:b7:9a:c3:7b:44:e9:11:16:c8:
                    2a:33:39:8d:e3:7f:1c:36:99:ac:ac:21:b5:a5:20:
                    96:69:53:c9:5f:a0:3c:b6:33:91:0f:28:9c:70:1f:
                    88:0a:fa:e8:f2:58:18:89:f6:d9:bc:b5:e9:90:e0:
                    ea:81:66:6b:58:69:55:8b:f8:36:05:35:32:48:97:
                    ff:4d:68:75:c4:ee:29:8c:ae:91:61:63:46:c6:69:
                    6f:7c:57:45:40:eb:9e:dd:f6:2b:68:3c:74:fe:65:
                    26:6a:42:5b:fc:54:8a:b8:e6:74:6a:e7:42:26:2a:
                    07:f3:eb:13:8b:09:2a:a5:40:a0:76:b0:7f:f7:d8:
                    58:1e:37:37:e9:44:d3:de:39:ed:8f:c3:f6:8d:da:
                    26:de:1f:6d:46:c1:57:69:b7:dd:51:60:32:b2:9e:
                    de:0d:89:0a:73:b9:c8:48:f7:c3:0f:3a:ae:36:4e:
                    38:24:e6:52:a0:33:2c:77:a8:d2:35:77:f7:ad:f7:
                    b7:7b:87:f3:7b:72:d8:b8:51:92:27:97:a3:63:5d:
                    7d:6d:4f:df:cf:b1:f6:c0:dd:55:c0:a7:91:65:d7:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:35:2F:D6:E8:92:63:40:47:DD:EA:AB:6B:E9:7A:46:B5:55:E5:E5
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/34352e3233332e3139382e302f32332d3233203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:70:5b:59:38:a2:de:2e:b7:58:89:f7:c7:a9:44:24:1d:2e:
         fb:51:c3:3c:d9:df:34:0d:49:88:5b:95:41:df:2e:54:b7:e4:
         08:bd:f9:ba:05:8f:4e:86:45:86:06:fa:69:bb:22:a0:c5:22:
         e5:c5:7e:63:53:18:40:f9:e3:0e:f2:c9:5b:a5:2e:d1:42:9f:
         c4:c3:ef:f7:f6:69:be:87:80:30:ed:5f:96:11:52:85:02:1e:
         fd:e3:66:97:fc:3e:36:5c:2f:26:1c:ea:e0:6a:a4:6b:51:51:
         f0:72:6c:3b:0c:db:c2:5a:fd:58:0d:1e:91:66:a2:33:57:a6:
         bd:72:ce:84:f7:e5:52:8c:d3:85:88:15:27:0e:c2:c3:a5:0b:
         6a:aa:f4:87:3a:d0:8b:82:52:f4:33:d3:fd:2e:cd:52:2d:4e:
         e9:6a:75:b6:55:55:16:b6:b4:88:79:c4:20:49:da:1a:ae:bd:
         e1:c2:06:3f:62:a0:09:7c:de:22:c9:51:c2:e3:c1:6c:92:08:
         b0:40:a2:51:49:bc:d9:86:64:5c:07:fb:c5:17:79:36:13:2d:
         45:08:90:9a:54:b2:0e:db:53:78:e0:68:e2:10:7b:68:53:57:
         74:26:ff:3c:16:0b:5c:31:37:17:51:f5:91:f2:f8:a1:7f:2e:
         91:84:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:52 2025 by rpki-client