Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139322e302f32332d3234203d3e20323636363037.roa
File:                     34352e372e3139322e302f32332d3234203d3e20323636363037.roa (raw, json)
Hash identifier:          W3IQ2VJLFyER2GCVlD00evwqgX218pTHSHxtNDVjhPw=
Subject key identifier:   DD:8C:BE:08:AB:A9:90:3A:87:29:9B:A7:80:A6:E5:76:AA:97:D0:BC
Certificate issuer:       /CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
Certificate serial:       06FA30C139EF9ACDF58A319D9F57C4D8EBC4154D
Authority key identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139322e302f32332d3234203d3e20323636363037.roa
Signing time:             Wed 05 Mar 2025 22:06:12 +0000
ROA not before:           Wed 05 Mar 2025 22:01:12 +0000
ROA not after:            Wed 04 Mar 2026 22:06:12 +0000
asID:                     266607
IP address blocks:        45.7.192.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fa:30:c1:39:ef:9a:cd:f5:8a:31:9d:9f:57:c4:d8:eb:c4:15:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
        Validity
            Not Before: Mar  5 22:01:12 2025 GMT
            Not After : Mar  4 22:06:12 2026 GMT
        Subject: CN=DD8CBE08ABA9903A87299BA780A6E576AA97D0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:30:08:17:5d:a2:54:21:37:43:bb:b4:19:
                    47:c5:96:64:ff:ab:f9:bb:39:a3:d6:34:2b:81:cb:
                    7b:55:22:d5:dd:10:d8:ed:67:3f:e8:57:3e:2d:cc:
                    c2:6e:43:0b:55:43:6c:b3:99:21:7f:70:f9:83:a4:
                    de:7e:07:fa:e3:db:3b:0c:4f:3c:d9:d4:81:f3:a9:
                    22:0b:eb:b2:ed:b2:4c:bf:51:bf:7d:ea:27:03:05:
                    f8:0d:57:dd:62:b3:f0:7e:47:0f:e4:89:ab:89:8e:
                    ac:29:a0:aa:e5:97:6c:f6:cb:de:8c:91:4e:ee:e6:
                    b7:ac:13:c9:f9:92:8b:88:0d:60:2e:b5:91:15:d7:
                    b8:e9:be:72:f2:97:a5:20:9b:3f:71:6a:ec:76:2f:
                    81:b6:07:de:f1:b5:d9:a1:1e:69:1b:79:2f:af:ba:
                    a4:5a:8e:72:43:d7:4e:99:f7:74:d4:d2:27:ee:a8:
                    10:d8:03:21:e6:e4:16:5a:fa:1e:5f:1c:5e:ee:93:
                    a6:94:11:ae:17:30:cf:d9:e1:fe:61:e9:fd:a2:99:
                    58:d5:14:1e:65:5c:99:11:da:6c:fe:6f:5a:84:de:
                    c2:72:fd:77:27:f0:54:d1:4b:2c:ab:5f:ec:cb:93:
                    38:fb:73:26:b2:61:38:3f:1c:33:47:80:7c:51:8e:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8C:BE:08:AB:A9:90:3A:87:29:9B:A7:80:A6:E5:76:AA:97:D0:BC
            X509v3 Authority Key Identifier:
                keyid:51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/34352e372e3139322e302f32332d3234203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:09:3f:0e:1d:54:a6:65:3b:78:10:af:20:2f:ae:44:d3:a1:
         0d:be:2c:41:9e:39:fd:ee:06:1d:d1:30:62:20:9d:87:7c:7f:
         49:29:28:d4:0f:64:b5:47:8b:a1:66:77:cb:02:b0:22:f8:55:
         27:28:79:93:c6:b5:51:a7:ea:8e:45:7c:2b:00:62:ee:42:54:
         df:68:1f:c4:96:7e:23:ea:e2:15:c9:dd:d2:24:bd:b9:c3:5c:
         63:52:38:1c:13:c1:21:0f:cc:4e:4a:bb:97:d4:32:30:4f:32:
         14:60:22:b9:f1:bc:d1:21:d3:8f:ee:d1:fe:e9:df:7b:8b:d4:
         7c:2c:0d:8a:22:62:66:e0:04:70:43:72:73:53:1f:95:34:57:
         10:65:d3:81:07:e4:0f:67:44:00:8e:d6:ad:52:4d:38:b4:ed:
         f1:92:e3:4e:cb:42:16:42:67:84:a1:07:8a:4c:c1:6d:98:6e:
         b2:3e:00:b6:cb:96:f4:5e:95:37:66:15:a3:21:3a:be:82:5e:
         fa:14:14:3f:b7:6f:65:28:d7:3f:84:fa:88:29:24:b3:1a:15:
         9b:36:d4:75:ef:3e:d8:73:55:19:22:6f:4e:4c:92:80:4f:9c:
         6e:e3:65:05:b0:2f:6e:7d:36:22:eb:1f:b2:a1:a6:34:07:9d:
         61:f4:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:12 2025 by rpki-client