Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132362e302f32342d3234203d3e20323637333734.roa
File:                     34352e3233342e3132362e302f32342d3234203d3e20323637333734.roa (raw, json)
Hash identifier:          yfzf7oe6gUJJwXBxZs9/fxHjPzCBUpgQ+QZ+Vme1yhM=
Subject key identifier:   F4:B1:64:FE:25:81:D5:4B:AF:E8:FC:6F:09:58:E7:E5:E8:84:2A:83
Certificate issuer:       /CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
Certificate serial:       2EDEA18B9D7232E1A93A7EFA2BB265A471390CE6
Authority key identifier: C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132362e302f32342d3234203d3e20323637333734.roa
Signing time:             Wed 31 May 2023 15:01:55 +0000
ROA not before:           Wed 31 May 2023 14:56:55 +0000
ROA not after:            Wed 29 May 2024 15:01:55 +0000
asID:                     267374
IP address blocks:        45.234.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:de:a1:8b:9d:72:32:e1:a9:3a:7e:fa:2b:b2:65:a4:71:39:0c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
        Validity
            Not Before: May 31 14:56:55 2023 GMT
            Not After : May 29 15:01:55 2024 GMT
        Subject: CN=F4B164FE2581D54BAFE8FC6F0958E7E5E8842A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ef:c3:86:53:a5:e0:b7:43:e9:b8:02:66:bc:
                    8a:a5:cd:25:c6:58:cc:66:b1:7f:a7:3b:a7:07:ad:
                    c1:eb:5c:23:cd:34:22:05:ef:4b:b0:fa:9b:e4:60:
                    5c:6f:9f:9c:86:93:c2:8c:e3:9b:0c:93:10:9b:f7:
                    92:1a:af:41:8d:97:e7:54:8d:f7:bd:65:6c:09:1b:
                    a5:6b:09:b9:1b:61:ad:f4:24:2c:75:54:6f:9b:2d:
                    15:3e:ba:6f:f8:50:1d:0a:48:32:0a:0a:79:5f:25:
                    4b:f8:17:17:77:58:2c:b1:07:38:fb:5e:69:b1:ba:
                    70:32:f9:c2:7f:ad:00:72:2a:86:b8:ad:7e:8e:a4:
                    03:a5:15:dc:18:b9:0f:b1:03:22:9a:38:57:2c:39:
                    69:41:18:1e:08:6b:f0:f6:0a:94:a7:51:39:7c:bc:
                    2e:8f:33:e8:f2:8a:f1:11:f0:3f:17:1e:a3:09:75:
                    56:a2:ab:a4:ef:67:c6:ea:8d:2c:2e:37:99:ec:e6:
                    0d:f9:ca:a4:b3:e0:3a:17:9c:9c:90:ef:0b:7e:12:
                    74:2b:a2:76:81:f6:b4:68:2b:03:9a:f8:83:ba:e9:
                    bd:a0:d1:a1:f7:74:0d:87:fa:7c:b4:50:3f:05:c5:
                    6e:f0:78:83:47:9d:07:3e:13:2c:03:29:c5:48:38:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B1:64:FE:25:81:D5:4B:AF:E8:FC:6F:09:58:E7:E5:E8:84:2A:83
            X509v3 Authority Key Identifier:
                keyid:C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/34352e3233342e3132362e302f32342d3234203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:d5:35:95:37:d8:5b:01:b3:35:4b:08:16:aa:56:59:04:
         9a:36:fe:bd:e8:98:99:74:f7:3a:8e:b1:21:d3:48:31:76:e6:
         cf:75:91:78:99:fe:89:94:b4:cc:51:72:3d:5f:6d:1a:a6:0e:
         a9:99:3d:84:13:4b:a2:b1:fd:9d:af:20:2b:76:da:4d:f3:b5:
         d3:da:6f:ad:54:36:a4:95:02:55:af:2e:c7:1d:2f:3c:5b:27:
         da:21:01:ac:75:75:cc:ab:38:4e:d3:63:2c:3b:6b:30:53:70:
         05:ff:36:cb:c9:b4:d7:bd:8b:a7:8c:b7:75:a8:2f:15:50:2a:
         4c:e0:e9:6b:ab:c2:81:69:da:90:08:9c:98:c2:e0:67:c9:9f:
         bd:c2:d4:b0:bf:5f:25:3e:65:34:80:6c:ad:f4:38:63:eb:c6:
         09:25:25:6c:6d:56:87:f6:d0:19:18:16:9e:7b:1c:04:a0:67:
         bd:7c:84:20:79:96:d3:cb:96:6a:d6:e0:76:d1:80:d2:ba:6e:
         92:2d:91:62:94:c5:7f:88:4a:4e:0c:75:d3:6a:78:df:0e:a4:
         e6:98:69:63:a3:fa:26:e3:07:58:bf:2f:e5:97:3f:e1:76:a7:
         31:18:d0:ca:24:ff:76:87:a7:70:c4:cc:f0:be:3a:a7:52:9b:
         c4:d3:3b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:39 2025 by rpki-client