Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32332d3233203d3e20323637353536.roa
File:                     34352e37302e302e302f32332d3233203d3e20323637353536.roa (raw, json)
Hash identifier:          Gw35gNmcGeorI8fbGqt4xrD30Rx2uukmqSpslySRq0I=
Subject key identifier:   5E:68:2D:D8:20:EB:C5:C5:3C:52:C4:84:07:30:A5:D3:A8:FB:42:72
Certificate issuer:       /CN=E739C78FFBB43867661E551F2B04833E09292100
Certificate serial:       72F1141FA0F2E5E2B1F37DF1CB0CDA7A840F13E9
Authority key identifier: E7:39:C7:8F:FB:B4:38:67:66:1E:55:1F:2B:04:83:3E:09:29:21:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E739C78FFBB43867661E551F2B04833E09292100.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32332d3233203d3e20323637353536.roa
Signing time:             Mon 03 Mar 2025 11:16:03 +0000
ROA not before:           Mon 03 Mar 2025 11:11:03 +0000
ROA not after:            Mon 02 Mar 2026 11:16:03 +0000
asID:                     267556
IP address blocks:        45.70.0.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f1:14:1f:a0:f2:e5:e2:b1:f3:7d:f1:cb:0c:da:7a:84:0f:13:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E739C78FFBB43867661E551F2B04833E09292100
        Validity
            Not Before: Mar  3 11:11:03 2025 GMT
            Not After : Mar  2 11:16:03 2026 GMT
        Subject: CN=5E682DD820EBC5C53C52C4840730A5D3A8FB4272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:09:65:a4:6a:dc:df:7f:a7:15:43:5e:ab:
                    87:eb:ba:5c:66:b8:dc:50:43:2c:ca:db:46:fd:31:
                    b1:ab:65:c6:a6:f0:2a:ff:20:4f:34:8d:b5:98:ed:
                    c1:67:44:33:30:81:85:17:d2:05:96:4e:12:28:a8:
                    ea:6f:6c:ac:a1:54:31:8c:a1:0a:1a:a7:95:f2:61:
                    f1:24:07:d3:c0:4e:21:a9:78:0e:bb:50:88:ac:2e:
                    33:33:57:b3:9c:31:33:33:b8:1b:e2:f5:5f:1d:b5:
                    a3:c5:88:9c:26:b8:1f:d8:66:04:d6:1b:7f:7e:ea:
                    6f:1e:4e:72:ba:88:7e:eb:27:aa:19:92:c4:2d:04:
                    d6:5f:da:04:b0:bc:c7:5e:32:e2:f0:fc:87:89:f9:
                    2e:0e:49:fd:b6:84:8d:e3:0b:e5:4e:24:f0:47:92:
                    1c:36:61:dd:ec:a1:b9:8d:43:34:7c:10:50:0b:96:
                    dc:ce:d4:6c:d4:fc:ab:74:10:45:64:27:5e:d5:c1:
                    6a:eb:94:f3:dd:62:d7:1a:92:de:78:2c:96:42:87:
                    85:e7:3a:58:3a:57:22:a2:cd:18:47:91:70:db:37:
                    0a:74:f0:11:5f:c9:4d:19:d1:7a:93:2c:27:78:8c:
                    8f:7b:a7:c9:fe:8e:5e:19:55:ea:bd:f1:61:b4:f6:
                    e5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:68:2D:D8:20:EB:C5:C5:3C:52:C4:84:07:30:A5:D3:A8:FB:42:72
            X509v3 Authority Key Identifier:
                keyid:E7:39:C7:8F:FB:B4:38:67:66:1E:55:1F:2B:04:83:3E:09:29:21:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E739C78FFBB43867661E551F2B04833E09292100.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E739C78FFBB43867661E551F2B04833E09292100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32332d3233203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:17:28:87:32:69:21:fc:ea:97:5c:e4:3c:7a:45:4d:6a:42:
         8c:a1:d4:1e:77:0d:53:85:52:b3:ee:4c:23:d6:98:a4:45:00:
         48:0d:d8:44:89:34:f2:3d:f1:a4:19:dc:90:0a:6b:ea:d2:32:
         fc:d2:af:4e:2a:6b:1e:21:6d:eb:29:a3:ad:94:10:1e:6b:27:
         a2:c4:af:d9:8f:1f:96:3a:d8:66:07:3c:ed:d9:7d:aa:d1:14:
         02:80:b1:6c:a3:42:d6:91:dd:ab:b7:ef:1d:56:91:19:26:5e:
         b0:69:be:06:29:37:d1:ac:60:71:8f:05:6a:8d:f2:28:87:35:
         c8:b9:0e:47:cd:f5:d9:ba:f2:ea:6b:e1:4a:ad:91:f3:79:d8:
         bf:6d:9f:0e:30:a8:09:f5:fe:e3:f8:a5:29:1f:3a:69:09:3a:
         56:e9:87:62:12:18:9f:37:6c:a2:0e:3b:e3:f2:13:61:6b:07:
         89:da:69:d1:c2:f6:06:63:f4:70:d8:20:f1:51:de:4d:01:64:
         54:0f:44:e0:55:f8:c0:2d:ab:e0:f3:fe:53:89:9c:cc:d2:24:
         bb:8f:db:3d:6f:94:7d:85:08:6c:a1:46:41:e2:f9:c2:1c:d1:
         99:73:e0:74:80:de:9a:b8:3e:8f:24:84:bb:5d:b0:34:96:0c:
         bf:5e:07:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:05:08 2025 by rpki-client