Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e362e302f32342d3234203d3e20323638303830.roa
File:                     34352e3136392e362e302f32342d3234203d3e20323638303830.roa (raw, json)
Hash identifier:          VjCeFBpmjmb9rB7ewkGp76AtsTSjeELn3rPInrrQczs=
Subject key identifier:   CF:BA:B2:3E:83:AC:C2:F6:F1:69:48:05:8C:47:90:44:4E:E6:AD:27
Certificate issuer:       /CN=F8A83EB345453A5C4B852AA23BACC30F1F06BFFE
Certificate serial:       5640F45B53EF34ED2DCAE5FAFDFF5774C64404F5
Authority key identifier: F8:A8:3E:B3:45:45:3A:5C:4B:85:2A:A2:3B:AC:C3:0F:1F:06:BF:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A83EB345453A5C4B852AA23BACC30F1F06BFFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e362e302f32342d3234203d3e20323638303830.roa
Signing time:             Thu 04 Jul 2024 17:32:20 +0000
ROA not before:           Thu 04 Jul 2024 17:27:20 +0000
ROA not after:            Thu 03 Jul 2025 17:32:20 +0000
asID:                     268080
IP address blocks:        45.169.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:40:f4:5b:53:ef:34:ed:2d:ca:e5:fa:fd:ff:57:74:c6:44:04:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A83EB345453A5C4B852AA23BACC30F1F06BFFE
        Validity
            Not Before: Jul  4 17:27:20 2024 GMT
            Not After : Jul  3 17:32:20 2025 GMT
        Subject: CN=CFBAB23E83ACC2F6F16948058C4790444EE6AD27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:e5:6b:f8:20:45:bb:19:24:b2:37:ec:96:
                    69:e7:41:84:b3:68:02:2b:ba:90:12:27:be:0a:9f:
                    e4:ce:e2:d2:b0:c3:0c:16:41:41:19:bd:33:21:a1:
                    d0:54:f8:38:de:ad:dd:97:54:4a:94:82:67:c8:74:
                    3a:1b:ce:cd:8d:eb:e4:19:63:89:50:44:01:22:ca:
                    9d:0d:30:c3:07:f8:f1:3d:d3:92:1c:78:41:40:37:
                    a5:48:24:71:d6:c3:65:48:f2:68:e6:28:7d:c4:48:
                    d4:67:3c:75:9a:29:dc:5a:c7:11:cb:fa:93:c7:c5:
                    62:ab:e3:77:fc:e7:f4:84:f5:67:26:71:d7:77:0b:
                    15:60:41:cd:ed:58:1e:98:20:be:c6:4a:4b:50:3f:
                    af:d4:08:dd:ec:ba:d6:f8:75:5e:72:b2:bb:05:b2:
                    83:2c:ac:2c:4b:19:3f:4a:37:87:c4:c6:e0:9b:aa:
                    ee:c8:48:41:e5:53:14:3c:2a:26:17:07:fe:71:ca:
                    92:0b:67:b3:56:af:df:73:bd:a2:97:18:23:d9:55:
                    e2:41:cf:86:15:da:6b:3e:c8:3e:6f:03:4d:21:6b:
                    66:de:0e:85:8e:92:ab:e0:f7:87:fd:41:bb:7c:eb:
                    a8:90:22:2f:01:48:ed:0d:ea:5a:26:ca:3c:b6:b9:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BA:B2:3E:83:AC:C2:F6:F1:69:48:05:8C:47:90:44:4E:E6:AD:27
            X509v3 Authority Key Identifier:
                keyid:F8:A8:3E:B3:45:45:3A:5C:4B:85:2A:A2:3B:AC:C3:0F:1F:06:BF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/F8A83EB345453A5C4B852AA23BACC30F1F06BFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A83EB345453A5C4B852AA23BACC30F1F06BFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e362e302f32342d3234203d3e20323638303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:7d:99:32:23:61:ec:34:3c:0a:76:75:d4:f3:39:6a:b6:
         07:64:17:56:b8:71:ac:79:18:0f:6b:39:b3:e1:d9:7c:a0:8a:
         da:49:51:8c:06:3a:55:db:8a:e4:0c:df:1f:f2:7d:38:d8:57:
         cc:f4:4f:3a:1f:0a:a3:60:10:e1:a0:19:6b:60:34:ba:0d:60:
         6e:2d:82:e5:8d:54:89:42:3f:68:8c:3d:2f:3e:86:06:62:37:
         ea:86:09:3e:86:41:99:5e:01:40:d4:03:cb:9f:56:42:a3:e6:
         c9:b3:82:41:a0:b6:6d:53:48:46:dd:74:7a:d2:1e:95:34:f9:
         a0:ae:d5:49:3a:4f:4e:2f:df:ae:93:c1:1a:9c:2f:f6:01:e0:
         de:e8:36:41:bc:2d:67:54:39:95:92:ec:4f:24:be:86:af:08:
         67:61:70:6e:e6:a3:63:d1:47:e3:27:87:4d:50:4f:62:2b:7c:
         b1:11:65:fc:0d:2a:62:17:10:08:9c:1c:4a:01:ac:80:9b:94:
         7f:15:1e:a3:44:aa:2f:66:6a:db:d3:ee:90:14:a3:ba:da:5f:
         a2:73:21:88:8c:86:7b:af:4a:94:97:4d:fb:91:a0:54:a1:81:
         3c:c1:05:13:cf:5c:c0:d8:90:e8:f7:d5:18:23:c5:9b:89:3a:
         95:25:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:39:58 2025 by rpki-client