Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/34352e3233362e36342e302f32342d3234203d3e20323638323234.roa
File:                     34352e3233362e36342e302f32342d3234203d3e20323638323234.roa (raw, json)
Hash identifier:          aURMqbypvah7Aj3QwX3C33gucNePYwAZAeTVpenwqDo=
Subject key identifier:   5B:F3:12:13:9F:80:73:AA:37:D4:EF:F2:1C:31:C9:D3:E9:8D:40:C2
Certificate issuer:       /CN=A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E
Certificate serial:       6F0039937007F136786DCF213FE08F3176D27010
Authority key identifier: A1:6A:1A:DA:A6:EB:B4:CA:76:94:34:68:F8:AB:79:D0:3B:C7:AE:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/34352e3233362e36342e302f32342d3234203d3e20323638323234.roa
Signing time:             Thu 13 Feb 2025 19:09:48 +0000
ROA not before:           Thu 13 Feb 2025 19:04:48 +0000
ROA not after:            Thu 12 Feb 2026 19:09:48 +0000
asID:                     268224
IP address blocks:        45.236.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:00:39:93:70:07:f1:36:78:6d:cf:21:3f:e0:8f:31:76:d2:70:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E
        Validity
            Not Before: Feb 13 19:04:48 2025 GMT
            Not After : Feb 12 19:09:48 2026 GMT
        Subject: CN=5BF312139F8073AA37D4EFF21C31C9D3E98D40C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:d7:68:cb:1a:0c:16:87:d3:3d:5e:b4:9f:
                    54:5d:1b:c7:e4:2c:df:9a:35:5a:4b:df:a4:a6:22:
                    31:95:06:fc:2a:08:ac:c9:46:db:c4:3b:ce:dc:4e:
                    1e:61:76:e4:0b:02:b9:ff:7d:d2:7f:45:a2:ec:98:
                    82:b0:99:2a:73:fb:44:f7:46:35:1c:4f:ce:c7:e3:
                    a0:df:92:10:95:24:4e:8a:b7:1a:b5:92:9b:b1:ee:
                    3c:da:3e:db:bf:12:2f:0c:1e:09:66:fe:70:8b:fa:
                    c1:b0:18:4d:d0:8a:84:70:6e:91:65:79:2d:4a:7e:
                    6c:0b:66:eb:65:14:a9:c6:dc:8b:ed:fa:8a:a0:b5:
                    8d:50:2e:ee:df:e4:61:b1:ef:3e:2c:30:a2:46:af:
                    3e:64:78:55:ce:66:6d:7f:ae:c5:3e:f0:ba:d7:2b:
                    98:a5:69:11:c7:2d:c0:70:94:30:53:9e:af:44:91:
                    6d:fc:04:f2:1b:d0:5d:98:50:ca:35:73:eb:a4:8b:
                    f4:97:11:97:46:14:ca:ed:b9:9b:68:00:45:44:f1:
                    9a:24:9f:76:14:90:8f:0b:5a:40:4d:01:a8:5a:47:
                    14:cd:02:e1:9b:4a:3a:0f:b4:81:af:9c:9a:39:60:
                    89:c9:8f:88:4c:58:6a:37:13:3f:88:00:bf:8c:51:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F3:12:13:9F:80:73:AA:37:D4:EF:F2:1C:31:C9:D3:E9:8D:40:C2
            X509v3 Authority Key Identifier:
                keyid:A1:6A:1A:DA:A6:EB:B4:CA:76:94:34:68:F8:AB:79:D0:3B:C7:AE:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/34352e3233362e36342e302f32342d3234203d3e20323638323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f8:e7:f2:d2:68:e9:68:d1:99:27:ca:ab:4c:5f:3c:a0:fc:
         16:66:7c:fd:1a:c1:bd:fb:09:1d:e2:ad:24:74:2f:d4:37:1a:
         a2:96:0b:71:cd:dc:22:60:03:dc:93:41:3a:c7:59:00:ce:17:
         7d:94:93:99:ef:09:0a:d5:ea:e6:40:9e:04:c9:2d:5e:37:75:
         79:18:e4:a9:cf:e6:f1:52:a9:60:75:13:25:3f:51:3c:3c:3b:
         2b:ae:91:f8:5b:33:4f:c4:53:c0:ae:b9:d4:86:8d:6e:d8:10:
         bb:ff:4d:87:e2:80:c1:66:06:ab:22:12:3d:a6:46:80:a3:41:
         b0:13:51:4a:ed:17:24:88:50:91:c3:2c:8f:77:ab:ba:d6:a8:
         46:e4:ea:e2:a9:e0:5d:04:d2:aa:9c:a2:14:26:59:7a:fb:2b:
         29:76:d0:72:88:ba:7b:f7:7c:89:5e:f6:71:05:9d:f3:d5:1b:
         7b:06:9b:b4:fc:27:2d:aa:af:da:39:b5:e9:d9:ec:b9:77:ff:
         40:d4:e2:ce:9b:1c:79:bd:13:cc:d7:8c:5c:80:4e:fb:8a:b1:
         8d:6c:10:ac:6b:91:0c:68:7e:87:84:b1:3d:4f:90:c6:f9:a6:
         d1:92:00:df:98:53:21:43:9c:e2:78:05:94:34:98:ef:73:bc:
         d8:03:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:30 2025 by rpki-client