Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/34352e3233362e36372e302f32342d3234203d3e20323638323234.roa
File:                     34352e3233362e36372e302f32342d3234203d3e20323638323234.roa (raw, json)
Hash identifier:          3zOBHTflBlYZ4Y3GotdgnhUgpdQu9+LQG16fn2e0XnM=
Subject key identifier:   4B:56:62:13:0C:11:09:74:05:6A:7D:4A:9D:4C:20:9E:E1:D0:83:D4
Certificate issuer:       /CN=A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E
Certificate serial:       75A8F8C29A2CCF8AB577321679ECC85A1C179494
Authority key identifier: A1:6A:1A:DA:A6:EB:B4:CA:76:94:34:68:F8:AB:79:D0:3B:C7:AE:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/34352e3233362e36372e302f32342d3234203d3e20323638323234.roa
Signing time:             Thu 13 Feb 2025 19:09:48 +0000
ROA not before:           Thu 13 Feb 2025 19:04:48 +0000
ROA not after:            Thu 12 Feb 2026 19:09:48 +0000
asID:                     268224
IP address blocks:        45.236.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a8:f8:c2:9a:2c:cf:8a:b5:77:32:16:79:ec:c8:5a:1c:17:94:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E
        Validity
            Not Before: Feb 13 19:04:48 2025 GMT
            Not After : Feb 12 19:09:48 2026 GMT
        Subject: CN=4B5662130C110974056A7D4A9D4C209EE1D083D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:41:db:13:c0:93:95:34:94:c1:9f:6f:dc:
                    57:90:81:21:4a:73:a7:ab:c6:1a:59:80:e5:e8:e4:
                    93:46:79:26:af:a8:7c:fe:c3:05:d9:20:eb:a9:03:
                    54:e6:98:68:51:49:52:e0:aa:ce:94:5a:8f:a1:eb:
                    99:8a:33:f9:b8:0a:c9:ba:53:bf:24:ad:f3:f7:c3:
                    8f:e1:14:3e:b9:80:0f:ac:52:c0:5f:9b:1b:7e:43:
                    2f:43:ca:19:1b:1f:8f:ef:06:d3:12:c4:45:56:9b:
                    39:70:9d:ae:6d:fe:8b:75:6c:0a:90:c9:57:7f:22:
                    c2:42:3b:25:60:8a:d2:ad:ac:af:f3:05:32:91:49:
                    10:fe:f3:39:87:1a:fc:6f:3d:2d:6c:6c:db:46:9b:
                    0c:49:a6:b7:3c:98:04:a2:b2:36:d3:9a:bd:15:3f:
                    b5:bf:fc:c3:5d:33:95:52:d3:a2:55:b8:17:71:c3:
                    0b:34:bc:e7:cf:5a:a5:02:78:01:43:93:1f:81:f8:
                    bd:35:33:c9:f8:16:41:de:e8:d0:33:49:93:96:ca:
                    b4:54:35:e9:4a:15:e3:1d:c9:c7:e5:04:7c:06:be:
                    3c:81:ab:8e:74:c9:f1:aa:76:21:cc:7a:b6:fa:f8:
                    b4:16:6e:3a:1e:7c:37:6e:2e:2b:0d:9b:ee:82:97:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:62:13:0C:11:09:74:05:6A:7D:4A:9D:4C:20:9E:E1:D0:83:D4
            X509v3 Authority Key Identifier:
                keyid:A1:6A:1A:DA:A6:EB:B4:CA:76:94:34:68:F8:AB:79:D0:3B:C7:AE:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/34352e3233362e36372e302f32342d3234203d3e20323638323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:5d:5d:e4:f8:8c:d3:7f:68:37:69:6d:82:5b:2b:68:63:d8:
         ba:b7:b3:ad:da:94:36:a5:36:a5:33:96:68:4b:0d:fe:bd:e8:
         25:4a:b3:4d:cd:9c:0d:b1:f7:9d:4d:31:c7:54:79:39:86:87:
         f3:b9:2c:bd:c7:92:89:ad:02:78:57:06:74:7f:00:06:a2:4e:
         d1:25:40:45:93:3c:3c:02:59:e3:06:d2:9c:03:dd:6a:40:3a:
         08:ac:bd:5e:52:23:da:2a:d2:ed:8b:be:19:26:e9:8b:67:30:
         1f:c8:64:fb:54:a3:92:fe:e0:cf:b1:b6:c3:04:4e:68:ae:2e:
         d8:ca:e7:31:61:0f:99:e7:61:62:51:71:f5:81:b0:eb:4f:73:
         6e:d4:99:a3:8f:58:39:b3:32:60:07:e1:9c:d9:14:09:27:b4:
         a7:8e:24:99:ed:f7:1f:18:83:8b:b6:50:7d:c1:87:90:ea:2e:
         98:18:d5:24:45:7f:4b:fd:f8:56:cb:a5:97:02:55:2b:e9:7f:
         b3:3b:22:45:b6:7a:0a:ca:2e:dd:3d:34:79:48:ee:3f:a2:e4:
         73:80:06:d0:39:43:4f:26:01:73:58:2b:0d:39:ea:e4:4e:29:
         b7:5e:ea:ef:64:a8:32:7a:c7:cd:c6:3f:6b:23:eb:a5:ac:14:
         c2:10:8f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:03 2025 by rpki-client