Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa
File:                     34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (raw, json)
Hash identifier:          Bhu/eGNOOWFc2ep8aUehLXvNs4ymREZ2pdLGTh+BKL4=
Subject key identifier:   79:09:96:D8:65:34:2E:5D:AC:2A:7D:AE:74:92:F7:3F:50:01:67:F7
Certificate issuer:       /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Certificate serial:       40CEC13859EA915BFE021AA590D7F46FA7225FB9
Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa
Signing time:             Thu 06 Mar 2025 04:01:05 +0000
ROA not before:           Thu 06 Mar 2025 03:56:05 +0000
ROA not after:            Thu 05 Mar 2026 04:01:05 +0000
asID:                     267324
IP address blocks:        45.233.132.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ce:c1:38:59:ea:91:5b:fe:02:1a:a5:90:d7:f4:6f:a7:22:5f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
        Validity
            Not Before: Mar  6 03:56:05 2025 GMT
            Not After : Mar  5 04:01:05 2026 GMT
        Subject: CN=790996D865342E5DAC2A7DAE7492F73F500167F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:99:d3:89:97:48:22:a2:86:02:e0:4e:ba:
                    6f:95:7d:18:7c:57:f6:b4:34:1c:88:24:90:f2:f2:
                    41:3b:3a:64:75:8f:05:19:04:9e:36:fa:c7:b6:ce:
                    ac:e4:7f:03:27:2e:4f:b3:fb:f5:c3:9c:e3:b4:61:
                    5c:df:0f:70:cc:df:91:0a:f1:e1:0f:15:d5:51:cd:
                    a1:85:80:ff:c9:6c:72:d3:fe:41:8b:ab:2c:82:a6:
                    1b:08:90:5a:a9:27:83:d9:c4:fc:e0:6f:54:16:00:
                    f6:36:58:e0:6e:21:f0:29:31:2d:ed:7f:73:22:e4:
                    40:44:3d:33:8e:d9:69:bc:9f:b6:bd:e7:2f:56:1a:
                    8d:6b:99:79:37:9b:3f:a4:e4:e7:fb:96:bd:cf:5d:
                    82:21:94:59:b3:23:a4:15:1e:9d:1a:e9:b6:52:5e:
                    00:5f:93:4d:be:cc:41:ee:45:d7:ca:fc:ea:85:e4:
                    be:9a:de:ab:6f:ac:99:38:a3:31:29:41:6a:07:97:
                    42:c5:b4:80:bc:01:82:ce:76:34:b5:fd:c0:2c:f1:
                    c7:5f:30:0f:a2:ee:2b:86:2c:c8:a2:26:85:d3:d3:
                    5d:64:ce:3e:d9:35:c3:e1:36:a9:07:ee:b4:42:e9:
                    7f:e0:c3:d4:da:05:e5:a9:50:3a:ba:95:e9:fb:c2:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:09:96:D8:65:34:2E:5D:AC:2A:7D:AE:74:92:F7:3F:50:01:67:F7
            X509v3 Authority Key Identifier:
                keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:ca:17:28:b1:4d:de:7d:a9:a9:a9:d5:c2:70:c9:dc:76:13:
         9d:10:ea:2c:cd:e0:76:c9:27:9e:f6:47:bc:9c:0c:d7:e3:d8:
         ad:f7:e7:1f:6e:56:9f:c9:b0:05:5c:9b:5e:1e:64:8c:90:59:
         9f:bd:30:b9:cf:ca:ed:b1:d2:61:a0:c4:b4:3d:60:1e:fc:e5:
         62:94:bb:b2:63:5c:d8:c3:fc:08:b1:c0:41:9f:5c:e8:ea:4c:
         2b:ba:91:3f:53:c4:60:8c:24:2c:9a:4f:ed:6f:c6:bb:3b:e2:
         2c:a9:25:c3:8f:ff:46:34:be:d1:0f:bd:60:5c:d8:24:0c:13:
         35:f3:ba:57:a4:79:2f:56:e3:31:58:b0:7e:68:94:3d:32:3b:
         d7:f7:39:d2:c7:fb:b1:1d:85:fd:76:e7:fe:ae:bb:63:29:fb:
         53:f3:c7:5b:76:fa:a9:7b:aa:db:a5:2c:ed:27:8e:3a:16:4c:
         09:96:25:f3:61:18:74:f4:c5:94:c9:84:ce:c2:e3:39:0e:93:
         25:43:ba:3c:c0:1a:a7:e2:aa:00:9f:46:58:ae:9d:95:0b:f8:
         7f:90:33:25:cc:51:05:89:9d:a0:f4:4c:0d:07:31:a9:16:91:
         24:e5:31:f5:92:29:54:1d:16:d0:cb:eb:fb:a8:c0:c8:d9:2d:
         3b:9f:b1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:19 2025 by rpki-client