Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e312e302f32342d3234203d3e20323632383735.roa
File:                     34352e362e312e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          MXcEKUMt7wNAXdnlOoqmDvIN6XoQL6Qm42Z1HbbmVnU=
Subject key identifier:   19:7A:70:1F:10:9B:D5:83:31:AD:B9:4E:65:43:32:50:FB:2B:20:45
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       245C7031AD55D586AB9109F0025A9591BE3CF14C
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e312e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 12:58:44 +0000
ROA not before:           Thu 02 Jan 2025 12:53:44 +0000
ROA not after:            Thu 01 Jan 2026 12:58:44 +0000
asID:                     262875
IP address blocks:        45.6.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5c:70:31:ad:55:d5:86:ab:91:09:f0:02:5a:95:91:be:3c:f1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:53:44 2025 GMT
            Not After : Jan  1 12:58:44 2026 GMT
        Subject: CN=197A701F109BD58331ADB94E65433250FB2B2045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:ee:f2:aa:e2:4a:30:ae:6b:87:63:cb:0a:
                    c3:fd:de:6a:bd:00:36:fe:78:10:55:8b:13:f3:70:
                    62:18:4f:ac:7b:a0:97:38:a1:e7:78:c5:a2:27:a3:
                    12:df:df:d5:f9:ba:dd:99:b9:be:ec:c6:d1:a1:f4:
                    36:ef:a2:51:a9:52:5d:c3:6c:66:2a:3e:48:5c:a2:
                    50:16:dc:3f:f5:60:84:35:2e:d4:71:20:b9:f9:52:
                    8d:1c:a6:d6:d7:61:47:b9:78:25:af:2e:06:c7:94:
                    f2:1a:cc:e2:8c:37:77:e6:fe:ef:9d:4d:77:10:63:
                    18:6b:a6:5e:79:0b:da:14:c5:b4:27:cb:28:38:22:
                    3f:98:79:41:4a:da:55:5f:52:3d:91:57:83:d9:88:
                    aa:f1:71:9d:0a:2d:da:71:22:dd:76:84:7b:04:6a:
                    7a:cf:c6:a1:c5:21:7d:b2:60:78:72:86:ae:29:22:
                    f2:bf:35:ec:17:de:79:e0:03:fc:5f:1d:d8:55:07:
                    67:ad:08:e9:66:cc:93:d2:6d:75:2b:3f:8a:81:56:
                    36:0a:30:30:78:bd:83:46:8a:9a:c6:94:1c:48:38:
                    1c:32:6b:68:bc:cd:d6:e7:28:a8:2a:f4:02:cb:25:
                    fa:c4:a8:bb:86:3c:5e:2e:39:3b:97:4a:81:ea:a5:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7A:70:1F:10:9B:D5:83:31:AD:B9:4E:65:43:32:50:FB:2B:20:45
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/34352e362e312e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:e6:e5:24:b3:63:c8:2b:ca:14:39:a8:f9:5e:00:dc:32:70:
         72:bc:f0:97:67:92:09:84:bc:0a:39:6d:6a:6c:59:9a:c3:f0:
         45:b0:52:f5:7e:95:b7:98:4f:cd:bc:4a:d9:ce:57:31:70:4a:
         ab:eb:9d:f4:e8:39:20:a2:cf:b0:2b:74:34:3c:74:55:9c:c1:
         ea:3b:de:0c:cb:00:3d:ea:62:d2:1f:13:bc:d5:8a:1b:1d:11:
         4a:43:74:0f:b1:46:30:19:b2:50:21:6a:9b:f6:76:0f:07:56:
         13:95:2f:f8:fe:f3:50:ad:b5:f8:c8:c9:48:29:4a:dd:a3:5b:
         db:c2:35:d0:a1:64:0a:f2:30:0e:3f:b8:e8:97:12:96:6d:1e:
         92:55:96:12:38:40:95:10:9f:6c:bc:8a:e5:8f:a7:29:1f:92:
         7b:38:92:81:90:82:51:c3:5b:4f:fd:2a:c5:02:01:7b:ea:7d:
         72:49:83:5b:23:f7:f5:ca:1e:57:2e:6a:70:0e:a1:41:51:97:
         81:0e:f3:c5:16:a1:5f:8d:64:ce:ac:78:61:8f:09:6a:e5:02:
         11:fd:11:8f:b3:0b:0f:1b:3c:de:78:27:bf:83:19:53:cc:99:
         28:6b:94:e8:43:88:cc:73:8c:71:39:1b:5e:60:00:9e:0b:cd:
         b0:25:68:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:48:05 2025 by rpki-client